Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File:                     Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier:          7FFgxdrBO9bui7ymGHtCwIxWa6Mcc7CPLWqY1NhKVVE=
Subject key identifier:   61:E3:1D:79:0B:47:8E:3E:75:41:8F:02:34:18:04:DE:00:CC:25:72
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number:          0146
Signing time:             Fri 17 Apr 2026 04:57:04 +0000
Manifest this update:     Fri 17 Apr 2026 04:57:04 +0000
Manifest next update:     Fri 24 Apr 2026 04:57:04 +0000
Files and hashes:         1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: zn8wwfIuupp58T2Zd/HYEFw9LIzqwCyJ8uYk9rYtXmU=)
                          2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: oqvWd4uZO6chUuSX/QzRBk1eYkn+Hq0Y5MjKEFCE6SM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Apr 17 04:57:04 2026 GMT
            Not After : Apr 24 04:57:04 2026 GMT
        Subject: CN=69e1bda0-69ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:ba:c2:e7:44:4a:2f:b8:96:eb:6d:72:32:
                    4e:84:ed:8c:d8:4e:f9:f9:30:70:2a:8c:2f:11:6a:
                    80:52:fb:84:e3:8d:43:18:8b:04:3b:f5:8d:2a:10:
                    f8:43:cd:c0:c7:db:c9:0d:e0:5a:ea:87:1a:a4:0d:
                    65:a2:9b:f0:03:9c:4f:33:03:09:54:76:62:e8:9f:
                    36:20:3d:9f:c3:ef:a7:7d:c7:d5:ac:34:1e:1b:b9:
                    36:b3:97:e2:bf:5c:56:ec:9a:cb:f9:81:d3:ae:ad:
                    53:7a:f2:2e:9a:60:9e:14:95:fe:78:7e:18:a1:a8:
                    30:bc:0b:2e:cc:42:8e:eb:a8:9b:40:1e:c4:32:71:
                    7e:7f:9f:94:19:0b:32:a1:91:21:6b:a0:3d:44:72:
                    e7:df:ce:cf:b6:36:8f:69:f3:f8:b2:f7:8d:61:9c:
                    7d:48:57:28:b4:94:47:a0:04:02:c4:85:eb:b1:03:
                    20:0d:40:41:09:38:49:f6:3b:95:c9:06:d4:4d:f5:
                    ae:e9:c0:c9:b0:be:4e:e5:7a:9a:13:b4:20:4e:5c:
                    ad:f1:61:d3:b7:b5:b8:83:66:af:9d:fa:3c:2b:8f:
                    86:5e:62:c3:8c:92:fc:a6:a0:cd:a5:da:6b:68:12:
                    23:b7:cf:57:fe:e3:c3:73:ee:39:e8:95:f6:f8:8b:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E3:1D:79:0B:47:8E:3E:75:41:8F:02:34:18:04:DE:00:CC:25:72
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:e5:d1:8b:ea:26:21:bd:76:00:9f:b2:5c:02:5e:e0:7b:
         2f:6c:7f:4f:14:31:b8:c1:5c:be:b1:35:b0:db:d2:bb:95:c1:
         3f:9c:43:6e:d2:83:11:dd:d4:48:67:31:df:fe:26:21:c8:2f:
         50:21:19:f8:84:9e:1e:82:cb:85:98:d5:cf:cd:43:1f:3e:9c:
         9b:e3:84:02:56:71:ba:63:c4:1b:60:2c:8e:da:ab:c0:08:22:
         10:62:39:41:81:0c:f6:08:28:7b:5b:cf:83:a3:9a:cc:1c:a2:
         60:ed:5a:ed:cc:cf:5e:47:94:6d:e4:b9:c5:5e:15:5c:a7:de:
         05:26:b0:b7:c7:81:97:77:0f:3c:ee:7c:0f:c8:19:e3:33:39:
         66:6f:6d:56:ab:af:f1:b0:7c:57:c7:e9:a4:90:0f:ec:f2:b9:
         3f:f5:08:6e:38:26:d3:11:27:db:5b:1e:85:77:07:c5:43:a2:
         25:33:7a:26:c1:a2:64:06:81:94:5a:84:d1:0b:24:86:f7:9c:
         4d:c3:c7:06:ae:6d:b2:c3:23:af:1e:b2:c5:77:30:01:22:d8:
         d8:fa:1b:83:f8:ea:87:04:f6:d8:22:06:3c:7e:9a:92:9f:3a:
         39:3c:bd:d0:f7:46:6b:13:95:06:57:86:a5:e8:45:ea:16:70:
         aa:eb:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:58 2026 by rpki-client