Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File:                     08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier:          /FtunQqL7UzZB9j8SaTsvbLsfnh91O0eG4NNSDRvl3E=
Subject key identifier:   27:75:84:32:45:F0:8A:55:EE:B7:60:C0:07:85:94:D8:C0:69:76:75
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer:       /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial:       0BE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number:          0BBC
Signing time:             Thu 16 Apr 2026 18:56:47 +0000
Manifest this update:     Thu 16 Apr 2026 18:56:46 +0000
Manifest next update:     Thu 23 Apr 2026 18:56:46 +0000
Files and hashes:         1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: h1cFHTeY48nrN1OWfS551sf28qZLzIiPt44edpIBKIE=)
                          2: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: guSkTmy7FKfWkl3HEYDSdBxGCgfTJVTz0fMgkLGtNzk=)
                          3: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: lFd0f/s6tWl8ssWZElmWFK2IFMinINueCRCwnr4LqZQ=)
                          4: DE437646F8A911EB98242219C4F9AE02.roa (hash: MmgfA3qYqHflBFSU79GcWhbhyjAjfee+uU1hKepl8Bg=)
                          5: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: SjDMXf0lNYFwt4BBzRLFS/hu859BDfy4g/4gUtj/7is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
                          rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3044 (0xbe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
        Validity
            Not Before: Apr 16 18:56:46 2026 GMT
            Not After : Apr 23 18:56:46 2026 GMT
        Subject: CN=69e130ef-c9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:2f:b0:b2:e2:ff:b6:11:10:a3:5f:df:8d:
                    58:81:78:57:3e:f0:87:9a:33:f2:48:d4:af:80:43:
                    12:36:f8:e5:d1:0b:0a:80:83:1d:8e:a2:8f:47:bd:
                    1c:9f:9d:40:ab:f8:3e:6e:93:94:96:fb:ff:98:f4:
                    1c:e0:47:b8:62:e9:ae:47:47:79:13:ec:a3:ee:57:
                    03:b9:7d:7c:7b:e0:f4:ed:69:61:44:61:9f:9f:57:
                    01:87:3f:a9:42:23:25:a3:ae:69:df:96:44:5a:93:
                    4a:3e:db:8a:ab:ab:59:6d:b4:0f:1f:73:0f:7b:cb:
                    85:b7:67:f0:1a:3c:59:e5:fc:28:c1:20:c6:70:4a:
                    68:bf:3f:66:4c:19:b9:ea:63:52:1c:01:fe:f5:a3:
                    3d:3c:db:54:3b:33:4d:c6:e9:16:0e:8c:2d:1f:2a:
                    ad:51:99:dd:91:b7:46:25:c0:2b:10:27:e3:e3:c6:
                    51:46:08:bd:04:1a:06:14:a7:5a:ac:6a:60:98:68:
                    0a:7a:b1:ab:40:e4:7a:a9:39:d1:3c:f0:ac:df:88:
                    45:cc:b8:3f:f2:7b:b5:65:d1:21:7c:28:33:e3:03:
                    75:37:4c:ac:64:c7:8e:a1:aa:05:1d:5b:ce:c2:a8:
                    a5:45:37:d8:56:9b:3a:27:c6:86:8c:6b:5b:a8:2b:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:84:32:45:F0:8A:55:EE:B7:60:C0:07:85:94:D8:C0:69:76:75
            X509v3 Authority Key Identifier:
                keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:8a:cc:ac:8e:f5:38:f5:4d:5c:d7:48:ab:3d:92:9e:b1:
         df:64:9e:93:12:51:ff:42:a3:ce:78:f4:7f:6e:ac:b0:16:69:
         6a:dd:fc:3d:00:95:af:03:b0:1a:c0:6c:3c:88:d8:c2:48:97:
         70:c3:1e:33:08:a2:6d:85:22:5e:c9:32:6a:85:94:0c:0e:14:
         8f:78:87:df:76:9b:a9:c0:9b:fc:89:a8:61:2e:4e:f7:79:9d:
         ec:6b:5c:e5:87:27:1b:6a:8b:78:1e:28:2b:32:05:f5:df:6e:
         0e:1d:b9:b3:f8:75:9d:ef:65:9e:86:e3:f1:b5:16:b8:07:dd:
         72:5b:62:cd:c5:62:75:73:71:42:dd:f3:0d:ae:b8:00:10:5b:
         fe:9f:ae:26:67:ee:69:ce:f6:af:3d:31:d4:f3:a8:7e:ae:f5:
         32:e9:48:02:8c:62:3f:1a:70:d5:f8:a6:31:b8:f2:52:12:a3:
         05:a2:bb:c1:fb:a7:b8:34:00:4b:8f:74:c9:e9:41:19:d8:37:
         fb:9d:64:4f:44:60:1a:da:43:39:7a:86:71:c9:a1:ac:39:9e:
         82:11:1d:21:5c:3e:c3:43:8f:85:3f:a5:f8:23:35:07:1d:5f:
         d4:4b:36:02:4a:18:6c:19:c4:d5:ae:59:91:46:05:bb:dc:3e:
         31:39:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:07 2026 by rpki-client