Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
File:                     a0-8524QyfbwCQHlAC-OEPPpr38.mft (raw, json)
Hash identifier:          HdxId4Gs9ZQPYHaOjmAkaRsGGPZcRtTxw0uMmr5z3+I=
Subject key identifier:   50:AB:26:06:38:16:03:B9:DB:B9:D5:9A:82:40:48:C9:87:D1:40:81
Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F
Certificate issuer:       /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
Manifest number:          16
Signing time:             Wed 15 Apr 2026 08:34:27 +0000
Manifest this update:     Wed 15 Apr 2026 08:34:27 +0000
Manifest next update:     Wed 22 Apr 2026 08:34:27 +0000
Files and hashes:         1: a0-8524QyfbwCQHlAC-OEPPpr38.crl (hash: vm/prRU79rldqziG+10OXFYoOHh9+HF1GcftwGdSQKY=)
                          2: 05CB75D01B4E11F190BF0D05243D8C67.roa (hash: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl
                          rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
        Validity
            Not Before: Apr 15 08:34:27 2026 GMT
            Not After : Apr 22 08:34:27 2026 GMT
        Subject: CN=69df4d93-a171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5f:5e:91:e0:a9:8f:af:c6:97:23:8c:71:a7:
                    40:14:08:84:bd:02:c4:bf:8e:13:f1:e1:d2:6b:03:
                    ea:ab:90:3d:7d:96:78:5c:f4:ee:0c:d4:c2:79:ca:
                    87:60:ef:1f:07:3b:85:81:67:85:19:b4:82:61:c7:
                    03:1d:ce:97:62:5c:f6:91:2a:92:14:46:fd:ce:43:
                    68:a7:33:8e:f1:15:5e:60:ee:dd:b4:2e:9d:12:1c:
                    ad:bc:75:f2:3d:41:b5:58:77:53:61:ad:73:d3:00:
                    bc:72:88:1c:50:9c:72:72:f0:aa:56:e9:4c:93:21:
                    2f:8e:bd:d1:f4:ee:02:85:b9:74:38:af:ee:4f:fd:
                    0b:c4:89:ea:c8:d5:dd:53:96:2f:b0:9b:0d:88:54:
                    dd:bd:75:1c:bc:d3:09:19:ea:10:ef:d4:68:d2:d6:
                    a1:88:a5:74:c8:45:6f:ac:73:47:74:dc:58:a4:98:
                    fb:32:a9:67:2e:c2:15:2e:78:a4:85:91:62:40:16:
                    32:9f:00:05:20:20:70:92:c0:6c:de:60:b8:b6:37:
                    ae:0e:fc:72:3d:07:3c:cd:12:5c:28:a8:6a:c0:0b:
                    9f:19:7e:f6:ef:8c:1e:13:4f:b2:d8:78:bd:9a:3e:
                    1b:91:26:52:2d:a3:1d:cb:18:8c:80:3f:f8:2f:11:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:26:06:38:16:03:B9:DB:B9:D5:9A:82:40:48:C9:87:D1:40:81
            X509v3 Authority Key Identifier:
                keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ec:87:6e:a1:26:15:24:4a:9a:51:56:45:4c:34:9f:16:5f:
         ac:d9:c5:4e:ca:19:f9:b1:6e:2f:ec:44:6f:3c:d2:7e:1e:5e:
         ca:6f:22:6c:61:8e:87:7b:6c:95:19:0b:85:81:e6:48:db:33:
         2e:b0:2b:11:04:99:c3:fd:21:c6:6d:e6:b8:de:a0:af:ce:1c:
         2d:e5:36:74:df:f2:d0:c0:f0:d0:32:bb:56:12:98:7f:77:35:
         d3:a5:1d:46:cf:56:07:84:f2:7c:aa:c3:a5:8a:42:67:d1:59:
         e4:f9:97:1e:0a:4d:e2:a3:cd:12:1c:4d:b2:5c:a6:7d:b3:36:
         61:14:91:e9:e3:4a:ef:13:45:8f:0e:3b:3b:e1:92:7e:f0:e8:
         97:a7:f2:7b:8c:87:e3:e5:8b:20:0d:06:58:43:65:2d:af:21:
         17:11:45:27:9c:6d:35:3a:e6:b9:49:e3:27:74:b6:41:38:1b:
         26:f1:7b:6e:1d:5a:2c:d5:c1:09:a0:78:50:bb:07:fe:91:5b:
         77:27:8a:7c:74:08:ae:e3:26:56:ff:6d:de:4d:41:2c:cb:ad:
         97:7c:00:15:fc:f1:1a:ec:f1:f5:06:19:99:15:d1:4c:e0:9a:
         08:f6:7e:6a:32:6e:79:78:88:19:0a:43:be:e1:9f:b3:95:9f:
         9e:14:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:26 2026 by rpki-client