Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
File:                     rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json)
Hash identifier:          IntNfXHwRJXS+TpxX0iEzl3bo7KBI6X23TjqiGOUbmo=
Subject key identifier:   36:6B:55:AD:11:FA:B6:46:CD:45:0F:AC:3B:E1:94:E5:1E:C5:AF:1A
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
Manifest number:          01F2
Signing time:             Sun 19 Apr 2026 04:15:16 +0000
Manifest this update:     Sun 19 Apr 2026 04:15:16 +0000
Manifest next update:     Sun 26 Apr 2026 04:15:16 +0000
Files and hashes:         1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: mAvEUi1JmuO/h++1FpRyigI+OGGxYyDl5eIpDIStK94=)
                          2: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=)
                          3: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=)
                          4: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (hash: QLkjHyRkvA9YbmHmikqdDsD4DAHlBTN2EdsuEF0kfO0=)
                          5: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=)
                          6: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=)
                          7: 3B63CC3A36F911F1A6FBCDFDBB833773.roa (hash: oQa8q1kf4VEqjRhRUhaXshtx79rFOxFj4CvCFC4dSLY=)
                          8: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=)
                          9: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
                          rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
        Validity
            Not Before: Apr 19 04:15:16 2026 GMT
            Not After : Apr 26 04:15:16 2026 GMT
        Subject: CN=69e456d4-5248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:1a:5c:d9:93:b7:85:e0:29:c0:d3:50:b9:
                    d5:46:29:c4:6c:fb:05:3d:83:e4:b9:54:5a:de:ab:
                    67:9b:2c:63:a0:e8:6a:a1:7a:77:2f:09:6f:4a:7e:
                    f8:17:b6:d3:57:10:2c:6b:dd:4d:4a:fd:11:30:3c:
                    f7:90:0c:6e:a9:73:bb:84:b2:e5:65:2a:67:09:7b:
                    a9:6a:9a:1f:6f:cf:06:ba:e2:17:73:6d:a6:97:8d:
                    de:1e:eb:bc:31:ac:df:36:8b:45:a0:0e:23:3f:51:
                    40:2a:e4:0f:ae:26:ec:39:7f:ef:6b:ec:b1:59:7e:
                    22:e1:35:95:bb:f2:8c:36:2c:b9:d2:8c:66:d9:31:
                    4d:a5:73:ed:ab:e5:a8:80:e8:ec:dc:ed:68:6d:b9:
                    41:61:14:55:11:91:5a:c3:35:5d:97:60:89:a8:55:
                    a7:f6:11:d9:d6:6a:f3:ca:ae:89:cd:3a:38:67:b0:
                    b0:9a:ea:de:40:9f:04:1a:8d:11:78:cd:eb:0e:d6:
                    b2:3d:0d:57:0c:86:e5:0e:e9:36:43:90:21:3b:f0:
                    7a:26:30:64:b9:3a:47:35:55:ad:6f:a0:62:d7:85:
                    b6:d5:1f:83:98:9b:b7:3a:39:9b:e5:67:e0:76:81:
                    aa:b7:02:75:13:30:3f:64:dd:fa:13:55:dc:b6:1e:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6B:55:AD:11:FA:B6:46:CD:45:0F:AC:3B:E1:94:E5:1E:C5:AF:1A
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:7b:09:fe:cb:1d:6b:0d:eb:a2:81:fa:1a:c8:b9:cb:6e:
         e0:31:10:35:f4:76:75:c2:f7:8f:e7:99:fe:c4:e6:7c:dc:4b:
         76:ae:3e:af:9b:9e:49:00:57:f4:7e:ec:23:52:7c:1a:5b:68:
         43:e1:ae:58:08:03:a6:38:fb:71:a4:65:bc:5a:e8:76:a3:21:
         2c:fd:9d:c5:52:dd:57:31:6d:50:aa:fd:55:92:ee:4c:d6:ad:
         b2:fe:39:bd:71:d0:0d:7d:56:52:7e:26:89:b4:e8:9a:16:ec:
         07:c1:da:d5:cb:25:50:42:68:45:23:69:5b:23:7b:2f:22:80:
         51:9a:0c:04:49:80:a9:09:92:67:f9:e0:3a:4b:f1:90:3b:3c:
         82:7a:6b:5a:97:c7:8b:a8:ff:16:f1:87:60:e0:40:87:7e:91:
         f3:92:32:03:24:c0:17:14:32:dc:14:5b:23:de:f7:51:1e:d3:
         c6:dd:79:4a:3c:e1:00:59:4c:4b:09:03:3f:2f:d3:e0:e4:64:
         88:13:1e:2a:ed:06:3a:8e:91:48:c8:64:36:19:b5:04:52:2c:
         d6:7f:f3:46:9f:16:67:d1:73:8f:c4:5b:3f:0c:e1:f2:57:72:
         c9:cf:9e:17:82:55:9f:c0:65:a1:ed:ae:45:8a:e5:cb:56:1d:
         68:42:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:04 2026 by rpki-client