Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File:                     AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier:          DIJ7iL9MArnpXivIBjh6NKdf6ojNPlBS+ILAG6CNhAE=
Subject key identifier:   C1:D0:EB:5C:23:86:45:28:3C:2F:64:87:72:AD:C0:5D:2C:0A:79:31
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer:       /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number:          02AB
Signing time:             Fri 17 Apr 2026 01:23:16 +0000
Manifest this update:     Fri 17 Apr 2026 01:23:16 +0000
Manifest next update:     Fri 24 Apr 2026 01:23:16 +0000
Files and hashes:         1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: MUXf3otvjO26CIV2wnmpGzKV1jJCXAT+jvXDAgPkRWI=)
                          2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
                          rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
        Validity
            Not Before: Apr 17 01:23:16 2026 GMT
            Not After : Apr 24 01:23:16 2026 GMT
        Subject: CN=69e18b84-cd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:16:fa:04:4e:d8:74:26:4c:5d:33:df:00:
                    a6:69:de:ea:17:69:09:ef:6a:93:e0:f1:09:66:15:
                    20:4d:8d:88:fd:97:13:9a:e5:65:34:8f:dd:df:c3:
                    ba:cf:d5:42:df:b3:28:c3:15:83:a5:57:a7:6f:f2:
                    b9:5f:0f:23:0e:8c:e0:ac:e5:60:62:b4:82:e0:27:
                    04:0a:60:e0:4a:bf:ea:26:7a:cc:a9:b2:f5:28:89:
                    d5:d5:65:72:f8:cb:0c:9f:4a:79:11:c7:6d:c8:0d:
                    f7:8c:bb:f7:00:2e:48:cc:59:f5:87:fe:35:b5:2e:
                    18:df:cc:fe:8a:86:89:b4:ba:1b:47:b9:08:67:d6:
                    88:1d:52:37:a4:40:d0:04:22:fe:67:11:bd:66:a0:
                    54:29:ee:85:e8:bb:95:b3:35:a8:67:f1:a7:5a:f9:
                    b1:4f:81:89:d2:55:52:c8:5f:0a:31:c5:0c:2c:81:
                    50:0a:ba:42:ef:7b:e3:10:ef:39:49:40:20:86:1e:
                    a0:f5:42:8b:75:63:27:6b:34:29:69:b2:1f:ee:ef:
                    f0:f7:ac:ca:49:f3:14:68:4a:fb:ba:07:3e:8c:4b:
                    63:10:5c:ae:55:67:b0:59:32:80:75:8e:7f:c1:d4:
                    ca:5b:d9:2d:b5:b4:1c:ac:24:17:e8:61:2b:b3:89:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D0:EB:5C:23:86:45:28:3C:2F:64:87:72:AD:C0:5D:2C:0A:79:31
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:02:f3:ec:53:91:da:e0:0f:fd:dc:4b:76:be:42:b1:d4:bb:
         f8:f8:3f:a0:36:73:2e:a2:2f:82:80:8c:c1:5b:91:2d:2f:b4:
         93:38:49:77:e8:78:50:6b:58:a5:12:4a:ae:81:4c:f9:f6:b1:
         c4:0f:87:cb:5b:95:62:4a:7c:c7:1b:47:3e:67:50:57:03:d6:
         8e:bd:ef:b1:58:ae:3a:6a:e3:27:3f:91:0b:0e:8f:1e:6b:14:
         75:42:f7:3c:3f:1a:5e:7d:36:f5:04:c1:03:54:d3:f9:d6:5a:
         84:6e:0a:bb:cb:62:4a:e4:a3:13:d6:a4:63:5b:db:e7:ca:9f:
         f6:7c:5a:2e:ff:29:94:da:f0:39:d6:9b:ef:91:1a:96:f2:ed:
         06:d5:af:d0:df:ac:63:7a:7c:bf:7d:be:8c:17:bf:cb:22:76:
         18:69:d6:a6:b6:31:8a:f1:27:43:cf:26:f2:89:e1:4d:49:eb:
         3f:ec:8c:43:38:e4:73:b7:53:40:e8:6b:77:32:c3:ed:eb:9f:
         03:1c:bf:41:ef:80:71:27:6a:35:d9:ed:b9:5a:43:a7:0f:c3:
         a0:57:a9:00:2b:cd:62:87:c1:de:8f:19:9a:85:46:be:27:a1:
         32:3a:0e:ba:b8:f5:ac:3c:77:80:0b:e2:56:fd:96:d4:5c:1a:
         53:b8:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:50:42 2026 by rpki-client