Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File:                     iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier:          XbGZXbD0zXT8Ch/ORpTkaHafwaEW2BKeBRQqBLs9u+U=
Subject key identifier:   F3:47:6B:FF:C1:4B:37:E8:41:63:66:C2:C1:13:64:98:48:C3:10:0E
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer:       /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number:          0105
Signing time:             Fri 17 Apr 2026 05:51:01 +0000
Manifest this update:     Fri 17 Apr 2026 05:51:01 +0000
Manifest next update:     Fri 24 Apr 2026 05:51:01 +0000
Files and hashes:         1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: 5LgmKxGR4R4i4Ik3JQUMRsu/SChhIh5w6Pa+DE5OY3U=)
                          2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
                          rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
        Validity
            Not Before: Apr 17 05:51:01 2026 GMT
            Not After : Apr 24 05:51:01 2026 GMT
        Subject: CN=69e1ca45-682f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:ed:ff:dc:20:43:34:86:a6:81:66:3e:72:
                    23:35:46:78:3a:46:c8:28:06:d8:cd:cb:64:db:93:
                    1b:05:55:24:1e:a8:13:3f:6a:ab:6f:2e:bb:f7:00:
                    1a:b5:da:69:af:6d:0f:a1:0e:0e:c3:f3:34:3c:1c:
                    87:36:bf:a5:a3:3b:dd:bb:39:5a:ff:26:c0:a9:1f:
                    c3:b5:5f:f3:ce:cb:14:1c:83:a0:0b:f6:ea:51:b1:
                    82:e1:48:08:8f:2f:2c:ed:68:79:3a:47:eb:15:9f:
                    cc:a6:2a:ba:ec:85:8e:5d:71:07:e5:5f:ec:f6:ab:
                    10:38:43:9d:98:27:3b:0e:af:43:40:64:f5:83:ed:
                    11:8d:27:28:22:3e:3b:0c:b4:a1:2a:82:25:ae:0d:
                    ea:ac:4c:d9:4a:be:da:38:d2:ea:c5:46:5c:02:41:
                    3e:d6:6e:8c:59:de:c3:bd:56:d0:a6:70:98:4f:52:
                    05:f4:27:ef:29:15:16:3a:dd:e8:51:a2:8a:77:2e:
                    83:6f:04:9e:fa:df:c3:c3:86:c3:a6:06:b5:5f:1e:
                    d7:79:89:3d:5a:31:2c:81:84:ca:f0:59:65:ab:7f:
                    79:82:de:31:3e:35:2d:ae:51:c9:88:93:14:68:d9:
                    f3:75:bc:06:91:5e:7c:b4:05:ac:2c:16:10:3c:30:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:47:6B:FF:C1:4B:37:E8:41:63:66:C2:C1:13:64:98:48:C3:10:0E
            X509v3 Authority Key Identifier:
                keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:fe:79:26:2e:f0:90:93:ef:39:13:4e:e2:f2:d4:8f:e9:
         d0:a7:eb:b1:68:7b:bc:00:ec:da:16:5a:d5:42:44:b2:02:b6:
         d3:2e:41:b0:32:86:7a:85:97:a8:a8:71:2d:4a:12:0e:77:e7:
         4f:a3:82:2c:60:68:f0:ba:49:68:6b:93:71:ad:e4:e9:8c:f5:
         ad:1d:4d:3b:68:3a:ad:0c:fb:de:8e:f1:82:d0:4d:fa:dd:d8:
         88:71:29:e4:1f:4e:1e:2e:58:a6:7d:87:0c:8c:95:0f:3e:34:
         94:69:8a:14:c7:2a:39:21:8a:3e:3d:9f:63:c7:0c:c5:85:aa:
         85:49:9d:b4:3c:c2:a4:95:b7:6a:a1:37:9d:3b:23:e9:b1:5c:
         77:a7:6c:10:9d:79:7d:42:40:0d:db:ff:c9:1e:86:b3:71:b8:
         2a:5a:d2:85:42:dc:6f:ca:32:6d:bd:73:a8:21:93:48:bf:22:
         02:9e:6a:2a:35:21:2a:df:24:ea:60:3e:02:a9:8b:79:3d:ab:
         f9:64:23:d3:8d:47:43:ca:cc:c3:63:82:07:29:ff:3a:dc:a8:
         9b:49:65:d1:ca:5c:f4:80:c4:48:27:63:d9:7a:57:5f:e4:ff:
         41:b3:29:70:c0:08:8e:95:7a:93:28:e1:03:df:da:75:5a:49:
         52:75:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:42 2026 by rpki-client