Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
File:                     RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft (raw, json)
Hash identifier:          XvRnknqOVIRPg34USi8AubFGiboVIqe8UbLJTxkGjfc=
Subject key identifier:   05:80:CF:15:4B:84:D7:4B:B5:16:23:31:64:9C:CD:57:EC:81:67:68
Authority key identifier: 46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
Certificate issuer:       /CN=A913647F/serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
Manifest number:          0121
Signing time:             Fri 17 Apr 2026 05:26:53 +0000
Manifest this update:     Fri 17 Apr 2026 05:26:53 +0000
Manifest next update:     Fri 24 Apr 2026 05:26:53 +0000
Files and hashes:         1: RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl (hash: Ol/ZA1KWRc4SUmKoBSP12g4gacOBjrjgI8370XaohnM=)
                          2: 88A6DB9086E211EF82ACA725C4F9AE02.roa (hash: cV0epGQTem/GEv7IIKubFOnRwGYNIWNxG9bk0ie+Eac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
        Validity
            Not Before: Apr 17 05:26:53 2026 GMT
            Not After : Apr 24 05:26:53 2026 GMT
        Subject: CN=69e1c49d-9872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:b8:2b:98:58:c5:70:5b:6f:02:60:d8:87:
                    13:3e:7a:02:66:d8:f4:43:6a:35:4a:f2:70:6a:72:
                    68:2f:72:69:a8:97:e3:87:bf:ae:a0:b9:03:44:db:
                    3f:0e:67:23:97:41:52:6d:9d:86:17:5d:fe:40:12:
                    b9:10:75:8e:81:0a:52:7c:35:3f:44:84:48:15:b6:
                    04:1a:4e:33:25:b0:52:01:70:26:42:5d:a2:ca:66:
                    f8:fb:7b:0a:07:f6:78:49:8e:c8:ab:5b:2c:f2:07:
                    07:aa:eb:f5:19:83:ec:3d:ee:1c:c4:b9:1b:01:d7:
                    0b:a2:44:39:d6:88:d2:18:44:56:b4:6e:65:ad:d3:
                    7c:9b:42:b5:ea:5e:c9:96:d5:ce:26:25:cd:db:4f:
                    26:9c:14:dd:0a:80:c7:09:db:d4:0e:16:80:75:24:
                    3b:a8:3e:60:e3:8b:43:28:78:8d:06:b8:75:51:d3:
                    27:15:76:7e:55:fd:57:d0:a0:b6:00:a7:47:e3:14:
                    bd:33:ca:a6:97:f4:aa:db:5b:21:2c:c4:74:86:8b:
                    40:f0:88:09:24:c0:97:b4:5f:b2:2a:c5:76:8c:46:
                    bf:9d:bd:a5:49:f0:ed:a0:f8:8c:7a:fa:3e:00:a4:
                    29:60:21:17:44:59:e8:ed:1f:b6:3a:49:2d:3f:49:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:80:CF:15:4B:84:D7:4B:B5:16:23:31:64:9C:CD:57:EC:81:67:68
            X509v3 Authority Key Identifier:
                keyid:46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:0a:cd:f5:da:61:70:28:66:7c:93:3a:73:f5:5d:2b:05:
         2d:cb:f0:62:78:55:56:3c:68:89:a3:0f:8c:08:d2:d8:79:c3:
         d5:19:3b:d4:6d:85:fa:45:59:46:b1:2c:a0:cf:dc:4c:39:16:
         59:ac:e4:2d:cc:bc:7e:61:9b:73:7d:9d:2e:d1:07:94:3f:af:
         4a:5f:4d:7d:cf:4c:29:b3:cd:26:a0:7d:4c:7c:2a:bd:1d:ab:
         99:39:d7:77:57:70:ea:79:88:5e:8b:4d:e5:24:f1:f9:aa:4b:
         9e:f4:b9:83:ae:b6:8d:5b:01:d4:26:d5:2c:e4:5d:a5:18:da:
         86:88:49:6a:88:d7:20:ef:49:f7:80:b8:b7:25:e9:59:1d:5a:
         ae:9e:f2:00:c6:ea:b6:e4:73:e6:69:ca:55:2b:91:40:aa:ae:
         90:f4:56:86:6b:8b:fd:62:61:c6:3a:14:52:c2:e0:22:b6:d9:
         12:31:7a:44:5e:30:41:41:9a:f2:ed:38:1a:13:5d:5d:20:50:
         6a:af:1e:1a:87:f8:bb:7c:78:b4:3c:0f:56:1c:36:c2:d0:97:
         23:a2:b6:f3:2f:40:00:10:59:5f:6f:0e:ae:35:c6:00:ec:66:
         91:a1:78:84:fa:40:56:82:17:e9:7d:b2:87:91:2a:da:53:92:
         46:15:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:55 2026 by rpki-client