Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File:                     t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier:          zFO3hKBt9K2Z46VEU/OAPdZIVsGF0GEs39TiQiTaSDI=
Subject key identifier:   96:00:52:D3:EC:7E:66:45:A1:78:8F:A0:EE:FC:4D:7F:60:E1:88:1E
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer:       /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial:       190D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number:          18F9
Signing time:             Thu 16 Apr 2026 16:23:43 +0000
Manifest this update:     Thu 16 Apr 2026 16:23:42 +0000
Manifest next update:     Thu 23 Apr 2026 16:23:42 +0000
Files and hashes:         1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: YO8DLGivKPRbxNSDo1XRSfbxQqAIQcasZ6CcpCjsfF0=)
                          2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: eo5Er8iuxT75wLcKVzFBlRXEOJUUc8Rit00G+PSlQNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
                          rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6413 (0x190d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
        Validity
            Not Before: Apr 16 16:23:42 2026 GMT
            Not After : Apr 23 16:23:42 2026 GMT
        Subject: CN=69e10d0e-6724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:1c:06:56:74:f3:16:af:df:93:f3:79:3c:
                    e0:f3:f2:81:bb:85:85:a0:f3:9c:16:d8:dc:19:11:
                    2d:ac:01:0b:96:0e:b3:b6:6e:36:68:94:07:40:17:
                    3f:6c:0a:7b:95:b7:5b:43:15:77:06:0e:d7:e7:1e:
                    d3:c0:05:73:58:7b:77:7a:78:22:78:43:b2:5e:31:
                    1c:94:45:5f:37:08:43:14:8d:c0:18:2d:81:ea:72:
                    99:6e:56:57:c2:77:5f:c8:ab:96:02:cf:59:34:cd:
                    94:ec:b8:40:15:fe:88:75:4d:5d:dd:e6:a7:79:b0:
                    33:45:8b:5f:9c:6c:cd:99:13:6a:ff:60:34:19:3e:
                    c3:2a:45:f0:e8:cc:fd:e9:ca:2c:a4:d8:74:2a:1b:
                    e8:d8:43:94:b7:d4:a3:b9:50:a6:04:6b:ef:f2:8c:
                    f2:94:a4:3d:74:2a:f1:6c:0e:1f:ab:65:32:d8:87:
                    87:ab:ce:c6:58:23:2a:a7:b3:73:f0:1a:c7:6e:1d:
                    8f:a8:e0:8b:62:15:35:7f:e2:5b:ac:1c:68:75:29:
                    db:ac:9c:92:56:28:c1:94:d9:72:56:fe:13:2a:d5:
                    44:a2:36:f8:26:11:86:80:af:07:79:97:18:99:15:
                    83:b9:6b:f8:c1:2e:87:17:64:10:2e:2e:8a:aa:c8:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:00:52:D3:EC:7E:66:45:A1:78:8F:A0:EE:FC:4D:7F:60:E1:88:1E
            X509v3 Authority Key Identifier:
                keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:3c:0e:8c:7d:eb:f1:0c:c9:1c:a5:f1:0b:c9:55:d0:6b:
         17:fc:7f:3b:5c:6f:bb:8a:24:ab:1c:35:99:24:b7:bb:50:87:
         08:25:35:55:cd:9a:0a:f4:42:a0:50:53:ef:c7:f5:77:29:b1:
         26:51:cc:90:18:a0:64:9b:12:68:c4:47:85:1e:aa:d1:12:c9:
         66:a6:8e:78:fb:1a:39:db:73:0c:b1:dd:77:a4:26:b0:27:60:
         bd:77:8b:e1:fa:9b:68:72:7b:5d:78:f3:73:3f:ee:ae:a2:23:
         f6:0c:ae:2d:46:f5:f8:90:53:10:60:65:2d:57:e5:e5:d3:15:
         41:1d:7b:04:57:63:a0:6e:72:2b:b8:2a:f1:83:60:fd:51:92:
         c1:52:f6:94:e8:34:4b:c6:e0:d6:1a:5e:41:f3:7a:8e:ac:db:
         f1:27:f6:9b:ce:a9:80:0c:67:91:1b:d8:67:bd:bb:07:74:7b:
         69:79:a7:a5:90:2c:6d:25:3e:fe:ba:f6:b9:41:3e:55:7b:e2:
         77:51:51:34:45:cf:3a:d4:a0:ae:ed:d7:29:0e:77:ad:77:46:
         bb:85:ba:13:eb:dc:79:ca:6d:e4:eb:ef:b7:a3:f2:da:c8:2b:
         3f:c2:3e:cc:f1:e0:6f:c9:25:8b:71:60:84:d1:aa:53:9f:99:
         92:c9:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:04 2026 by rpki-client