Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier:          ziBf1yjRP1m8cq3MQuolXXr+t/+KJ2J252wztcDYbNc=
Subject key identifier:   7F:84:0C:D9:64:95:37:DB:CF:00:E7:DD:C4:67:FA:F6:22:C8:CE:26
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       05C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number:          05BB
Signing time:             Sat 18 Apr 2026 23:01:47 +0000
Manifest this update:     Sat 18 Apr 2026 23:01:47 +0000
Manifest next update:     Sat 25 Apr 2026 23:01:47 +0000
Files and hashes:         1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: gIkorkrmZGhDLUM7F/nEYNPDdQ/NqWPqQwVgG7u69Fs=)
                          2: C847114C07D411ECBF875117C4F9AE02.roa (hash: RTJD+7WiiJ9osfnBTe3ZJqaDqHxNHYqplthmyXrSeGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Apr 18 23:01:47 2026 GMT
            Not After : Apr 25 23:01:47 2026 GMT
        Subject: CN=69e40d5b-782a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:4a:3c:7d:f5:c3:17:40:e8:4c:e8:cb:05:
                    c0:80:9d:ab:9e:e0:5b:33:55:b3:df:fc:2d:8b:62:
                    d8:34:a5:8a:8d:58:a1:78:d6:78:18:7b:8c:b7:cf:
                    bd:e8:a1:03:3d:c0:55:d2:f5:50:25:96:4d:88:0d:
                    81:26:a1:4e:a8:fe:76:e3:76:15:9f:36:5c:be:60:
                    81:07:9f:95:28:9c:7d:7d:cc:0f:8a:0d:5c:3f:ed:
                    37:55:63:72:1e:6a:7c:b0:b4:3d:4b:d5:fe:66:9d:
                    1d:30:3f:0f:6d:68:d0:d3:8a:f7:81:73:94:7b:a2:
                    9b:ed:95:6c:ec:38:23:56:3f:46:af:bd:2a:7e:ff:
                    04:a6:22:c6:71:3f:1e:c0:f8:72:c6:70:47:16:db:
                    56:0a:df:19:f7:37:44:3f:8f:77:8e:51:bc:19:a3:
                    f1:3c:d8:1b:5f:2e:7e:f9:53:0f:25:de:f8:90:28:
                    8f:83:d3:5c:c3:a3:6e:44:15:32:b1:a5:f2:40:f1:
                    0f:3d:77:f7:5d:44:41:28:73:ac:2c:c1:a9:8f:68:
                    1c:d6:cb:8b:c4:34:86:98:c8:fe:90:ba:31:ac:d3:
                    a2:9f:32:38:0b:c5:9f:d7:1a:77:84:2f:18:d4:16:
                    35:da:52:8e:81:18:3d:ca:74:a8:3b:0d:2a:f6:8f:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:0C:D9:64:95:37:DB:CF:00:E7:DD:C4:67:FA:F6:22:C8:CE:26
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:4d:27:58:30:92:71:6a:9f:9f:ff:ff:08:08:6c:56:db:
         3d:b2:ca:fc:66:a2:bf:4a:5f:27:4e:fd:cd:e2:18:95:58:0f:
         57:b9:5b:d8:d8:4b:8e:9f:92:3e:ae:31:62:24:a5:a2:cc:66:
         c7:b2:21:ea:20:64:f5:22:7e:ba:7d:53:5f:a0:53:9f:d3:d4:
         c9:ea:4b:57:e9:f6:7c:da:2f:8d:39:a7:79:b1:5c:81:d7:f8:
         bc:40:d2:8a:fd:dc:37:ef:7f:d9:17:72:92:ea:29:bc:75:d4:
         a7:b1:4e:28:82:ac:93:36:20:8d:9e:17:57:d5:7e:ed:0f:bf:
         09:ba:24:1c:e8:0d:32:c2:07:9f:1a:12:a5:c4:94:f4:d8:9a:
         cb:d2:ff:39:2b:dc:c6:8b:6b:71:67:d0:2d:45:a4:8a:9b:48:
         da:6c:df:f5:71:2c:1c:85:f6:83:b0:3b:05:20:15:19:dd:94:
         a0:ea:6e:c5:02:ec:fc:96:18:25:0c:ce:aa:67:e9:aa:4f:40:
         0c:ec:59:83:02:12:85:46:15:cf:ab:6a:80:7f:ef:2f:8f:dd:
         04:a9:94:58:ba:a1:57:24:ce:f7:9b:fe:9d:c2:fe:67:26:a4:
         5c:7d:54:7c:de:69:ce:52:22:be:ee:de:70:21:c7:af:2c:2b:
         a1:c8:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:15 2026 by rpki-client