Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File:                     loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier:          PnIT8B69LwmTBOibV6xZ9jh5eh7VTIaL2NxmntEkfwU=
Subject key identifier:   A1:AB:61:DE:E0:F7:25:44:7B:02:F9:4B:F3:AE:67:89:74:D5:5C:43
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer:       /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number:          013C
Signing time:             Wed 15 Apr 2026 04:56:13 +0000
Manifest this update:     Wed 15 Apr 2026 04:56:12 +0000
Manifest next update:     Wed 22 Apr 2026 04:56:12 +0000
Files and hashes:         1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: 0RNzc+pnb8SdI/T9tQ3sVjc0z9MHg1RNrdR9la8Ex0Q=)
                          2: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=)
                          3: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
                          rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
        Validity
            Not Before: Apr 15 04:56:12 2026 GMT
            Not After : Apr 22 04:56:12 2026 GMT
        Subject: CN=69df1a6c-5012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:23:40:a2:df:a2:5c:99:2f:b8:c3:02:7b:
                    a6:ab:0a:b1:89:8a:93:ad:65:65:b5:d7:f8:ed:07:
                    73:4e:8a:3b:cf:45:99:00:a7:8d:16:d5:f6:5b:05:
                    14:bc:41:f4:b8:32:b7:cf:c2:c4:0e:b5:84:f1:21:
                    d7:2e:35:78:59:14:2c:8b:9d:28:2b:46:0c:3f:12:
                    cf:f9:81:55:d6:62:fc:18:80:bd:cd:28:22:50:97:
                    89:c5:5d:8d:c1:2e:79:22:28:f5:0e:cb:32:50:2b:
                    a6:a4:38:b8:0e:d7:c2:2c:f0:52:6b:1b:07:ad:7e:
                    23:2b:78:b9:f3:ab:dc:ac:7e:71:f5:83:77:0d:41:
                    40:e1:bc:ff:63:bc:22:e4:56:b4:cd:ce:37:e9:32:
                    d2:f1:3f:a0:04:13:60:88:90:56:74:01:f8:fd:23:
                    db:57:ef:b2:b5:59:06:7d:15:b8:d8:db:f1:c7:44:
                    47:fe:68:aa:c6:ce:5d:38:fb:d3:b9:39:5b:3a:96:
                    52:20:59:61:a4:d1:76:00:ff:aa:db:86:c2:4f:7c:
                    ae:5d:0e:bd:5d:1a:f3:d9:9f:de:77:c6:ac:90:a9:
                    02:ca:92:9c:18:47:47:85:11:33:cb:3a:fd:64:19:
                    e0:94:36:94:34:be:5e:15:07:0a:bf:9e:90:bf:46:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AB:61:DE:E0:F7:25:44:7B:02:F9:4B:F3:AE:67:89:74:D5:5C:43
            X509v3 Authority Key Identifier:
                keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:58:0a:8a:87:6f:f5:ca:3f:4e:99:69:f5:dc:58:25:07:58:
         55:b7:a2:0e:9a:37:9b:7d:3d:10:9a:b8:38:67:19:bc:5d:9e:
         2b:8e:2e:49:78:21:ba:72:e7:32:81:58:90:2a:ff:e7:3c:9a:
         fb:5e:f8:35:8d:3b:0c:26:67:2b:32:ae:63:3f:c7:a7:11:f5:
         ed:e3:ae:04:cf:c4:e0:d1:22:e5:af:e1:06:06:f8:cf:f0:9a:
         83:9a:15:38:d9:19:21:bf:5c:13:54:50:30:5c:b6:b1:d7:3c:
         a3:1c:80:9d:3b:dd:39:15:01:55:59:04:76:4f:4b:5f:5c:40:
         d3:63:2f:af:45:f1:db:c9:48:af:41:c4:47:c2:53:64:a6:a1:
         cb:75:ca:5d:db:b6:ed:0d:fb:29:3c:2f:28:80:f0:a9:f5:d4:
         15:08:15:6b:0a:8d:13:52:77:d9:25:de:81:2e:6b:f5:89:80:
         5c:fb:c7:64:ca:21:22:d3:42:98:b1:b7:18:cd:f6:c0:34:c0:
         c0:bd:07:db:9f:fe:62:62:0c:f9:c0:c1:f6:cd:0d:6e:67:23:
         0d:93:79:69:44:de:c8:91:7d:52:01:20:d2:73:42:5d:70:64:
         7a:c1:55:83:67:f6:fd:e5:9d:0f:45:14:81:dc:90:32:37:ca:
         fe:f4:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:55 2026 by rpki-client