Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
File:                     FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json)
Hash identifier:          Ak2GQU9LNw9qkdMyhl2euqAa/QovQ8ljWPMBSv2d4vI=
Subject key identifier:   C3:94:05:47:69:AE:98:02:4F:FD:55:3E:3D:23:5B:28:5A:EB:D0:1A
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Certificate issuer:       /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
Manifest number:          070F
Signing time:             Thu 16 Apr 2026 22:04:33 +0000
Manifest this update:     Thu 16 Apr 2026 22:04:33 +0000
Manifest next update:     Thu 23 Apr 2026 22:04:33 +0000
Files and hashes:         1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: yU7bWQLnYcNdTcTcEY6AyG10HT/+y9UQkzFx8gAZaXA=)
                          2: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: z0fLJQFH8t8Smme2/KAKJw4nnTJUoeut+TaoQvq7pl8=)
                          3: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: 5Azeat64UaJSRzDOM2P6Kkkb+THHbSMAWvM1sc789yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
                          rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
        Validity
            Not Before: Apr 16 22:04:33 2026 GMT
            Not After : Apr 23 22:04:33 2026 GMT
        Subject: CN=69e15cf1-e49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:cb:5f:29:fb:93:ed:74:2d:26:fb:90:70:
                    b6:dc:a9:f9:fc:64:9d:7d:3c:3a:ee:9f:b3:ac:1c:
                    48:86:e1:58:33:f4:c9:0b:e3:2b:f2:4f:ac:f9:72:
                    62:23:55:71:c7:ed:ec:e3:9e:94:ee:62:18:f6:e8:
                    37:64:f3:65:0d:bb:32:f6:c5:d3:f4:ff:9a:4d:6d:
                    2e:5b:5a:67:b0:a1:be:a5:de:7d:8d:55:12:a9:65:
                    7e:55:c6:73:79:29:7c:21:53:6e:b1:68:43:43:e0:
                    93:15:5a:49:e6:36:70:bd:fd:d1:5f:4e:a7:22:74:
                    00:5f:36:5b:4a:83:b3:7a:aa:53:5c:56:80:a9:f9:
                    8c:eb:b2:e2:40:0c:5b:30:47:4f:5d:36:1c:f9:0b:
                    fd:0a:5c:dc:1e:3a:4a:2c:c0:66:75:22:cc:bb:dc:
                    57:43:93:e6:9c:d0:57:3f:67:6e:dd:46:f0:6a:e8:
                    a9:e9:05:dd:b6:d7:c9:cf:23:1b:df:8b:5c:01:3f:
                    b8:3f:7b:31:78:36:a4:16:3e:32:3d:f0:6b:be:0d:
                    02:84:07:06:e0:a1:c7:3c:34:7b:85:ee:1c:79:a7:
                    9b:b6:3c:9b:d5:60:90:ed:c0:d1:c0:8b:e4:e0:48:
                    9e:d3:71:20:32:ae:04:45:dd:22:7c:b4:a6:34:e5:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:05:47:69:AE:98:02:4F:FD:55:3E:3D:23:5B:28:5A:EB:D0:1A
            X509v3 Authority Key Identifier:
                keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:de:fe:4e:66:a2:66:82:4b:3a:b7:88:6a:24:d5:13:e3:99:
         7a:8e:01:22:ce:6f:04:ce:f0:27:bf:8f:be:ed:f3:fb:58:9b:
         17:a0:ea:7d:47:35:9c:04:f7:bd:29:3d:84:d8:30:5a:14:43:
         6d:04:b9:34:83:24:bd:51:e9:21:e4:b5:46:2d:2d:b0:d2:4f:
         28:ae:24:6f:3f:ab:6f:37:eb:d9:6f:08:04:60:46:ab:37:de:
         f2:fc:a2:f6:66:cc:90:49:e3:e9:5a:8d:64:83:4a:1f:a9:1b:
         6b:e4:8c:af:66:94:31:9a:46:6f:38:e4:45:72:ff:60:9e:c4:
         ae:9a:d0:3c:a2:12:73:05:67:08:18:e0:f1:0e:89:c3:6f:59:
         e0:2c:2a:85:82:ca:02:a4:d0:82:98:88:a5:d1:73:50:f9:11:
         0e:90:8c:e1:e8:eb:22:0f:28:06:d7:f2:91:25:15:b7:ab:c5:
         31:c3:66:90:74:3a:70:b7:0d:8f:aa:3d:e3:d5:f4:6b:7e:f7:
         ec:86:e2:80:08:62:ba:32:76:fa:cc:1d:dc:fa:2a:da:3b:f3:
         77:05:db:31:8d:7f:52:de:60:fe:6e:98:e3:2f:68:d7:b0:1b:
         5c:57:5c:68:46:04:3e:af:81:5e:1d:ef:9d:ce:12:ab:e9:d1:
         99:76:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:42 2026 by rpki-client