Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
File:                     2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json)
Hash identifier:          9hoPUVwkIotExuYz/R1VAiJ1y7hXZCUYjSw0XWtpkPM=
Subject key identifier:   DA:41:15:05:89:66:5A:B7:AC:12:1B:11:30:82:A2:A7:08:62:CC:0C
Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
Certificate issuer:       /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
Manifest number:          45
Signing time:             Fri 17 Apr 2026 08:11:54 +0000
Manifest this update:     Fri 17 Apr 2026 08:11:54 +0000
Manifest next update:     Fri 24 Apr 2026 08:11:54 +0000
Files and hashes:         1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: XqUj0x9QZkMeoFlHCIzan5G5fyShYJ20wONvUtCo36g=)
                          2: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: ZKCQjdago1KprBkMVdzOhlrm6rDSw/wNal8SzmwglEA=)
                          3: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: c9KXGFBUEAhMxd6F/BpLXSZoY9CxETEfzOzJpxwZ6lE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
                          rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
        Validity
            Not Before: Apr 17 08:11:54 2026 GMT
            Not After : Apr 24 08:11:54 2026 GMT
        Subject: CN=69e1eb4a-573d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:06:b3:06:2b:ab:1b:88:fb:5b:8b:0e:ff:
                    4e:ff:e2:2c:8e:af:48:24:af:c6:79:65:48:eb:38:
                    03:b8:32:3d:39:5f:1b:c7:32:bd:1e:4b:39:49:f6:
                    af:b0:60:bf:81:c0:8f:48:fb:6c:33:b0:39:eb:71:
                    2d:9f:44:eb:95:eb:3b:c5:ed:9a:4a:3b:24:00:54:
                    3d:17:da:68:78:d6:c1:fc:68:cc:1f:71:20:c4:d6:
                    86:35:74:d5:dc:c7:ef:0f:8e:b1:cf:26:d0:de:32:
                    dc:12:d7:ed:5c:7f:b3:37:fb:63:5d:ba:6c:c4:95:
                    7b:57:3d:a6:81:27:3a:16:59:d1:1f:5a:56:79:73:
                    3a:68:af:f2:bf:5b:de:1e:ef:a1:ec:c1:cd:60:0a:
                    15:78:0c:76:ed:f7:13:0b:0f:dd:58:87:e3:e6:81:
                    86:5a:0a:88:67:69:e0:c7:ca:4f:25:1f:54:80:20:
                    b9:28:e3:d4:d1:d3:73:bc:88:8d:5d:e1:cd:db:53:
                    13:a1:0a:3b:d6:b7:d5:da:a1:15:c3:ee:ec:77:2c:
                    c7:47:bc:ef:df:45:61:64:a0:7f:70:87:12:73:cf:
                    7b:b9:d8:9f:87:57:9f:86:16:02:51:52:ff:1c:27:
                    19:8c:43:46:1d:9c:18:97:8c:35:4a:b1:36:95:29:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:15:05:89:66:5A:B7:AC:12:1B:11:30:82:A2:A7:08:62:CC:0C
            X509v3 Authority Key Identifier:
                keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:8e:da:d9:bf:2c:c1:36:99:d5:a8:55:c2:d1:2f:a1:e9:
         2f:31:76:bb:cd:8e:ea:40:84:62:b1:f7:e8:93:57:b8:6a:c0:
         b6:f6:be:d5:0e:7d:00:e0:e3:26:24:b0:b0:b2:60:a1:c0:fa:
         42:f4:a0:63:a9:2a:4e:2e:f5:78:9e:65:6f:f5:54:47:fc:35:
         7b:1c:fc:b4:50:64:b1:02:65:ca:ff:1c:15:26:bc:68:ee:3f:
         c8:95:e7:18:54:70:87:47:e2:a2:28:ba:e0:80:20:1f:d5:a2:
         6e:af:8e:89:ed:ed:b1:87:da:35:6d:4d:b7:b3:9b:05:25:74:
         65:f3:d1:ad:52:ef:2e:2e:1b:00:1b:62:e0:ee:5e:9f:c2:41:
         9c:ec:1f:b6:a3:ac:de:aa:7b:aa:60:67:95:e6:1c:ed:a1:8e:
         56:0f:82:e2:56:8e:c1:0b:c5:ed:56:67:08:ef:ca:fc:8f:5b:
         57:48:d0:51:76:b0:a9:ba:a0:19:cb:40:2e:72:59:f1:b3:42:
         ba:62:55:2b:33:2c:bb:2e:62:b9:11:0a:df:cc:b6:1d:eb:2d:
         48:76:01:fe:17:a3:62:68:fc:33:ae:f6:af:4b:22:e1:8c:e3:
         f6:cb:74:2b:46:02:fb:e5:62:56:f7:cd:24:c2:ac:39:f5:68:
         99:80:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:31 2026 by rpki-client