Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File:                     otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier:          BMQicp/49Y3anLH41iFlWG5PpkJF/eOmL6TtR5yI20E=
Subject key identifier:   8B:40:22:35:3B:2F:F7:E1:45:8B:05:EC:FA:2C:A6:94:00:BA:C8:97
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer:       /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number:          4D
Signing time:             Wed 15 Apr 2026 07:51:26 +0000
Manifest this update:     Wed 15 Apr 2026 07:51:25 +0000
Manifest next update:     Wed 22 Apr 2026 07:51:25 +0000
Files and hashes:         1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: qeiDhbsWdmKLJE71YhhU63vztyuctU2YlE9Z8pVHXjw=)
                          2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
                          rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
        Validity
            Not Before: Apr 15 07:51:25 2026 GMT
            Not After : Apr 22 07:51:25 2026 GMT
        Subject: CN=69df437e-82f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:ff:6d:13:c9:bc:a0:71:10:b0:c4:ee:50:
                    dd:86:92:4f:ca:a7:88:bb:67:60:38:6b:99:a5:1a:
                    af:47:8d:c4:bd:14:b0:8d:a6:50:a2:d6:42:8e:7b:
                    62:6c:40:b8:5f:09:64:4d:c2:07:64:e1:65:e7:63:
                    d9:a4:cb:d6:df:d0:2a:2a:68:54:aa:f2:85:4f:39:
                    9f:56:45:7a:f4:d7:e9:64:83:37:e1:fb:59:a3:42:
                    46:7b:ec:a3:5a:84:19:4e:bf:ec:25:9b:51:96:1e:
                    7c:55:39:44:f3:fe:71:4c:83:a5:ba:f5:68:c7:7e:
                    01:95:db:62:6b:1a:5e:5d:64:fe:2c:74:1e:ac:c4:
                    91:a6:13:ff:d0:bd:d7:37:12:ea:f0:f6:2a:9d:01:
                    d3:18:f2:e9:96:3f:cd:8d:70:1a:7f:de:d9:eb:2c:
                    2d:f3:23:ca:4d:04:b0:9a:c1:93:32:1b:c2:5c:08:
                    43:c4:15:5c:8b:45:a1:93:f3:83:f7:ef:07:1f:5a:
                    99:80:af:40:86:13:f3:c3:01:2c:5a:fe:c7:82:1e:
                    bb:9c:11:14:49:cb:06:66:9c:23:6c:d4:ae:e9:28:
                    ba:ce:60:87:b2:5e:95:fa:d9:76:f6:8d:df:66:2c:
                    1a:da:30:3c:eb:89:a8:68:9a:25:08:d6:40:82:7b:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:40:22:35:3B:2F:F7:E1:45:8B:05:EC:FA:2C:A6:94:00:BA:C8:97
            X509v3 Authority Key Identifier:
                keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:96:76:54:28:ca:d5:77:76:11:1c:40:a6:3a:83:a8:0d:42:
         d7:29:58:a8:37:9c:75:88:75:97:e7:41:7d:4f:68:c6:8e:90:
         e5:6b:49:80:8a:53:7e:6a:d8:45:62:51:db:50:cb:7c:e5:81:
         03:b7:02:fb:e8:f7:d2:17:2e:5f:c4:e1:36:3d:55:8d:2e:20:
         8f:3e:a0:e5:26:1f:fa:f9:a4:33:f5:e3:21:49:65:1d:8d:60:
         b0:f9:b6:ab:e4:a2:df:77:bc:ee:0d:de:31:86:4f:0b:e2:1d:
         c1:ed:22:02:d9:4c:16:89:9e:2d:94:ec:4f:43:6f:4f:ed:bf:
         39:81:b5:b0:a8:40:11:16:db:b0:b7:fc:a2:aa:f6:90:0b:5a:
         1c:d3:6b:2e:81:60:3e:3e:7e:19:01:ed:88:24:2d:43:3c:ac:
         83:30:a9:62:cd:15:63:ff:4a:1c:43:38:b6:48:a3:53:d0:30:
         37:44:f9:b8:b8:c8:00:a9:99:fb:03:95:7c:26:4b:b2:8e:4c:
         7f:76:12:98:80:27:7d:52:0c:44:b5:cf:97:8d:48:c2:c0:c8:
         47:6a:f2:7e:80:14:ad:3c:c1:41:0a:34:af:68:c1:e1:42:87:
         a4:d1:fa:02:2a:fd:76:06:a6:61:ab:d0:2a:89:57:8d:94:41:
         e7:9c:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:01 2026 by rpki-client