Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File:                     MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier:          NSe4+IB0fb8ZHTybO4fr1CyobKbYHHUEbNUVooaGSFY=
Subject key identifier:   EE:0E:57:36:98:38:87:70:AD:72:D2:63:F3:AB:6E:C0:01:11:73:B5
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer:       /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial:       0870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number:          0863
Signing time:             Thu 16 Apr 2026 20:44:45 +0000
Manifest this update:     Thu 16 Apr 2026 20:44:45 +0000
Manifest next update:     Thu 23 Apr 2026 20:44:45 +0000
Files and hashes:         1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: y9U2NMcDfllEQvr5rdOrLdraqqouCykAo4d1jgcIZh0=)
                          2: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: Qa3ZVxRSqepvqAijHMmNtkgWygbAStjiNRtfVCddju0=)
                          3: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: Uu6AEGb9CiGHN959DbqeYaM1DkPA9Jem7FwDPZtzV0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
        Validity
            Not Before: Apr 16 20:44:45 2026 GMT
            Not After : Apr 23 20:44:45 2026 GMT
        Subject: CN=69e14a3d-d960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:2f:c9:08:3d:1c:6f:6d:10:0c:92:1b:3c:
                    66:de:18:c8:76:7d:84:26:31:5a:70:ef:83:77:50:
                    14:fd:b6:62:fd:ce:8a:34:f9:56:d3:43:51:90:ac:
                    27:a4:7a:8e:a7:2f:79:23:07:78:b6:1b:e3:78:05:
                    b3:80:b2:14:0d:18:51:2a:88:ec:57:ca:00:4e:cc:
                    47:fd:70:5e:ae:20:79:96:66:7c:72:10:1b:f6:41:
                    ec:00:f6:0b:c2:fb:32:a3:b9:a5:15:8e:72:9b:f1:
                    c8:67:cd:c9:04:99:05:23:08:df:40:3a:cc:5f:25:
                    85:4f:e7:01:7c:ae:a7:7a:2c:f8:f4:82:9b:d4:e3:
                    22:8f:dd:f9:70:11:47:15:5c:80:ef:98:fe:b0:f2:
                    09:dd:df:fb:82:85:10:1f:72:6c:d1:13:e3:68:f8:
                    6e:a2:ee:34:93:d6:ee:fe:d4:f0:84:5c:ed:ba:63:
                    3c:6d:e6:7e:1c:3c:4a:fe:fa:1c:9c:94:6a:d9:ae:
                    1d:42:27:29:1d:d9:be:2c:2b:7d:e3:0e:72:54:d9:
                    94:10:09:2e:43:39:b3:a8:70:2b:fa:8a:43:5e:9a:
                    37:5c:3f:61:3d:0e:ff:8f:3c:08:97:8f:08:59:e5:
                    f8:06:0a:ee:c3:0d:57:2c:2a:b9:f5:6c:c9:1d:34:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0E:57:36:98:38:87:70:AD:72:D2:63:F3:AB:6E:C0:01:11:73:B5
            X509v3 Authority Key Identifier:
                keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:99:7e:23:83:60:d0:d1:3a:2b:55:aa:0f:1c:02:6b:00:a6:
         23:e3:bf:10:aa:68:50:c0:02:f6:1b:27:16:25:db:69:9d:28:
         cb:55:3f:e9:1e:9b:59:66:2e:6e:a8:cc:09:82:49:13:30:e0:
         d5:9b:eb:4e:e5:cd:99:63:ed:97:b4:99:0e:b3:ba:4a:81:3d:
         2d:f1:41:40:26:11:47:4b:7f:40:6b:63:08:c2:d1:a2:97:ec:
         3f:03:53:40:cc:f6:92:f2:1d:de:57:0e:3c:a9:48:02:c5:80:
         57:90:4d:f5:e3:75:df:a5:39:c1:ee:33:f7:43:28:62:30:0b:
         ef:6e:99:ef:e5:8e:9f:45:ff:10:9d:c8:cb:9c:69:65:1f:d6:
         a6:6a:44:20:78:49:42:fb:80:48:01:0e:29:4a:f1:be:62:d4:
         5f:c3:b7:19:f6:4a:2b:d7:3c:89:47:d8:c0:3b:a4:fe:7f:ef:
         35:27:a6:77:c5:8b:66:82:12:b4:7b:06:b3:cf:b0:4e:5b:db:
         57:97:4f:0e:26:d8:99:44:ad:20:71:d1:85:e4:58:3e:4b:4d:
         e3:52:f0:95:0b:30:11:54:9b:23:94:44:f8:94:c2:75:9c:b6:
         8f:96:18:b4:85:09:c8:ba:ce:37:eb:5b:88:7b:3f:40:97:70:
         0b:59:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:38 2026 by rpki-client