Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
File:                     MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft (raw, json)
Hash identifier:          e7FlBX8UHXi79PuZUa15W7f+XIfToNw+G6JxZUPm5z0=
Subject key identifier:   A5:1C:7C:8F:00:BF:2F:DE:DE:A7:48:B5:CF:3B:57:88:CF:53:8E:BE
Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
Certificate issuer:       /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
Manifest number:          2A
Signing time:             Fri 17 Apr 2026 08:32:27 +0000
Manifest this update:     Fri 17 Apr 2026 08:32:27 +0000
Manifest next update:     Fri 24 Apr 2026 08:32:27 +0000
Files and hashes:         1: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl (hash: crnCg78AGbjW7a5VTRP/YRInx5oPUSZgF3omO7NcEgY=)
                          2: BA419250081C11F1AD289B7B323D8C67.roa (hash: rFS/SZQK8Yk9ioV0Y+bTAAI4kAqBKXvpYRG0EHKZ9fI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
                          rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E
        Validity
            Not Before: Apr 17 08:32:27 2026 GMT
            Not After : Apr 24 08:32:27 2026 GMT
        Subject: CN=69e1f01b-95a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:96:a5:b2:e6:fe:f4:18:f6:54:01:f6:5a:
                    c2:58:b3:b3:d7:7d:03:e5:1d:d3:69:f2:a4:aa:21:
                    08:1d:2f:cc:2f:f9:52:61:cc:55:2a:45:87:1e:24:
                    40:14:a0:f1:a5:76:f8:46:50:7b:be:4c:40:cb:53:
                    75:17:95:6a:2c:42:1e:84:6d:d2:5f:8b:cf:6d:16:
                    aa:c2:4b:0e:06:6d:4e:b1:01:8b:68:5f:cb:75:96:
                    c9:c0:1c:a1:1e:7e:e5:49:f0:8e:dd:5f:d3:b2:e8:
                    8c:b7:2d:3a:17:95:af:c8:9a:59:64:c0:99:3a:c0:
                    bd:6d:1b:e1:25:c9:e1:c1:40:bd:56:53:26:4e:c5:
                    e7:4a:8e:cf:4f:47:29:fe:ad:e2:4d:c8:9b:3b:07:
                    b5:46:43:4b:ec:65:ed:84:e7:c7:7f:2a:5a:be:ac:
                    bc:ef:ea:e6:05:80:f6:09:64:ab:73:f5:a9:dc:fb:
                    ea:e9:31:96:81:76:38:2b:ac:9d:61:63:74:f0:c6:
                    c8:86:9b:16:4d:67:f8:3c:e9:19:f5:d9:1a:dd:4e:
                    e5:2c:8d:0c:30:fd:94:38:1a:1f:d9:e5:05:38:a8:
                    42:11:ef:92:33:66:c4:e7:da:4c:c4:63:45:0d:b1:
                    cf:a4:4e:26:f0:b7:1b:a2:62:0b:ff:70:4f:b9:fb:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1C:7C:8F:00:BF:2F:DE:DE:A7:48:B5:CF:3B:57:88:CF:53:8E:BE
            X509v3 Authority Key Identifier:
                keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:ae:c1:f1:e2:cb:15:9a:89:a1:9a:81:05:04:d8:01:f1:
         ae:c1:86:e0:50:89:ad:3f:bf:39:f3:cf:fa:a8:95:79:cc:62:
         bb:0e:76:2a:0e:f4:00:10:62:4c:6b:69:25:66:6b:ee:6d:1c:
         46:00:28:e6:50:51:dc:a6:7b:36:2c:fa:2b:f9:ab:9e:22:cd:
         5d:f9:31:5b:84:6f:3e:32:f5:38:d0:af:11:d4:c8:45:14:0f:
         f1:d1:f6:59:aa:ba:7e:84:7c:8d:64:33:02:29:d7:93:65:35:
         be:ac:50:08:41:68:a7:06:41:e5:f7:45:d0:6e:36:17:7c:da:
         2c:77:74:78:fb:54:97:27:a1:6c:1c:aa:f2:15:9f:82:de:83:
         51:82:7d:d6:f8:c2:82:49:77:9d:d9:fc:41:26:93:e6:6d:82:
         0f:8f:77:60:3a:0b:68:6a:c6:d9:9c:f5:3c:c1:8d:06:17:06:
         29:f6:5a:11:5a:7c:e3:66:ae:1b:87:db:3c:86:6f:18:03:85:
         ce:c4:14:0b:0b:64:a2:ee:4d:57:21:6d:00:1c:7e:01:2f:4b:
         db:db:3c:a8:e3:d1:9c:a0:34:18:76:0e:78:0f:f9:63:46:80:
         8d:bf:7c:dc:94:0b:ad:63:23:2d:67:fe:6a:f1:ee:cd:34:31:
         89:ca:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:18 2026 by rpki-client