Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File:                     CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier:          Z1mMZLNFnchK9WZ1Br3tauqvrFt6jtiOn3lr6iHicpQ=
Subject key identifier:   5E:C7:F0:BC:03:05:2F:49:D5:7E:E3:72:51:CA:5B:A1:05:F5:E5:EE
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer:       /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number:          01C2
Signing time:             Fri 17 Apr 2026 03:32:41 +0000
Manifest this update:     Fri 17 Apr 2026 03:32:40 +0000
Manifest next update:     Fri 24 Apr 2026 03:32:40 +0000
Files and hashes:         1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: PFReLV6c+GG1ATjpwp61HyGwGlHEH9W3AjnC05rHGm4=)
                          2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
                          rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
        Validity
            Not Before: Apr 17 03:32:40 2026 GMT
            Not After : Apr 24 03:32:40 2026 GMT
        Subject: CN=69e1a9d9-cef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:74:dc:ca:e4:70:db:7e:09:5e:4c:d2:28:
                    18:32:81:2d:3e:eb:2b:a0:84:1b:da:4e:05:f5:72:
                    84:5f:2c:bd:fc:70:48:ce:71:e7:09:bd:a0:39:b9:
                    c8:d4:06:c0:91:e8:33:43:b4:8d:20:1d:4f:af:81:
                    19:72:4d:23:d9:40:9b:24:7b:e4:59:a8:80:bc:19:
                    28:e6:0b:18:fd:cf:14:34:6e:8d:31:0f:f1:1f:f4:
                    81:e1:59:52:fd:69:9b:30:30:d3:75:50:3e:1c:52:
                    49:52:66:21:7b:4c:f4:b4:90:e6:7e:8c:04:a0:fd:
                    7f:b6:de:bb:be:dc:64:9a:5b:ff:55:55:18:fe:eb:
                    51:47:05:48:3b:c1:36:97:c6:c3:4b:2d:53:4c:63:
                    bb:c4:90:fe:de:56:29:47:56:c4:ce:11:c6:62:a1:
                    29:5e:ab:35:04:68:51:72:a6:10:3b:f5:45:db:73:
                    55:f1:d8:b3:2c:d7:49:51:d8:92:bc:55:7d:cf:cf:
                    f7:bc:8d:e8:66:57:33:ba:08:bd:a2:aa:95:41:c4:
                    0c:27:99:ff:e4:c3:f9:d5:8e:65:d4:ce:87:7e:00:
                    a1:b7:1c:70:88:da:db:b5:bd:24:fe:1a:d2:91:b4:
                    70:0f:3f:fd:af:6e:02:e3:15:6d:b1:1d:c1:bb:9e:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C7:F0:BC:03:05:2F:49:D5:7E:E3:72:51:CA:5B:A1:05:F5:E5:EE
            X509v3 Authority Key Identifier:
                keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:2e:ae:6b:94:38:db:52:ea:8b:c6:9c:d0:88:03:6b:b2:9e:
         d2:8d:f0:96:9b:cb:9c:de:e8:e2:7a:30:18:34:c3:58:05:2b:
         53:10:a8:0f:1d:51:2f:90:41:fa:97:99:36:5a:65:7d:20:1d:
         2e:15:cb:ea:08:e4:39:45:d9:6f:26:c2:dc:df:9b:7a:d7:9b:
         b2:07:66:af:50:38:f6:70:c1:59:6a:a6:ae:1d:64:25:ae:20:
         d3:84:4f:b7:26:d9:ce:bb:24:d4:cf:b1:80:28:a2:13:5e:65:
         32:76:3a:5e:cc:61:c9:9f:8e:dd:88:4f:c3:d6:0f:22:56:7d:
         a0:47:37:33:23:e6:1f:b5:f8:3b:37:1d:7d:f0:d1:0a:dd:22:
         21:23:f4:d3:9b:c4:ed:28:1b:1c:9e:8a:e9:95:8e:23:8e:38:
         5e:2e:5d:cc:54:d4:97:3c:66:8d:02:73:86:03:85:a1:53:ec:
         ae:aa:7e:8f:69:cf:ba:36:60:be:bc:f7:1d:91:20:ee:9c:37:
         d0:3d:62:45:27:9c:4f:1c:54:0d:22:6a:ff:53:46:e9:81:38:
         80:94:b4:9a:12:08:e6:45:90:01:e2:07:a9:83:5f:e1:b5:9a:
         4a:05:e4:2d:67:e8:2b:43:1b:41:3b:c8:33:1b:3c:a3:04:71:
         a2:89:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:01 2026 by rpki-client