Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File:                     64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier:          C35qQMgh5+e/x0ogvZWfhinupqigLcnksqnwfrBB7Nw=
Subject key identifier:   16:1F:9E:92:D1:27:95:BF:72:9A:8F:92:7D:F2:7E:EF:64:34:AA:24
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer:       /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial:       0E2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number:          0DF9
Signing time:             Thu 16 Apr 2026 17:47:25 +0000
Manifest this update:     Thu 16 Apr 2026 17:47:25 +0000
Manifest next update:     Thu 23 Apr 2026 17:47:25 +0000
Files and hashes:         1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: LH+XOUoUGetN4Coh/G4aI6Vc47NuMMXiW7k+YI7EEvM=)
                          2: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: nmjI7Wi2B8aFQIAn+8Mjo7gbvju8oLY+EN7Rnxgggrw=)
                          3: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: Fepdq+V83ixXVbOQsCG8E8Is2e9E4BLsSWrOJhnPvw8=)
                          4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: 4SWrfrkL4KQ0GTNLnf+Lu03qdO1Vi/fN+eQr1sQ0Xl0=)
                          5: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: it/3YpWQm+cSLbHWwAmBABlwHA8BsBUrAprFxWV5Rl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
                          rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3631 (0xe2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
        Validity
            Not Before: Apr 16 17:47:25 2026 GMT
            Not After : Apr 23 17:47:25 2026 GMT
        Subject: CN=69e120ad-8d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:c8:e3:dc:db:75:22:8a:9e:a2:6d:17:1f:
                    37:f5:a4:d7:a3:2f:e3:46:87:a5:73:6a:c6:85:26:
                    6e:44:e5:19:e3:b6:ba:e3:2d:21:bb:dc:3e:dc:52:
                    bb:bc:8b:e0:0a:e0:82:5e:6a:4a:85:9d:c4:39:7a:
                    b8:52:82:02:eb:04:ac:e3:19:1e:d6:27:24:eb:25:
                    f8:0a:dc:52:9a:0c:26:c2:58:c6:a8:1c:17:fd:2b:
                    cf:83:54:06:b6:83:c8:ab:04:26:2a:b6:91:9c:51:
                    68:9a:ab:6d:60:4a:95:63:19:9e:f1:95:ee:c2:88:
                    63:ad:d7:76:19:11:f0:07:31:6a:34:69:d7:22:40:
                    be:2d:ae:6d:d4:cf:1b:ff:aa:c9:8e:a2:19:65:65:
                    64:cd:15:1f:be:32:65:8b:66:95:45:76:d5:b3:4f:
                    5c:26:41:4e:04:a4:f5:5e:b7:e2:ea:d0:12:9b:e5:
                    d1:63:24:74:73:5f:10:83:e7:a4:f5:90:ce:b4:c8:
                    4c:6c:91:69:e2:a3:ee:37:89:f9:7c:81:76:42:66:
                    a9:44:6e:56:e4:65:5f:53:c6:66:67:b1:3c:9a:b7:
                    60:8d:09:e4:eb:28:b3:27:35:a4:bf:a7:d3:b7:e1:
                    78:40:0a:64:48:df:b3:d0:45:86:6d:ff:9c:39:cd:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:9E:92:D1:27:95:BF:72:9A:8F:92:7D:F2:7E:EF:64:34:AA:24
            X509v3 Authority Key Identifier:
                keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:ed:89:d1:76:63:f8:61:81:ea:32:39:20:a9:c8:21:a7:
         de:87:86:df:68:12:e0:1e:3a:ca:36:aa:0d:73:be:55:5e:7a:
         79:f5:92:53:d1:34:2f:8d:fc:51:7c:b7:08:6b:81:8b:c1:62:
         0b:03:cc:6c:a4:81:ce:67:70:0d:06:d3:92:8f:17:86:0d:65:
         a8:fb:7d:bf:21:a0:dc:fc:2f:84:40:13:50:94:ff:08:73:79:
         90:0d:27:fd:70:a5:e2:61:cb:6c:a1:a0:17:e4:94:f1:41:f2:
         d4:b5:11:8e:aa:ae:4a:35:f0:47:b2:2c:f4:16:b8:c2:4c:d4:
         34:13:03:79:aa:0c:4d:6e:1f:a5:4b:42:b4:6d:51:df:ac:6d:
         90:46:f0:83:b5:e2:4b:20:9a:d8:bb:c4:ae:05:e8:8d:b6:75:
         4f:70:17:2a:bf:d4:63:ee:2c:8a:cb:9d:02:39:e1:70:37:44:
         e3:57:00:15:f3:5b:98:ce:a1:74:68:7b:cb:bf:b6:3d:14:64:
         3d:1e:f8:3b:aa:88:48:40:9e:a5:ac:c6:8a:b1:c5:38:e7:13:
         ea:51:d5:9c:88:4c:63:f4:0b:e9:7a:44:e9:33:e0:86:33:1b:
         6b:61:16:a3:be:4d:65:23:32:96:0c:bf:8b:79:22:1a:cc:a9:
         73:81:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:37 2026 by rpki-client