Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
File:                     iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json)
Hash identifier:          XX6TLZ4gm1cJoVXZ8KCqmPJ+7UxVKD8TAaaINnsNT7Y=
Subject key identifier:   D1:CB:18:88:A8:1E:D9:EE:AA:0B:69:83:5D:F1:FD:03:61:92:DC:8B
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Certificate issuer:       /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
Manifest number:          0174
Signing time:             Fri 17 Apr 2026 04:28:59 +0000
Manifest this update:     Fri 17 Apr 2026 04:28:59 +0000
Manifest next update:     Fri 24 Apr 2026 04:28:59 +0000
Files and hashes:         1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: aeGhL+FMK79vs5lOU2R7M+BZnyvp9ga/rjtShkU4aYo=)
                          2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: 6zOScysGwTG4B1eD0KO19S4ckqbekNQk8MFvUJMW9/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
                          rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
        Validity
            Not Before: Apr 17 04:28:59 2026 GMT
            Not After : Apr 24 04:28:59 2026 GMT
        Subject: CN=69e1b70b-dce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:6f:25:e0:b3:c2:e7:4f:c6:a2:e1:f5:fe:
                    22:12:56:b3:8d:15:91:fe:0a:7b:ce:5b:7e:66:8e:
                    dc:76:f4:3e:c0:c4:1a:3b:1e:78:49:6f:18:b1:4a:
                    8a:1a:77:25:5b:67:b5:55:a8:78:6a:92:45:00:28:
                    48:51:23:77:cf:f9:a5:cc:0f:15:11:7f:5d:cf:d4:
                    7d:64:d5:85:c9:5c:1d:28:ff:d7:8a:01:0f:9a:3c:
                    1d:65:ad:5b:01:30:e5:83:a3:44:ce:e6:5e:5f:7d:
                    98:33:8b:6f:04:c4:0b:ec:f3:d2:6b:53:c7:71:ff:
                    36:c5:d8:05:af:32:cb:f2:25:25:16:ea:8c:35:af:
                    6a:d2:49:ac:30:20:8c:84:e4:ff:19:8e:d5:8e:09:
                    c9:07:af:a4:41:bc:4c:8d:76:b3:1e:9a:18:cc:8b:
                    a4:c9:e4:b0:3a:31:e9:a1:4c:16:02:65:0f:bb:09:
                    39:30:18:6c:2d:af:c2:43:5d:b3:90:07:d2:89:70:
                    c2:39:e9:1d:79:08:79:d9:f4:5d:ad:4c:a2:e9:4a:
                    68:c3:f4:64:8a:f3:5d:e2:83:66:97:f1:cf:16:79:
                    88:c1:c6:6c:34:ec:c4:fe:cc:04:d2:91:5d:d8:97:
                    c7:67:71:70:ee:73:6a:48:60:8b:b9:a2:eb:ac:4a:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CB:18:88:A8:1E:D9:EE:AA:0B:69:83:5D:F1:FD:03:61:92:DC:8B
            X509v3 Authority Key Identifier:
                keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7c:2e:b0:41:d8:73:bf:19:66:d9:25:7a:ef:4a:bf:1d:48:
         95:d8:d9:6e:16:ca:a6:0e:98:3e:3e:89:aa:ee:0e:0c:03:a1:
         bf:fe:12:c5:f3:4e:7f:ee:25:a2:09:86:81:e6:b9:17:b1:ae:
         ad:04:20:5e:3f:58:f8:7c:d2:9b:99:09:9d:c6:40:8d:03:d3:
         04:f5:7c:4e:9a:51:dd:a8:12:81:a1:a0:6c:66:44:be:10:68:
         17:13:42:be:ba:39:fd:2b:d9:b9:29:9c:e0:c3:9d:c0:8c:65:
         5c:bb:ad:1a:79:18:fe:c0:ba:39:2c:c5:a3:dc:39:20:3e:9c:
         27:63:a2:5c:3f:d7:a1:86:d8:b4:f6:4e:96:a8:af:e3:41:bd:
         ff:25:d1:5d:31:2a:8e:95:23:64:82:b3:77:a9:e3:5b:89:0a:
         63:89:5a:22:4e:c5:95:c7:1e:04:3a:93:5d:d4:8f:10:ad:18:
         da:2e:53:74:0e:a4:cc:43:f7:b5:3a:17:18:ee:7a:18:d7:ce:
         80:2b:f3:f6:33:a7:95:2f:41:50:ef:b3:0b:61:58:1a:8c:c0:
         71:a6:e3:27:85:75:49:ac:01:44:8d:0f:a9:f1:e7:9b:95:24:
         72:15:b7:40:46:3c:a2:65:01:f7:6d:bb:3e:5e:f4:7d:bc:a6:
         9b:8d:a7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:26 2026 by rpki-client