Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File:                     909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier:          u8OgeTNwZIwTHv+b+3CAowk2H57LixvKBA24HdEcRAs=
Subject key identifier:   D3:F1:84:DF:63:EE:A4:B1:EA:21:95:CA:23:D5:0E:D6:29:CE:6B:7A
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer:       /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial:       1326
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number:          1320
Signing time:             Thu 16 Apr 2026 16:56:52 +0000
Manifest this update:     Thu 16 Apr 2026 16:56:51 +0000
Manifest next update:     Thu 23 Apr 2026 16:56:51 +0000
Files and hashes:         1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: +pSJTUjaUy28UZFDpCvxqnmPAcAYFK9w80uF2GL2StI=)
                          2: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: NGAAp5bKrPsqJtekMakHs7H1OfK9jRPnn3ajrINjxiM=)
                          3: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: 3ZXUqVaSWRuqxEz8m47I5k4iPWpdb6iN8DnYHpIukoI=)
                          4: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: A8V1gIPZhwUZTarJ4Mgm3GQ16Ga+pusOMKw3yDRvHDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
                          rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4902 (0x1326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
        Validity
            Not Before: Apr 16 16:56:51 2026 GMT
            Not After : Apr 23 16:56:51 2026 GMT
        Subject: CN=69e114d4-c385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:de:02:4b:a0:14:ee:d7:f7:f4:66:65:36:
                    df:94:6e:c1:c6:79:b4:3c:5e:3e:2e:35:ee:aa:4d:
                    7b:c0:54:b4:7c:91:7b:56:64:fb:e8:98:2a:a2:01:
                    e9:9e:2b:75:f7:0b:95:9c:28:1c:3d:cf:f4:ad:31:
                    07:bf:f6:0a:b7:08:e6:d1:ca:c8:1b:e1:06:7b:54:
                    95:e5:65:1c:d6:d1:22:f1:77:68:63:f6:b5:d8:93:
                    2f:66:48:16:4b:97:cb:4b:21:ab:d9:6e:eb:d4:1c:
                    3e:90:b8:a8:7f:cb:ca:3a:31:4b:bf:42:96:85:8f:
                    18:a1:10:47:d3:fc:9a:3e:ec:ec:52:69:95:b4:c7:
                    d6:7f:f0:6d:00:1d:ea:47:38:76:4e:73:d2:99:ce:
                    9d:d9:a9:33:22:23:2c:e9:e9:88:3b:d3:2d:2c:a8:
                    40:60:6a:7a:a1:c0:31:7a:e4:97:2e:3a:77:57:a6:
                    f9:7c:7f:a6:6a:48:48:ed:28:ee:85:3e:be:1d:cb:
                    40:8b:f6:19:66:21:97:a7:36:67:6a:35:a0:8a:da:
                    07:bb:20:95:d4:9c:85:67:cf:8d:99:96:9d:b5:bd:
                    77:6a:76:97:74:f6:83:8e:9b:3e:2e:b6:42:36:19:
                    21:d1:3c:9d:25:70:ae:12:87:b9:07:72:ff:b9:23:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F1:84:DF:63:EE:A4:B1:EA:21:95:CA:23:D5:0E:D6:29:CE:6B:7A
            X509v3 Authority Key Identifier:
                keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:3c:f9:25:2e:35:26:08:cf:cf:19:53:e3:a7:4c:50:5d:
         a6:40:fe:0b:1b:2a:60:eb:14:2e:57:ef:0d:fc:22:3a:5c:03:
         2a:da:d7:99:7f:d3:96:f4:41:b8:ae:ca:0c:98:58:73:33:4b:
         fb:1b:43:ca:92:9f:09:78:98:09:0d:d9:cb:34:6c:13:03:33:
         0d:03:5c:db:32:26:b0:8e:fa:08:4a:ee:1e:45:88:39:2d:04:
         55:91:aa:5f:fc:51:70:30:de:a2:ef:f3:54:5f:b2:40:9f:eb:
         e4:e2:d7:72:6f:08:8d:4b:88:64:d0:2b:08:f4:e2:19:52:f3:
         88:df:7a:0b:9e:1d:f9:a0:1f:61:26:a4:05:45:b5:9c:d9:cd:
         58:90:d0:8f:ff:5d:69:0f:38:d2:14:b4:b2:34:e9:5d:ad:43:
         fe:93:ab:28:6a:14:8a:22:b1:25:ee:ab:b6:b3:0a:4e:3a:94:
         7c:53:c3:25:ac:dc:0f:77:57:28:af:7d:7e:e2:f1:52:a8:b2:
         4d:eb:00:b2:15:90:78:68:47:54:60:3d:bd:e2:9b:37:39:75:
         34:8f:b0:86:88:e6:d6:70:66:67:87:1d:f0:a7:93:25:d1:4f:
         01:f2:a7:cf:66:4b:ea:9d:dc:0d:d1:04:67:8f:ab:91:86:fe:
         43:51:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:39 2026 by rpki-client