Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
File:                     2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json)
Hash identifier:          ClRpNKDbj/Zb9TJB7pKW3/yDyW+nNOGAEjQ76mUKEE4=
Subject key identifier:   73:57:C6:1D:F3:DD:79:85:87:66:8C:35:3B:9C:55:F3:15:42:EB:8B
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       044C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
Manifest number:          0445
Signing time:             Fri 17 Apr 2026 00:08:59 +0000
Manifest this update:     Fri 17 Apr 2026 00:08:59 +0000
Manifest next update:     Fri 24 Apr 2026 00:08:59 +0000
Files and hashes:         1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: ol312/N7MTYPRNwA9NTAAuvpv2UwQEIhQKUci7ovLV8=)
                          2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: aeo+0u6kj/HbCCELyJjH0LNdDHk/8Y8ZluKCvUXbjJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
                          rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
        Validity
            Not Before: Apr 17 00:08:59 2026 GMT
            Not After : Apr 24 00:08:59 2026 GMT
        Subject: CN=69e17a1b-2c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:54:76:e6:c7:5f:34:20:c4:dc:11:30:ca:
                    27:2f:e2:86:99:e7:f1:1c:c6:e1:5f:53:36:3c:ba:
                    1f:87:e0:79:4d:ca:3f:a9:27:7b:e9:d6:13:86:0f:
                    60:31:d6:e9:9c:50:83:8a:84:cd:e3:10:bf:07:32:
                    c5:24:7e:17:ee:84:68:a7:96:2a:62:0f:5c:fd:d7:
                    0f:19:46:92:3b:fd:08:79:15:92:4f:86:5d:98:1e:
                    54:da:4f:4b:5b:db:e6:68:af:c9:98:a8:cc:3d:14:
                    b0:a8:5f:10:6b:1f:71:45:e4:7b:66:73:18:01:d3:
                    cc:fb:c3:ec:bd:54:fb:b8:75:9a:f5:6b:b8:02:09:
                    02:df:cf:04:b5:4d:f3:07:ae:e5:e5:b7:2a:5a:6d:
                    38:4f:01:37:08:05:0f:2c:8e:1c:1f:c2:e1:ad:c9:
                    45:06:e1:08:f8:67:b0:41:81:2a:6e:14:2d:0f:09:
                    a3:3a:1b:c6:e9:63:10:3d:bb:5f:af:14:2a:69:ab:
                    4b:4c:93:5e:f1:e5:44:a5:29:fa:d4:44:2c:27:b9:
                    db:ea:09:0d:ba:9a:6e:49:44:1e:77:29:dc:8d:e1:
                    b7:90:2e:de:e8:74:77:d7:cf:0d:28:bc:25:97:aa:
                    64:ac:b3:80:e1:89:44:d2:c0:3b:f5:7a:09:43:53:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:C6:1D:F3:DD:79:85:87:66:8C:35:3B:9C:55:F3:15:42:EB:8B
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:9c:0f:e6:2c:02:28:83:12:21:c2:62:42:15:6c:b4:8a:
         a0:ef:4b:72:d5:99:6d:8c:6c:42:b7:9c:f0:72:55:99:3c:a5:
         ab:bf:cd:5b:ef:19:fa:af:a7:44:4e:d3:ef:06:b2:96:b7:30:
         3e:94:1a:63:c6:5e:67:7a:8a:4c:d6:16:15:d8:2b:24:0a:5a:
         8b:09:78:52:b4:29:34:2f:fa:f2:47:1f:4b:5b:33:92:17:e9:
         59:08:50:06:f3:e9:8a:f1:f2:3f:d9:b4:2d:33:82:96:20:ce:
         8b:f5:ec:d1:b1:4f:b9:0e:99:0b:3a:ff:ca:58:bf:a7:a0:5a:
         29:14:82:16:c9:e0:f8:6e:4c:2e:3b:8e:69:cf:f3:ac:f4:b1:
         a0:94:4e:e2:f4:1e:66:3d:3d:46:1e:e2:5e:f3:d5:9f:d3:04:
         a3:68:7d:2d:55:eb:39:06:73:3e:f9:1a:42:e9:c7:00:f0:df:
         6d:6c:24:a9:7e:e8:89:fe:6b:cc:8f:0d:96:32:a5:08:c8:e6:
         a3:63:6a:37:7f:a3:a4:4b:69:6f:5f:b3:69:20:c5:36:96:c3:
         ef:b5:6b:49:41:6b:86:67:fe:d7:71:39:2f:e3:16:5c:c2:73:
         e9:20:d4:cb:8d:7d:86:ce:f4:78:28:51:28:d2:cb:30:d9:59:
         18:6e:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:29:58 2026 by rpki-client