Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
File:                     rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json)
Hash identifier:          VlgGLCKCx04alq1HM+c6gJVUY+UB8MUspfMt8vwog1M=
Subject key identifier:   64:3E:B1:17:19:94:89:DC:DA:F1:D3:36:67:9B:F2:1B:A5:92:E1:00
Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
Certificate issuer:       /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Certificate serial:       08B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
Manifest number:          08A9
Signing time:             Thu 16 Apr 2026 20:25:23 +0000
Manifest this update:     Thu 16 Apr 2026 20:25:22 +0000
Manifest next update:     Thu 23 Apr 2026 20:25:22 +0000
Files and hashes:         1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: vR5Fi7wmSHsg7u2LIyiyqQlWUzjPHsIwUrdGY+mO/4s=)
                          2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: vNsxw0QyIyijT8fEK/xaUyiuFQdDNw7cfAxOqXgV9jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
                          rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
        Validity
            Not Before: Apr 16 20:25:22 2026 GMT
            Not After : Apr 23 20:25:22 2026 GMT
        Subject: CN=69e145b2-e757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:77:6d:88:4b:92:0f:e1:8d:1a:f2:59:f4:81:
                    70:39:9a:7e:6e:6a:89:19:4b:58:e7:6f:9d:3c:b6:
                    bd:56:3a:ec:60:f9:0f:05:6b:77:bf:77:00:3b:9c:
                    ef:07:f8:32:be:30:45:57:b6:54:91:2d:40:53:a3:
                    f4:71:0e:9b:0a:e2:89:24:e6:6d:ec:1f:67:3b:09:
                    bb:4c:5f:79:10:86:25:50:0a:0b:9f:9c:79:64:ca:
                    fd:2f:2b:cb:de:9f:9f:97:27:75:5e:e2:a5:cd:be:
                    99:26:0e:2e:f3:52:e9:02:df:bf:36:4f:38:41:b5:
                    d3:b2:fe:b1:e8:e3:07:f6:7b:f5:8c:fa:5e:1d:e4:
                    2e:dc:38:18:bc:d8:dd:42:90:cd:fc:3a:b8:b2:83:
                    47:4b:67:7d:98:7d:f6:9a:dc:88:38:21:fd:1a:10:
                    83:62:15:75:3d:6d:38:d0:bf:2a:79:d1:f8:67:c2:
                    2f:dc:4f:df:d6:56:b0:4b:d6:f4:18:82:db:90:29:
                    16:01:8d:97:cf:2b:60:fe:79:60:57:a1:b7:bc:ba:
                    ce:9c:e5:04:9d:9c:4f:f1:f5:8e:f7:7d:02:1b:dd:
                    dc:15:50:f4:69:98:25:9a:cd:f2:4a:16:05:79:62:
                    06:5d:6c:fe:18:7b:9c:3b:5a:fc:c1:2c:b9:1e:47:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3E:B1:17:19:94:89:DC:DA:F1:D3:36:67:9B:F2:1B:A5:92:E1:00
            X509v3 Authority Key Identifier:
                keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:dd:79:74:3c:bb:ed:ee:b0:c6:32:55:91:d9:9a:e7:41:2f:
         60:f9:ad:e2:29:48:b7:36:4e:92:51:ec:b8:ef:02:6a:2f:f2:
         74:4a:fe:b9:5e:ce:c5:ea:da:63:f5:ef:4b:b6:34:7a:ce:b5:
         e5:88:52:d2:fa:5b:54:93:b8:c4:24:41:6d:d2:ce:bd:66:f0:
         f8:56:d6:ea:9a:71:d3:dd:eb:a4:08:c6:c5:59:86:f0:66:2c:
         26:2d:e5:38:09:d1:86:1c:3f:10:45:2e:f2:8a:b0:39:c9:c4:
         d0:fb:60:73:1f:1e:fe:77:65:0e:6e:7f:c5:ec:3a:46:09:ea:
         25:6d:93:67:a4:99:cf:40:85:6f:ff:bb:31:9c:c8:0f:e8:2c:
         0d:27:89:17:9a:6c:81:43:09:21:da:4c:a0:7f:dd:1d:e0:01:
         c9:11:29:17:0a:01:41:89:64:32:21:d1:5c:72:6a:07:aa:97:
         07:e9:bc:e9:e3:91:27:c1:29:48:55:6e:62:73:ba:c7:a0:70:
         eb:63:25:10:46:ea:72:07:de:77:e1:f4:6c:ac:07:71:36:b2:
         9f:11:f3:01:6c:95:0f:15:72:71:ed:15:56:45:73:0b:e8:b2:
         eb:7d:35:ce:e0:59:99:9f:6d:fd:94:27:8c:10:61:76:85:0a:
         ce:ab:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:57:42 2026 by rpki-client