Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File:                     K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier:          hHNdTE3gqQ96XpFEPsTwxZBYiQtpnu4bVJDiL19EYn8=
Subject key identifier:   D3:67:E7:0C:2A:85:3E:32:F6:E5:A7:65:22:A8:69:C3:DB:87:25:43
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer:       /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number:          013D
Signing time:             Wed 15 Apr 2026 04:57:01 +0000
Manifest this update:     Wed 15 Apr 2026 04:57:00 +0000
Manifest next update:     Wed 22 Apr 2026 04:57:00 +0000
Files and hashes:         1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: p3ZhH4LauMJEq1ommJG40iEFdel0aSDqGjXwVzK0fY0=)
                          2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
                          rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
        Validity
            Not Before: Apr 15 04:57:00 2026 GMT
            Not After : Apr 22 04:57:00 2026 GMT
        Subject: CN=69df1a9d-52a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:09:c2:94:f1:7e:a3:3f:e6:75:61:f5:48:
                    40:00:4c:81:56:f3:57:b0:8d:6a:44:5f:d0:08:06:
                    fd:73:d8:2e:42:1d:a1:70:b3:5c:cf:3c:85:10:0e:
                    b3:3f:47:a8:78:ec:22:49:04:65:39:6c:94:16:54:
                    eb:2f:4b:65:ea:e9:b5:23:36:8f:7e:d8:fd:39:a3:
                    2b:e9:96:c1:a8:04:6c:0a:14:0e:a2:7b:9b:eb:71:
                    0c:b9:25:e3:0a:f8:50:3c:b1:9e:e0:0c:75:09:52:
                    59:d8:ad:2a:83:70:35:a1:23:3a:03:b7:7c:4f:51:
                    17:6f:fd:8f:aa:e2:3b:67:20:b3:2c:6a:0e:4a:14:
                    bd:ee:40:7c:77:d5:d4:02:2d:95:74:85:6a:2b:e6:
                    4e:67:d5:c3:db:8b:27:f1:68:6f:99:24:6c:41:08:
                    15:ae:03:29:0f:8b:da:80:20:e3:92:fe:3e:93:52:
                    cb:9a:0a:43:a8:cf:e1:8e:69:0c:35:62:34:5b:79:
                    ae:47:b1:9a:82:37:55:21:32:54:a3:e0:33:4b:3b:
                    73:b6:80:65:f0:48:eb:9e:a2:ff:1a:cc:ab:da:ce:
                    5a:e5:0c:72:0b:da:98:bd:2f:50:93:f5:26:97:8b:
                    49:cc:28:7e:ad:b6:79:02:d8:e1:5f:0b:d4:2e:a0:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:67:E7:0C:2A:85:3E:32:F6:E5:A7:65:22:A8:69:C3:DB:87:25:43
            X509v3 Authority Key Identifier:
                keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:41:ad:a3:af:72:94:c3:69:d0:c5:8c:e7:77:0f:03:9d:
         ad:c1:17:80:ad:61:d9:26:f1:f2:ed:15:9b:65:a9:e3:eb:27:
         5b:b5:f8:ec:08:1e:22:10:70:63:3d:5a:e4:e2:ab:64:90:62:
         63:7b:66:f7:e8:bb:0d:f9:ad:2b:d8:63:26:77:61:10:0b:4a:
         a2:39:c0:d6:1b:84:6a:74:99:1a:ff:cf:07:3c:b8:59:e7:9f:
         48:2f:57:06:dc:12:74:7f:99:b6:6d:8b:da:b1:29:d4:29:3d:
         ef:e2:66:b4:c3:d6:11:2e:fd:f3:73:19:eb:b9:42:d2:de:70:
         da:0b:50:0e:18:a8:1b:6d:8c:28:9c:d4:07:85:10:63:44:fb:
         93:34:0d:70:e4:b0:c1:08:d7:e3:e8:ce:ec:fb:4a:d4:01:7e:
         6a:18:20:15:f3:ba:45:8f:04:e6:24:32:46:48:af:09:17:2a:
         1e:94:6d:80:33:b8:81:67:06:5e:07:ef:ec:6f:79:b7:10:a7:
         1c:c4:ef:a4:6b:a7:22:03:59:47:88:79:8a:a5:bd:41:0e:79:
         a0:8b:84:70:f6:74:b3:78:16:80:60:9c:45:52:1d:5e:16:65:
         34:8d:3d:06:31:5d:e4:70:89:af:a4:62:14:ab:f0:a3:0c:67:
         5b:12:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:07 2026 by rpki-client