Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File:                     4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier:          Bk8BZRuh/c7wfo+Dv8a+R7BY2rQ/vRkLVeBnTdO4LpI=
Subject key identifier:   EA:24:52:61:99:66:0B:52:C5:68:8D:E5:0F:8A:4B:EB:97:91:00:32
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer:       /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial:       084D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number:          0843
Signing time:             Thu 16 Apr 2026 20:48:25 +0000
Manifest this update:     Thu 16 Apr 2026 20:48:24 +0000
Manifest next update:     Thu 23 Apr 2026 20:48:24 +0000
Files and hashes:         1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: Snm6ZDJk9BlNvEAFkUH03Q6uM11i5uBO6vB0AsQPY2A=)
                          2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: cV6nrCI/WiBOL0Uk/5UHwH4C2GgLMHmzrahNJwrUuZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
                          rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
        Validity
            Not Before: Apr 16 20:48:24 2026 GMT
            Not After : Apr 23 20:48:24 2026 GMT
        Subject: CN=69e14b19-e49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:e3:e9:d5:f2:a5:b2:5d:9e:48:ce:4e:23:
                    5a:04:18:37:c5:e2:9e:3a:1c:b5:9c:54:a8:fb:c4:
                    39:4d:ed:8d:0d:c1:cb:8c:33:e5:3d:94:a8:3c:4d:
                    07:11:1c:b1:e2:35:b5:b4:74:ec:d4:9e:e2:33:db:
                    8b:82:5b:6d:e8:40:8f:80:5d:c5:10:40:fa:b5:9c:
                    db:db:44:3b:80:73:f6:3a:90:46:53:5e:39:74:02:
                    cf:77:3a:76:83:7b:f3:79:17:bb:12:a1:11:cc:a8:
                    a4:6b:7a:b0:b3:c7:e5:cf:75:3d:43:af:62:fa:75:
                    a8:8b:34:5e:44:71:37:65:4b:fd:a5:94:9f:10:33:
                    a2:59:11:64:b5:0d:2e:5a:1c:79:0f:1d:1a:75:19:
                    fe:d1:5b:43:f0:8b:af:f0:a2:79:57:5c:fa:5a:a2:
                    17:9a:98:66:ac:fd:12:51:98:b2:ce:48:b4:72:36:
                    39:8f:be:47:be:07:91:31:2f:76:4d:cf:29:be:f8:
                    9b:5b:ff:59:2a:46:aa:c8:9d:0d:31:51:28:31:30:
                    d9:67:d4:66:fa:8a:47:7b:8a:8e:c9:75:64:88:7c:
                    ac:cf:41:d0:58:3e:d8:ed:c3:eb:91:dc:47:77:9a:
                    19:bb:13:9f:1e:c0:f8:b7:18:1e:c1:57:35:5b:3b:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:24:52:61:99:66:0B:52:C5:68:8D:E5:0F:8A:4B:EB:97:91:00:32
            X509v3 Authority Key Identifier:
                keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:65:23:1c:30:57:cd:11:d4:18:ff:a9:47:e0:c0:8d:86:34:
         e6:0a:ac:0e:46:d2:4a:98:05:bf:04:28:b3:4c:41:c9:91:f9:
         00:76:5a:78:d7:ab:04:fe:25:20:a9:c3:ba:15:81:e3:ad:d2:
         99:5e:cc:2a:85:06:92:64:71:1a:9f:a8:f3:5c:41:6a:10:91:
         bd:6f:49:9d:3a:59:b6:eb:a0:05:76:33:8c:73:1d:d8:86:b1:
         86:51:e3:34:2e:51:49:3e:c9:c2:23:dd:a3:cd:ac:19:23:df:
         27:0b:da:a1:4c:aa:73:36:7a:92:52:68:79:d3:2a:6e:8f:26:
         f4:9a:a1:70:93:be:2d:99:3e:9d:9e:30:b3:cd:09:6d:3a:ab:
         49:9e:73:6c:66:78:e5:81:92:1c:eb:a4:52:13:e2:a2:c8:7b:
         91:a5:3e:3c:1c:45:67:ed:a0:da:36:fb:ce:92:af:cb:46:5a:
         54:32:60:22:32:89:25:f4:b6:70:e9:3a:0d:d1:e9:15:83:e4:
         6b:d1:cf:1c:f7:1c:f7:ca:2d:ba:7a:cf:f6:71:c1:b7:00:a9:
         c7:47:14:33:ca:7b:52:22:c8:bd:ac:6b:dd:a9:af:e1:a9:a8:
         e4:48:f4:b4:66:05:22:9c:d1:1b:c9:e9:0c:30:12:a4:98:a9:
         77:ab:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:34 2026 by rpki-client