Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File:                     N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier:          o5P1evyTXoL1hbNhjQiXW6ID3AJ88Oe7a+L/2F9riXc=
Subject key identifier:   D6:38:A9:42:73:0E:DD:A6:8C:17:BF:22:5A:1D:E4:4A:4F:74:9D:54
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       05F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number:          05DA
Signing time:             Thu 16 Apr 2026 22:57:39 +0000
Manifest this update:     Thu 16 Apr 2026 22:57:38 +0000
Manifest next update:     Thu 23 Apr 2026 22:57:38 +0000
Files and hashes:         1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: fgqB1q6NaL0su3AU0lZYqWK3IvaEekOSuh7ymia/zdA=)
                          2: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: FDITcMkvJSfaNZn7WhepfOtYRd5cHo2QRoPeo3DYbKE=)
                          3: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: XYFuQnxpl7FqxfYyxe0uvP0uuoI6+uy9BrmnGH143F0=)
                          4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: 6BeZ+T2YK4xcHE67iF1LQq1UDXWYxRVhMGtHVY4KZKQ=)
                          5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: Ja29sSxE8KanVMjVphZgBthiKCRYqnTpDRjm76mlvD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Apr 16 22:57:38 2026 GMT
            Not After : Apr 23 22:57:38 2026 GMT
        Subject: CN=69e16963-4168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:8a:06:ce:3f:90:f2:19:07:40:c5:30:0b:
                    16:f0:90:1e:35:31:cf:91:3b:3e:4b:74:39:3b:5b:
                    c6:78:86:e0:d2:0c:b1:0d:85:5c:e2:66:43:a6:c0:
                    fb:0a:24:71:31:58:16:bf:8b:36:ee:b3:25:33:61:
                    42:14:2d:5b:eb:37:f5:ea:b4:6d:45:28:8e:42:47:
                    42:cc:5f:a7:f9:1e:76:a7:1e:3d:d7:12:45:5e:4e:
                    26:58:a2:fc:e6:bd:fa:17:04:df:75:7f:50:00:05:
                    4c:fb:33:4f:31:af:45:a8:96:a6:73:57:f1:25:84:
                    50:ff:f2:0f:6d:13:cb:b9:22:83:78:d2:81:84:46:
                    68:c9:32:ef:39:39:81:10:80:bc:53:52:f2:b3:5e:
                    57:ea:cd:1d:ea:69:0b:bc:2c:67:a3:19:dc:96:ab:
                    60:9d:a2:8d:ea:5a:a1:b0:39:5c:00:db:23:06:62:
                    91:ee:c5:f4:12:a0:59:8e:35:56:21:19:9a:04:c7:
                    dc:c1:5f:a1:81:6c:44:b3:53:c0:c5:9a:ad:ca:fc:
                    0d:c8:23:90:03:45:92:e2:94:df:2e:e4:fd:77:22:
                    80:86:8c:cf:5f:a5:2f:d0:f5:69:e9:96:d7:d8:0f:
                    68:06:a1:b8:1e:a5:9b:97:cf:87:cc:1d:2a:a2:41:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:A9:42:73:0E:DD:A6:8C:17:BF:22:5A:1D:E4:4A:4F:74:9D:54
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4f:66:9f:fa:37:d8:0d:f9:9b:c8:b1:07:a9:9d:02:13:c7:
         93:cc:2e:fe:a4:7f:b2:eb:7e:63:15:ea:97:67:9a:03:7f:1a:
         03:2c:51:30:76:6e:bd:9b:b4:7f:f5:f8:e0:59:02:a0:bf:8f:
         39:49:d8:2f:88:12:f9:35:19:43:98:9c:1e:5f:f4:18:3a:7f:
         05:1d:a6:2b:44:4c:5c:c1:62:cd:55:8d:d7:4d:7a:17:31:fb:
         06:2c:41:e8:d1:c9:88:d5:f7:d4:e7:84:d2:ec:cf:0a:17:be:
         53:47:95:ab:f8:23:9a:8d:95:e6:49:da:8d:98:48:92:5c:11:
         dc:6e:a9:ba:2e:ea:c4:10:5c:bf:d7:53:25:2c:7d:c2:23:93:
         f4:fb:d6:9e:7a:47:b4:a9:f2:6e:7c:3e:cb:e6:b4:42:60:24:
         11:d7:4c:f4:38:b1:82:22:3c:c8:06:7a:fb:57:53:93:f4:1c:
         fd:ac:28:bd:bf:9e:69:3c:7d:d6:af:5d:70:c9:40:d1:b2:14:
         39:73:53:2e:81:f6:4c:41:72:a8:53:f2:2f:53:96:60:47:53:
         8e:4a:8e:c0:45:ec:42:f7:90:8a:9c:98:ca:b1:49:a0:7d:cd:
         13:ea:d0:3b:c9:66:41:9b:63:04:3c:de:1d:cc:6b:bb:cb:3d:
         da:7b:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:21 2026 by rpki-client