Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          wsUxny2Whw6M8hdEXtGRTE/IZ66wU9R6RGDKcFDqoRM=
Subject key identifier:   0D:3D:6A:1A:1A:BE:01:EB:19:C3:CF:81:C5:E2:B0:4D:F5:AF:2C:EA
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          07EC
Signing time:             Thu 16 Apr 2026 23:10:04 +0000
Manifest this update:     Thu 16 Apr 2026 23:10:04 +0000
Manifest next update:     Thu 23 Apr 2026 23:10:04 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: bNb57WozaZg7YhuK03M2LbRm24RPSwokctEuKjmP+J4=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: Apr 16 23:10:04 2026 GMT
            Not After : Apr 23 23:10:04 2026 GMT
        Subject: CN=69e16c4c-576c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:1d:64:35:8e:7c:bc:06:8c:54:42:d9:b3:
                    b8:5b:bb:94:61:0e:ec:30:25:99:fe:33:7b:3f:75:
                    29:af:fa:84:43:b8:67:6b:13:c6:67:d5:4e:8b:24:
                    fb:b7:d5:1f:05:f9:7e:df:1a:00:8e:fc:99:51:fe:
                    21:88:72:1b:3f:3e:00:da:a8:94:a8:68:c8:0c:3c:
                    a4:04:87:8f:77:06:43:28:89:c6:42:66:dd:25:c6:
                    15:8b:f2:d5:c5:97:e5:fc:fe:0d:22:b8:f5:97:fa:
                    80:15:d9:a4:fc:d4:63:14:16:8b:d7:97:85:8f:0f:
                    c3:86:89:5d:aa:c3:35:b2:19:3a:b8:34:c5:0e:8c:
                    b0:df:f8:d1:93:c3:56:37:9f:ec:0e:9d:03:0b:45:
                    b7:d7:d3:68:63:1e:e0:8d:08:38:ee:b2:ba:09:4d:
                    eb:f6:c4:e0:27:f9:40:40:f4:03:74:ce:27:1f:9d:
                    93:06:8b:08:f1:eb:6f:2e:c9:27:96:68:07:62:f1:
                    89:8c:0e:61:59:91:f0:20:f6:62:ef:ab:af:5e:ff:
                    8b:2c:05:bd:9d:4a:44:5d:e0:43:81:f8:f1:df:20:
                    85:5b:87:58:a4:e0:27:ec:1b:52:5d:80:31:57:d6:
                    31:36:86:26:6f:98:cd:c3:81:28:6d:0a:35:5a:a7:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:6A:1A:1A:BE:01:EB:19:C3:CF:81:C5:E2:B0:4D:F5:AF:2C:EA
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c6:e7:e4:e9:20:b0:6d:6c:2e:af:77:85:31:f0:a0:fd:fc:
         b0:d6:a2:08:06:d7:b5:f6:e4:45:34:52:65:b5:75:b6:c3:3d:
         ee:e4:c5:43:fa:55:a3:04:dc:31:53:f6:65:30:16:80:bb:ff:
         e5:6f:48:2d:f7:93:86:e7:15:13:e7:01:75:a0:9d:ca:0f:34:
         ae:31:51:7f:d1:c7:ad:56:86:3c:f0:a6:44:61:6f:ed:45:94:
         b9:57:0c:a3:b8:1e:dc:4a:d4:18:6a:2a:16:2f:7c:4b:00:d3:
         89:6c:6f:3d:88:47:3a:42:46:42:b9:14:5e:b8:d4:5b:2c:96:
         d1:cc:58:b9:06:d5:c6:75:5c:ca:34:70:de:97:86:4d:98:1c:
         d9:3f:9b:fa:29:22:72:71:dc:27:31:5b:06:f7:e1:9f:91:64:
         8e:63:e0:c4:3c:96:ea:f7:69:e8:f6:d6:20:f7:49:16:4b:0e:
         43:d5:98:2a:bb:c4:e9:dd:a6:62:e2:a7:9f:d9:25:ae:c9:55:
         ad:ce:1d:d4:19:81:b5:3a:b1:35:3b:5c:46:5d:dc:9a:fb:66:
         5a:d1:67:1c:18:28:b4:06:d4:fa:84:a2:18:44:f2:19:51:c7:
         68:06:8c:00:54:8b:0f:02:7f:a2:68:22:3e:d5:b1:2c:d9:f3:
         3a:99:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:36 2026 by rpki-client