Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File:                     o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier:          /09VtdFg3LYr8/Ng+sctQWy8j6AUEjMOvjFwecmKeHM=
Subject key identifier:   70:D6:3E:C0:DE:CE:86:1D:6C:F7:0B:1A:D1:74:A8:A8:29:64:D1:A1
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer:       /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial:       04A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number:          04A2
Signing time:             Thu 16 Apr 2026 23:51:03 +0000
Manifest this update:     Thu 16 Apr 2026 23:51:03 +0000
Manifest next update:     Thu 23 Apr 2026 23:51:03 +0000
Files and hashes:         1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: jIM+ufWbWdg3Pint+qokQr66rh6lxvh+a2n/BZTytgI=)
                          2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: z7KyT6HnbJ6UMz7BQC748vvaSmuWe8c14BvsShCGtbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
                          rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
        Validity
            Not Before: Apr 16 23:51:03 2026 GMT
            Not After : Apr 23 23:51:03 2026 GMT
        Subject: CN=69e175e7-1f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:33:6d:88:07:f2:b7:f7:2c:a9:42:1c:ce:
                    cd:33:7a:71:d1:a4:e2:96:32:e1:22:e6:8d:ba:a0:
                    2c:5d:8b:9e:b6:81:09:de:f6:36:09:8a:2a:a4:13:
                    7b:c8:0c:14:95:b2:da:0b:25:0c:8b:7e:94:06:46:
                    80:c6:15:55:7a:66:41:d3:1f:cd:8e:e3:71:bc:6f:
                    64:2e:1c:66:91:6e:5b:f6:bc:16:f0:b3:c4:dd:83:
                    6a:08:89:9a:f0:28:a6:00:36:96:7c:a5:cb:2d:29:
                    3f:68:e6:0f:3d:d5:7a:e8:fd:19:ff:71:4f:82:a4:
                    db:b8:dc:03:e1:43:8a:b4:ff:a1:e2:55:cf:99:95:
                    ea:7a:63:ce:c7:af:ba:6c:ad:8d:15:f7:3a:8b:75:
                    ed:22:d9:81:71:cc:31:b9:64:e4:bc:15:e2:f1:8a:
                    3d:ef:ae:48:38:4e:f2:11:cd:fb:38:fa:ac:97:f3:
                    58:68:36:bf:e1:95:22:23:ed:53:19:87:51:24:ce:
                    f3:c9:d3:24:22:62:e8:26:ed:16:7e:26:d3:75:4d:
                    6e:c7:70:c0:60:a1:02:b4:7c:7f:34:b1:27:d9:61:
                    b6:f6:13:45:73:dc:3d:52:e2:db:4d:91:0c:19:e1:
                    f7:44:f7:bc:8b:f3:2d:75:fc:ea:0b:4f:7e:24:72:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D6:3E:C0:DE:CE:86:1D:6C:F7:0B:1A:D1:74:A8:A8:29:64:D1:A1
            X509v3 Authority Key Identifier:
                keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:db:8e:fa:8b:aa:54:b3:44:14:02:c4:f1:94:ff:4c:ab:a1:
         0c:d0:d6:d5:41:9c:f1:aa:3e:22:d3:ab:ba:e1:bf:0d:e1:f0:
         55:27:89:88:fb:0b:68:ea:b2:da:4d:42:a5:22:39:6f:33:a8:
         01:aa:8a:8c:cc:8f:c2:74:09:94:eb:11:0a:1b:83:88:e4:e7:
         4b:11:e6:0e:68:39:fc:9d:af:00:cf:b9:84:b2:61:2b:9c:21:
         08:ef:2a:63:69:34:f1:37:2e:21:15:79:30:d2:a9:12:cc:0b:
         89:28:fa:00:82:6d:ea:f6:89:24:ea:bc:25:0c:ec:72:e8:53:
         03:25:a9:52:e3:aa:35:a1:da:ff:f9:ab:b8:49:e2:96:11:d1:
         73:52:03:fd:be:fc:f6:74:9f:6f:20:aa:c5:39:35:45:e9:6d:
         fe:95:1a:ed:e0:dd:77:3d:3a:7c:a0:11:1e:8b:8f:83:45:de:
         d1:9f:3d:55:93:a8:85:18:d5:3b:93:77:c4:bf:ef:0b:91:66:
         5c:90:a7:7e:cb:16:a2:41:6a:ee:f0:9a:46:ea:28:12:ef:05:
         25:50:4c:49:7d:90:1a:4b:5c:b5:ba:e3:96:e8:a1:2d:7e:25:
         6b:27:ce:65:1d:8f:8d:e8:82:a1:2e:d2:2b:62:4a:d6:c9:bb:
         10:18:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:14 2026 by rpki-client