Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File:                     4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier:          s7Jz9HHG8bnPAJShqnKM5sTpruWRa403G5lx8Ua6Kmc=
Subject key identifier:   21:FB:0D:F3:C4:38:23:40:19:F7:04:4E:3C:6E:C4:A8:1C:8C:12:12
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer:       /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number:          07F0
Signing time:             Thu 16 Apr 2026 21:08:34 +0000
Manifest this update:     Thu 16 Apr 2026 21:08:33 +0000
Manifest next update:     Thu 23 Apr 2026 21:08:33 +0000
Files and hashes:         1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: O9lSd29Qr28aYtIi+PqmOopoxCYu1fAwO157XOtsnco=)
                          2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: E6etJLs09jxCInikK/I6oSWS8vZ+7fWKirFeSQZQozk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
                          rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
        Validity
            Not Before: Apr 16 21:08:33 2026 GMT
            Not After : Apr 23 21:08:33 2026 GMT
        Subject: CN=69e14fd1-10f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:df:8d:6f:34:64:dc:0c:e6:71:5b:03:9c:7b:
                    28:38:8a:c1:6e:74:47:8a:88:01:01:92:ba:d3:72:
                    fa:41:47:08:8b:26:2f:df:81:1e:0f:b5:97:e7:8b:
                    bc:98:43:13:22:9a:93:b0:ec:a5:65:a6:a6:2e:30:
                    5b:79:06:c0:f8:99:97:4f:f3:fb:b9:2d:e7:f6:29:
                    cf:d7:90:3d:e8:68:8b:40:76:ce:bc:07:c4:61:95:
                    62:f7:49:1c:b9:d1:3d:cb:b5:c0:06:ea:ff:ef:c1:
                    08:c3:5e:79:da:50:84:06:3d:f7:f2:f3:2e:27:d9:
                    2f:f9:c2:9d:6e:ed:db:bf:75:5e:2e:24:6a:e5:3f:
                    e1:a5:53:c6:13:9c:37:c6:fd:c5:79:dc:e5:5c:c5:
                    d9:79:90:2e:6c:6e:01:43:c6:ce:94:6f:c4:f6:75:
                    85:a1:6b:cb:59:8b:0b:d6:78:32:28:7e:4e:02:02:
                    ba:91:d4:3a:68:ba:a0:b2:6d:5b:96:bf:17:22:a8:
                    8e:7f:cc:49:f1:5f:0e:2c:1d:6e:83:52:a9:e0:d0:
                    48:e6:21:90:cb:ef:a2:55:2f:22:ee:c7:fb:46:93:
                    00:cd:03:4a:1e:5e:35:2a:d3:17:64:b7:fd:70:e5:
                    53:9b:ec:70:43:2a:fc:9e:9c:30:92:cd:34:cd:bb:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:0D:F3:C4:38:23:40:19:F7:04:4E:3C:6E:C4:A8:1C:8C:12:12
            X509v3 Authority Key Identifier:
                keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:ce:cc:45:9e:9d:76:9c:3b:3c:bf:d0:a3:f5:c5:04:25:
         24:e0:54:03:3e:b1:7b:79:50:c6:df:c0:e1:c2:fc:12:d1:75:
         3f:2f:df:3b:cd:80:2f:07:b7:05:8f:c5:f4:96:88:11:90:c6:
         8f:1a:94:7e:24:ad:d8:1b:f6:1d:e7:01:1d:c2:29:b4:60:84:
         45:b6:60:99:8c:b1:cd:70:39:c8:b5:35:4c:31:65:14:7c:52:
         73:17:ef:c7:ce:ca:99:a2:a4:cf:d9:61:61:f9:aa:ca:0a:07:
         54:5b:60:cd:11:89:a8:76:ec:45:c1:37:32:8c:4c:9e:4e:67:
         3a:8e:9c:f1:14:15:ea:31:4e:d9:32:a7:fb:f6:37:11:99:d9:
         6a:39:e2:f1:7a:38:d7:a4:d0:d7:14:a6:33:b6:c4:a3:a3:ae:
         0d:3a:da:d6:bd:d1:fc:74:47:1d:ee:3d:41:fc:17:91:44:97:
         b0:3d:5f:86:14:dd:13:0f:82:20:dc:fe:c8:3f:d8:56:23:bf:
         9c:a8:58:4b:ed:a9:e0:4a:fc:a5:63:62:5a:6f:ef:60:c7:d3:
         34:81:66:74:0e:cd:53:4b:c3:5e:a8:1e:34:2e:f6:f4:bc:d5:
         68:d0:d4:85:98:83:26:a0:0b:94:0e:1e:2c:88:4d:c5:f3:1b:
         69:59:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:17:20 2026 by rpki-client