Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File:                     Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier:          yhpOCO1HLX9fU+WBNUlYPWPe1OTodm1PtxQRf144j1g=
Subject key identifier:   96:7A:99:01:7A:62:1A:B9:6C:68:EA:E1:50:73:FF:CA:CC:9F:2B:53
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer:       /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial:       031E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number:          0318
Signing time:             Fri 17 Apr 2026 01:04:04 +0000
Manifest this update:     Fri 17 Apr 2026 01:04:04 +0000
Manifest next update:     Fri 24 Apr 2026 01:04:04 +0000
Files and hashes:         1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: baNmRBQ51t5w9hrVg/vexc2iJzdw80R5FRJry4Epdho=)
                          2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: hRSBw3j57fal3n5v23N17SHqFFyn7GkCbwIU7hzC2CA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
                          rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798 (0x31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
        Validity
            Not Before: Apr 17 01:04:04 2026 GMT
            Not After : Apr 24 01:04:04 2026 GMT
        Subject: CN=69e18704-c27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:83:88:3f:d2:51:41:d6:e7:2b:01:c5:31:91:
                    49:f4:2f:f6:65:7a:1c:9a:0e:05:10:6a:8b:90:7b:
                    86:21:dd:50:da:6f:15:11:13:e9:9a:c5:72:3e:34:
                    ff:99:84:ee:2a:3a:68:ce:76:3e:38:b3:2a:9b:33:
                    35:e9:5f:35:90:69:af:f4:7b:01:69:7c:83:21:bc:
                    64:03:df:83:27:a0:99:41:dc:32:54:af:b5:6c:82:
                    c9:f5:fe:f8:1a:01:ad:df:73:e6:ed:9a:44:3d:44:
                    de:6e:2d:4d:9d:d4:cd:07:54:c4:84:b7:b9:4e:e3:
                    1d:a6:8d:45:9f:13:29:7e:76:12:06:67:cb:43:dd:
                    bb:71:8c:bb:1a:62:b2:25:e2:54:d8:92:b6:2c:be:
                    63:17:7c:ff:14:18:0b:d3:cc:46:84:6b:b6:f8:80:
                    38:d4:cc:66:89:dd:5b:6b:2b:ef:db:b4:68:cf:b7:
                    22:a9:c8:9e:a3:4c:5d:9c:75:4c:ad:92:5d:58:6b:
                    74:b8:f3:2d:c6:c3:15:2d:f6:3a:e1:08:b3:00:39:
                    34:0f:1a:9b:fc:1c:41:0d:cc:c0:28:8b:29:f4:4c:
                    f1:cc:f7:f0:25:48:73:0a:68:d2:e4:e9:b8:2c:12:
                    a5:c8:14:5d:21:26:10:35:11:47:47:8c:23:e6:8d:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:99:01:7A:62:1A:B9:6C:68:EA:E1:50:73:FF:CA:CC:9F:2B:53
            X509v3 Authority Key Identifier:
                keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1a:49:3d:64:8d:29:87:8f:1e:58:9c:ae:e3:22:63:29:3e:
         c9:a6:11:30:02:13:76:ec:28:b3:46:76:9a:59:7f:ae:bd:e1:
         f7:b3:3b:6e:85:1b:90:d9:ee:69:7e:fb:6b:56:c9:ec:46:07:
         62:f7:ca:73:1c:ae:7f:06:90:d3:a3:cb:15:15:35:45:31:cb:
         c3:3e:0e:91:01:83:60:6a:d2:24:9a:22:35:e8:8c:a2:96:27:
         88:53:5c:c2:24:5c:0d:20:e0:61:3d:66:6d:97:68:e3:c9:9b:
         2c:16:f3:e0:24:8d:7a:fa:a0:72:a3:7b:0c:2b:9f:ca:c2:c8:
         53:61:f3:57:3e:8c:8f:57:8e:57:b9:04:47:e8:b3:4b:58:67:
         ce:e8:7e:e1:8e:42:92:37:d3:ea:97:56:d7:8c:7b:11:5e:7d:
         37:aa:4e:62:df:5c:81:53:2c:50:dc:d4:bf:e6:ce:7d:a0:3b:
         b3:5d:7d:71:f1:c7:08:80:a6:79:2a:ca:47:c7:9d:84:ae:01:
         c3:9b:3a:98:63:b3:1f:0e:eb:49:84:ff:42:48:7f:d2:36:32:
         e3:c8:d2:fc:0e:63:c1:a2:55:6b:aa:e8:3a:29:3e:f2:57:51:
         d3:e5:63:96:60:7a:bc:6e:5d:a7:4a:11:66:45:25:34:89:3a:
         77:55:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:53 2026 by rpki-client