Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
File:                     4mZe42LlzFj31n9Ka3YhqkYL044.mft (raw, json)
Hash identifier:          VgVE9IWl/ekWyBgY7wprbn9D9xzN4+D6bBri9XnH5hw=
Subject key identifier:   BD:C6:7C:9F:30:22:20:9B:DC:A5:FF:F2:B6:50:AD:28:E5:75:87:F6
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Certificate issuer:       /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial:       0829
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
Manifest number:          0815
Signing time:             Thu 16 Apr 2026 21:27:04 +0000
Manifest this update:     Thu 16 Apr 2026 21:27:03 +0000
Manifest next update:     Thu 23 Apr 2026 21:27:03 +0000
Files and hashes:         1: 4mZe42LlzFj31n9Ka3YhqkYL044.crl (hash: 68R1eGebqEI1lIAsclGBpGo2tFcq2zOBVFtTMRLLXcA=)
                          2: D57EF608BC6C11F0894F2331C4F9AE02.roa (hash: f8pFfqOlKwbMcOlsLYiaoXkLN8x81tbb8jp/DlYQckI=)
                          3: C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa (hash: 18BOQVkvXKyICdOvY28gtv+H12kNh8iZyI0ncNzVj+4=)
                          4: C08B23401DA511EBAD78BB46C4F9AE02.roa (hash: 6dxQbscKD9BpisiGIvmhEruYks1OCWVGKkbkjxYZYu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
                          rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
        Validity
            Not Before: Apr 16 21:27:03 2026 GMT
            Not After : Apr 23 21:27:03 2026 GMT
        Subject: CN=69e15428-75c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:66:d0:1e:0f:98:31:e6:2f:7a:36:91:7a:
                    44:84:c7:08:3c:03:cd:89:c2:63:e9:ea:12:d1:8a:
                    29:b3:7f:13:2d:be:7a:5a:1e:89:51:e2:72:c8:ae:
                    07:19:84:19:36:63:f7:2e:cb:dd:4d:79:8a:cf:0e:
                    cc:c5:e1:92:af:52:f5:85:03:93:e9:f7:14:33:1e:
                    14:39:30:1c:6f:2c:59:68:24:c7:f7:b3:46:d2:36:
                    5c:b8:a2:67:ec:a9:29:2a:91:3e:21:00:0c:ea:61:
                    6c:2d:bb:e0:de:7b:bd:b7:f3:a2:1c:61:79:be:af:
                    a1:e4:22:90:11:c7:26:c3:5a:9a:44:57:ce:36:14:
                    95:53:4b:e5:94:60:b8:f6:59:16:67:41:88:c6:6b:
                    aa:0b:05:31:f2:9e:64:c7:64:2e:1b:31:3a:57:a3:
                    e3:02:17:ab:e1:c1:3f:e6:ef:ed:1f:1c:48:cd:fd:
                    5e:33:34:82:21:0e:a1:ca:a5:3c:82:e2:59:51:14:
                    59:d2:f9:40:15:41:60:e7:fc:fa:28:4f:30:48:07:
                    56:04:36:08:1a:12:a0:68:71:1f:7e:f7:ac:94:f6:
                    42:3b:04:85:8d:1d:a8:52:d4:fd:dc:a4:de:0f:c6:
                    a6:53:0b:93:92:d2:df:4c:f9:7e:f5:6f:a8:e6:c8:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:7C:9F:30:22:20:9B:DC:A5:FF:F2:B6:50:AD:28:E5:75:87:F6
            X509v3 Authority Key Identifier:
                keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:41:e8:a5:20:7f:c9:cb:f7:50:a5:29:87:89:7c:30:d6:
         bb:94:86:98:70:35:e2:5c:a0:0d:ee:68:5a:5e:38:05:10:ec:
         90:0d:e4:73:ed:0a:9d:89:54:24:5a:53:03:93:46:cb:ce:d8:
         7c:98:01:29:c2:98:91:18:96:a8:9f:27:13:2a:68:0a:92:66:
         e5:4b:0a:06:c6:bb:6f:9e:6a:09:e2:b2:5d:e3:e3:6e:5d:65:
         1e:1c:21:89:30:88:3e:51:b2:05:dd:3a:17:84:1c:2a:5c:90:
         ed:ca:cd:2f:f7:81:1c:e2:d4:b0:23:2d:13:7b:9a:5b:d2:29:
         1f:c1:63:2b:9d:1d:c4:f4:78:5b:36:65:65:c4:3e:c1:f5:61:
         4d:3a:74:6d:30:7a:86:6a:2f:5a:9e:f7:9b:e7:e8:e6:05:b7:
         52:d9:b6:da:ba:03:05:3c:17:e5:fd:da:1d:6f:9f:44:33:ea:
         74:d1:77:f0:da:ca:16:df:a5:77:a4:73:48:ad:75:5b:31:ba:
         f4:97:6a:6d:dc:68:7d:68:f8:b6:43:b2:a8:62:f4:c6:d0:f8:
         20:f0:0b:64:03:ed:d5:b3:3a:6d:25:7e:f8:d0:ff:2a:e2:c1:
         3a:fe:cd:d0:e4:44:bd:83:73:0c:9f:94:fb:a1:43:14:fa:0b:
         77:52:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:25 2026 by rpki-client