Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft
File:                     hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json)
Hash identifier:          SEmXIKsAgeT2hJpl07c2qtFRoHnDiLLcKLXXwCCCMOg=
Subject key identifier:   83:A5:3F:B3:26:11:AD:8E:35:31:4F:7B:22:3E:5E:7C:57:99:5E:BD
Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4
Certificate issuer:       /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4
Certificate serial:       1ACE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft
Manifest number:          1AC3
Signing time:             Thu 16 Apr 2026 16:15:35 +0000
Manifest this update:     Thu 16 Apr 2026 16:15:35 +0000
Manifest next update:     Thu 23 Apr 2026 16:15:35 +0000
Files and hashes:         1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: Q9/qkOTukqI8IcxgSgpv+NV3QsY3OkIWJ/jcZL2p6Gc=)
                          2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: te4uWB0jXaN5MAh9dRrKutkLXrpOzUKxCHNdQMjzpZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl
                          rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6862 (0x1ace)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4
        Validity
            Not Before: Apr 16 16:15:35 2026 GMT
            Not After : Apr 23 16:15:35 2026 GMT
        Subject: CN=69e10b27-6b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:12:0c:f6:98:6c:83:7d:10:e2:49:95:fa:
                    7e:4e:b3:b6:87:65:c8:32:52:9a:d7:cb:d1:17:7d:
                    5f:d6:d7:4f:c8:ac:86:68:67:15:07:5f:57:07:da:
                    ef:14:55:de:13:8d:a4:5a:0b:31:28:df:a5:f0:19:
                    cf:d0:27:57:ea:de:e1:b8:0b:f8:5e:63:29:1d:4b:
                    b1:ab:16:ae:1e:e2:c8:10:06:58:5a:26:ee:c4:6e:
                    35:9e:1e:2c:93:88:37:57:05:f7:42:97:a0:cc:31:
                    13:bf:bf:94:b1:d8:10:ce:92:c7:1e:12:8a:83:b6:
                    03:b4:a6:92:19:4a:cc:46:45:e3:1d:f5:8a:5f:b9:
                    0c:44:78:7c:9d:50:db:d1:14:3c:e6:0b:b0:0b:53:
                    1d:d2:db:90:b9:d5:02:fb:5d:95:92:cd:6e:fb:fb:
                    2e:b8:c5:aa:c7:57:d4:bd:b5:ba:9e:24:93:6c:d4:
                    16:32:9d:19:28:5d:e8:79:c5:ef:58:b5:a0:75:38:
                    af:08:76:3d:10:04:d2:aa:02:4d:12:87:5a:d1:92:
                    66:b0:ff:02:1a:2d:72:ea:33:e6:93:c3:25:df:11:
                    a3:d3:ab:be:34:f7:4e:51:ef:44:87:d9:90:f6:fa:
                    25:5d:3c:35:7c:7c:07:e9:73:9f:06:44:b1:68:56:
                    83:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:3F:B3:26:11:AD:8E:35:31:4F:7B:22:3E:5E:7C:57:99:5E:BD
            X509v3 Authority Key Identifier:
                keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:27:11:8d:e8:0d:15:49:51:86:50:b3:77:17:51:93:4f:
         f4:c9:7a:cd:d6:ef:b7:42:6c:43:e7:68:64:f0:57:85:4f:72:
         ef:44:3b:f2:8f:95:f5:8f:2c:f5:50:83:90:94:b9:61:c9:92:
         78:12:8d:5a:48:de:71:f1:20:0c:fd:d5:d0:90:7f:6b:2e:eb:
         ff:d6:08:6b:a4:de:0e:77:c5:ee:45:eb:b5:6b:11:6e:95:14:
         20:4a:03:08:bf:aa:97:4f:94:3c:1b:5f:9c:4b:a4:ce:92:f7:
         c8:ed:c4:32:60:49:f2:35:a9:44:ba:13:67:46:5f:90:65:e6:
         0d:8d:73:91:c1:75:e1:80:fc:29:47:0f:22:6f:a3:d4:69:5a:
         b9:4c:bf:c5:bc:43:14:e9:75:6f:f4:67:15:27:40:a9:b6:2b:
         1e:c4:f2:2d:a5:cf:e0:12:b2:30:7b:d3:f3:ea:d4:49:a2:6e:
         95:5c:34:22:86:88:97:d3:8b:08:ec:13:73:dd:19:94:eb:89:
         d8:5e:20:b8:86:64:83:0b:66:48:10:77:c8:3a:4e:29:ef:68:
         e9:c2:f4:dd:ea:5a:f5:ed:ae:a8:92:d4:58:4b:cd:b2:6e:18:
         65:1d:09:78:15:9f:9e:cf:b5:0b:f8:01:ac:c8:75:42:88:87:
         cb:12:87:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:14 2026 by rpki-client