Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
File:                     phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json)
Hash identifier:          ze4K8XOXxuWBxDoEucnDyP4RkO1gerBj0XwXReq2fz4=
Subject key identifier:   A7:CA:1B:1B:94:3E:1B:EB:1F:58:6B:5A:C2:CD:5A:82:B9:4A:1A:81
Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
Certificate issuer:       /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
Manifest number:          015C
Signing time:             Fri 17 Apr 2026 04:40:43 +0000
Manifest this update:     Fri 17 Apr 2026 04:40:43 +0000
Manifest next update:     Fri 24 Apr 2026 04:40:43 +0000
Files and hashes:         1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: XdFzfA/XJPaqEI24hYZTNUCvOIc6VW9us+YNMY1j5Lw=)
                          2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: 5zSKSO1TFv0mTwgoY0ZOhZuFyBmGCxVoUvH/4Rl0pPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
                          rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
        Validity
            Not Before: Apr 17 04:40:43 2026 GMT
            Not After : Apr 24 04:40:43 2026 GMT
        Subject: CN=69e1b9cb-3812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:be:5c:32:af:f4:4a:57:8a:95:15:41:23:
                    bc:e4:9d:61:12:69:d0:a2:5b:a1:04:65:95:da:a5:
                    1b:0d:1e:ba:11:4e:49:d5:7b:05:88:50:f5:96:1e:
                    13:b1:b3:16:0d:9b:13:d3:0e:83:5a:37:e4:b7:90:
                    35:d7:37:86:7e:68:6b:84:68:d6:f8:a5:da:11:8b:
                    57:eb:97:d9:30:e5:9e:59:5b:37:56:16:f8:80:45:
                    dd:2b:db:02:55:74:25:d6:1b:9d:7d:79:30:94:89:
                    34:eb:c0:b3:3f:f9:f9:a1:c7:7d:2c:eb:fc:14:29:
                    cc:60:3f:2e:96:b3:e2:79:45:39:31:7e:9a:4c:fd:
                    a2:b1:7a:e4:9a:05:5e:83:e0:1c:8e:c1:69:38:20:
                    65:d3:37:af:77:b4:22:5e:ac:74:1c:3b:30:2a:33:
                    b2:7e:2a:5e:63:c7:d7:49:b0:18:22:b0:12:88:33:
                    81:2b:e3:74:f9:69:b9:cf:61:56:06:56:ca:af:3b:
                    22:9e:c9:2c:84:b4:5d:be:40:31:db:05:e5:a1:b1:
                    38:46:91:32:7f:9c:87:3a:3f:c0:ed:ce:e7:59:f7:
                    62:ed:0c:97:f6:ae:b9:38:6a:ae:7a:3d:c1:a5:d4:
                    b1:81:4b:cb:3d:38:2e:e5:78:ad:bc:0f:19:56:84:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CA:1B:1B:94:3E:1B:EB:1F:58:6B:5A:C2:CD:5A:82:B9:4A:1A:81
            X509v3 Authority Key Identifier:
                keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:78:53:b0:69:90:92:3d:d8:96:f8:86:be:a5:cc:a9:e7:
         fa:6f:36:e3:84:8b:68:2b:2b:d7:5f:c2:1a:48:5f:ae:c3:c2:
         64:f5:d6:e3:f3:a3:ff:48:9a:07:4f:89:aa:62:b2:2c:92:4a:
         1b:06:9f:18:46:35:d9:2a:32:c4:5f:c6:d0:d3:64:16:cd:48:
         c7:7e:f2:40:df:b2:89:bc:53:71:2c:1d:db:0a:96:a2:68:7c:
         3f:00:e7:ae:47:e1:ae:d6:40:99:74:9a:fe:3f:1e:8f:8d:39:
         db:4f:70:b4:f1:00:2d:3c:bc:1f:01:cd:ba:03:d9:d7:44:12:
         91:f3:60:76:e5:5a:40:e6:c9:2b:48:e1:dd:5f:d7:16:ed:7c:
         0f:13:7d:2d:3a:fb:b2:9b:07:02:e8:4d:03:36:da:33:71:5f:
         a6:9c:43:74:14:b7:14:bf:82:b6:15:e7:22:e7:5a:ac:1e:37:
         b6:3c:c9:02:dd:9f:50:6b:71:a1:b7:5a:a9:d1:6b:7a:21:d5:
         34:58:32:59:ea:9d:ad:78:f4:c3:dc:93:98:8e:87:07:f3:de:
         3b:86:43:2c:07:11:07:71:fb:d8:f3:87:1b:b9:b7:b5:72:82:
         0e:8e:70:55:cc:61:9a:2b:43:31:df:f7:b3:03:3d:f9:4b:2c:
         27:93:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:18 2026 by rpki-client