Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
File:                     c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json)
Hash identifier:          Zve4Bo7u6RQ5BNir3pHau+mqZJdlvVyTsexU3DM31Pc=
Subject key identifier:   3E:2F:BB:E5:58:ED:CD:F8:09:0C:82:1A:AF:4E:87:94:F2:07:26:9C
Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03
Certificate issuer:       /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
Manifest number:          0257
Signing time:             Fri 17 Apr 2026 02:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:26 +0000
Manifest next update:     Fri 24 Apr 2026 02:01:26 +0000
Files and hashes:         1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: eCyDaT7enUmIE5vSiDfvPZleJ/IeDo+HDYO6Rrae1Ps=)
                          2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: GbmFJbbelNZSeQtz3x+IHWFg+LPNIaQa4LtKPhQUg28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl
                          rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
        Validity
            Not Before: Apr 17 02:01:26 2026 GMT
            Not After : Apr 24 02:01:26 2026 GMT
        Subject: CN=69e19476-42a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:71:38:cf:f0:7f:eb:8b:8f:22:df:95:7b:
                    d1:be:35:ef:53:4c:f5:71:fb:ea:8e:31:26:c1:05:
                    69:b4:59:da:a8:37:ee:5a:c7:7b:b8:a7:8c:06:a2:
                    bb:44:02:db:27:21:e4:bb:c3:cb:1b:9f:69:34:3d:
                    68:56:57:31:eb:85:8a:39:fb:db:fa:48:24:62:e1:
                    6f:73:13:7e:b0:c3:f4:63:ec:6e:3a:62:96:4f:0b:
                    aa:95:f9:fd:5a:2d:29:d3:70:8d:e1:98:53:d4:85:
                    1d:35:12:74:59:2d:6e:2f:74:2b:28:d5:8a:a3:86:
                    ea:5c:97:f3:ee:59:10:57:5e:4c:90:93:8e:ae:dd:
                    c9:c8:5b:e4:4e:84:e7:63:37:ea:6b:69:8d:d0:23:
                    64:b3:2e:9b:d3:a1:14:43:4b:fa:d8:01:51:c9:73:
                    f6:2e:fc:7c:91:c0:c5:57:21:25:c8:25:1b:5d:f1:
                    23:94:db:74:b5:a3:15:7e:10:cb:a5:d4:79:df:30:
                    2c:f0:4f:a9:6a:c3:96:22:39:8e:df:42:28:3e:68:
                    45:4c:b9:66:8f:d2:b5:f3:50:ec:b1:ef:8e:fb:fa:
                    3d:bc:97:f1:5a:b9:82:2b:27:0d:8e:d5:3d:2e:dd:
                    e3:b8:cd:fa:90:e9:52:2d:04:b4:2c:d2:63:42:70:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2F:BB:E5:58:ED:CD:F8:09:0C:82:1A:AF:4E:87:94:F2:07:26:9C
            X509v3 Authority Key Identifier:
                keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:83:7d:4c:e4:5f:42:e7:3e:bf:bb:8c:85:37:66:ef:ca:e3:
         07:80:82:22:0e:df:6c:96:12:9c:cb:3b:6e:01:d7:e6:61:70:
         88:fc:c9:c3:70:cf:2f:02:b2:2f:a2:91:e0:c3:d7:6f:5c:5e:
         db:73:21:b8:a8:d7:bf:44:d4:64:43:94:b9:d5:8a:14:98:fa:
         66:ba:9c:ed:e1:c7:f5:a9:bb:00:e7:e6:8d:bc:9c:ab:9b:09:
         17:b7:ef:6b:77:eb:fe:c7:ff:74:81:b9:d0:f5:d4:ce:84:15:
         ed:de:4d:eb:3b:e1:68:8e:47:95:86:36:4a:e6:77:d3:2c:7b:
         04:f6:df:d6:d4:f3:c6:85:ab:78:a0:df:36:1f:88:0b:79:dd:
         51:71:b2:50:7a:eb:ba:67:1e:a8:e5:e5:a9:06:3d:cb:54:f4:
         b0:19:6e:45:57:e7:4d:71:a2:02:b4:b6:70:2b:45:af:30:59:
         6a:60:7c:eb:26:38:ba:56:a6:63:e4:c6:4b:67:fc:b6:b9:36:
         02:be:ba:fa:b8:42:3f:c6:58:05:d9:5b:8d:03:91:c8:41:50:
         82:f4:3f:f3:6c:ac:50:b9:5a:8e:8e:aa:c4:bf:a3:5f:02:5e:
         f7:e4:28:cd:98:c7:d5:51:f9:b2:95:5f:b4:42:39:72:85:9b:
         52:63:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:33 2026 by rpki-client