Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
File:                     RrMUYkbIqOvcBwyRKtn1czFjUfM.mft (raw, json)
Hash identifier:          Dk4D+7YDMCPT9s7J6plZrI8xIb8c5tthd8nnsEFpxeI=
Subject key identifier:   64:F8:C9:D1:F7:FF:3C:62:EA:4B:E1:D6:84:7A:3D:F9:57:C6:2A:6F
Authority key identifier: 46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
Certificate issuer:       /CN=A913B25C/serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
Manifest number:          10
Signing time:             Fri 17 Apr 2026 08:47:19 +0000
Manifest this update:     Fri 17 Apr 2026 08:47:18 +0000
Manifest next update:     Fri 24 Apr 2026 08:47:18 +0000
Files and hashes:         1: RrMUYkbIqOvcBwyRKtn1czFjUfM.crl (hash: 0qkbS09b/tin+WZ71tzOyYn5ySbej5wkocfESAf2F/Y=)
                          2: B7B0933824D711F1BC6B08E2AB833773.roa (hash: qfb5OhL2JYl88uq6Z6fcjDjGJqh3quT1pfhxv2w56CQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl
                          rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B25C, serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
        Validity
            Not Before: Apr 17 08:47:18 2026 GMT
            Not After : Apr 24 08:47:18 2026 GMT
        Subject: CN=69e1f397-cb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:91:67:35:e9:aa:e6:e5:10:14:af:c3:ef:
                    ff:b6:41:11:a9:ea:e0:54:56:8e:55:30:fb:95:76:
                    ab:37:73:48:86:b8:4d:89:35:86:c2:26:72:9d:dc:
                    36:26:6f:e1:15:bc:9c:96:06:15:bd:1e:91:98:ad:
                    19:71:c8:e0:de:b3:5c:f4:cf:df:6b:fd:a6:fc:95:
                    9e:13:24:3c:20:eb:f2:9b:57:1b:1c:e0:ea:ab:e6:
                    93:49:90:f4:02:96:2a:39:c7:d7:60:73:50:75:72:
                    f7:2c:8f:36:8b:22:f1:45:d1:67:87:e7:86:72:88:
                    23:65:43:39:42:01:ff:97:10:24:a7:60:7d:28:8b:
                    d4:ac:fb:33:6b:62:d8:6c:8b:45:1d:b1:aa:31:b5:
                    85:38:5c:e8:a6:82:e5:71:92:fd:1f:3c:4e:ab:fd:
                    71:15:cc:4e:93:c0:01:7b:10:cd:74:77:b1:79:7e:
                    9d:42:07:ca:f9:e8:c3:33:01:67:da:18:c2:9c:4c:
                    7e:24:f1:1e:e3:44:f9:ba:16:4c:48:a2:9f:17:27:
                    74:bc:b6:0b:c8:3f:5a:bc:7b:42:74:47:93:84:79:
                    bb:30:7a:4d:15:d4:7c:a2:7a:b5:2f:c5:2a:2d:29:
                    ff:c8:59:30:5e:1e:e8:c1:ab:2c:e5:c8:73:87:b8:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F8:C9:D1:F7:FF:3C:62:EA:4B:E1:D6:84:7A:3D:F9:57:C6:2A:6F
            X509v3 Authority Key Identifier:
                keyid:46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:6c:c5:d0:77:a3:7d:f8:41:99:65:2f:02:82:b3:43:63:
         08:ab:6a:92:00:d8:93:78:59:46:d7:2e:ea:d2:c7:b0:00:4f:
         ee:7c:8a:e1:01:be:0f:e6:49:50:b2:49:3b:b6:d8:39:9b:76:
         cd:2a:5c:6d:8b:cc:e8:90:98:30:54:e8:53:84:ba:88:5d:38:
         09:3c:02:9e:3f:51:a7:3c:ce:0b:f9:66:ee:a3:75:54:9f:2e:
         2d:a9:e6:12:47:ed:67:f3:2a:6f:1c:21:db:bb:c0:5b:91:76:
         0f:43:19:28:46:b7:3e:b1:59:37:89:17:7c:78:ab:c0:95:07:
         87:a6:38:fd:05:ff:1d:d1:67:fb:f3:97:76:56:dd:3c:e1:e9:
         bd:e0:7a:0f:b3:8c:01:93:44:b3:33:b9:57:08:b5:4f:a8:fc:
         45:3f:be:a9:63:e4:0c:43:22:18:cb:2e:f5:4f:0c:fe:b3:18:
         e6:52:56:ee:14:a2:83:6f:fb:e5:c8:c3:bc:3f:85:18:66:a8:
         e5:8b:b8:49:d9:c9:e0:7a:37:82:af:6f:c7:53:ca:10:14:9b:
         d3:c3:1a:87:9b:ab:4e:dd:63:0a:7b:d4:44:95:72:af:61:89:
         a8:dd:62:5a:37:b6:e4:87:7b:f8:0c:7b:45:c8:94:f5:35:ee:
         68:52:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:02 2026 by rpki-client