Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File:                     8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier:          VhOGjAmJNmNJfOjRhQfa28z3gQfcb/hrJ7gd/pKP24E=
Subject key identifier:   31:3C:20:43:21:40:BA:E1:82:4D:C4:76:23:BA:02:38:55:A7:30:E4
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer:       /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number:          0228
Signing time:             Fri 17 Apr 2026 02:27:23 +0000
Manifest this update:     Fri 17 Apr 2026 02:27:22 +0000
Manifest next update:     Fri 24 Apr 2026 02:27:22 +0000
Files and hashes:         1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: ReZXbySrgCVwdwNazjYGdUOgqvdeGg09bi1/Xw+iR8c=)
                          2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NqQKBASAXdv1LlkB9yqcFqDG6FI2OUjfgdiKy6gJA/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
                          rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
        Validity
            Not Before: Apr 17 02:27:22 2026 GMT
            Not After : Apr 24 02:27:22 2026 GMT
        Subject: CN=69e19a8a-c44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:17:45:a9:77:d0:11:66:e2:d6:e1:64:f9:
                    0d:36:1d:34:d8:ef:86:a2:81:8f:3a:c8:f4:d2:dd:
                    bd:d5:dc:08:4e:b7:28:84:5f:9f:a9:9e:d2:dc:f4:
                    41:95:fd:fe:58:fd:44:29:c5:2d:4e:d6:61:45:05:
                    1c:79:51:62:cb:bd:03:f5:c7:23:09:c8:af:96:22:
                    e2:42:f9:2e:15:5e:64:ca:5f:0c:84:b4:b3:73:fc:
                    ae:8c:06:bc:d1:7f:9c:17:19:4f:bc:d1:d4:fe:d3:
                    e9:7a:a0:de:66:db:4e:0e:a8:0b:e9:ce:e4:27:3f:
                    52:a7:27:7b:e2:5f:19:16:a2:3c:cb:29:4b:73:5c:
                    b1:81:8c:69:34:88:f9:f1:0c:8d:e5:3b:be:ad:7a:
                    15:af:67:98:11:6c:57:6d:cb:b6:86:29:f7:a1:f4:
                    23:b6:8c:3d:36:19:ad:74:4a:14:97:21:9b:e4:10:
                    b2:15:64:51:84:56:23:81:7b:d0:ad:c5:7e:de:da:
                    50:ad:6f:08:61:b8:43:79:f1:94:f4:eb:64:cf:71:
                    66:7e:29:1f:da:b7:5b:e9:97:3f:28:7e:eb:28:ae:
                    b9:ee:98:7f:35:c6:58:d0:22:c8:0f:9e:26:ce:b3:
                    65:eb:01:91:36:35:df:57:66:7d:13:0f:a5:6d:1e:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:20:43:21:40:BA:E1:82:4D:C4:76:23:BA:02:38:55:A7:30:E4
            X509v3 Authority Key Identifier:
                keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:ce:14:5c:5c:af:56:9c:34:31:37:d7:41:c4:af:88:c3:
         7b:19:2f:89:ff:4e:4f:37:b5:7a:80:26:11:13:03:d4:a6:f5:
         71:97:47:6e:8d:95:4f:ee:db:78:50:3d:ca:12:c4:3f:7f:6a:
         ff:85:a7:40:b0:6a:24:84:2f:5e:98:74:50:8f:60:e4:db:0d:
         aa:5e:b8:51:29:67:fb:89:76:c7:11:d6:92:ac:b5:e6:c3:4e:
         43:8a:eb:ed:db:45:2f:6c:f2:27:12:af:71:74:d0:78:01:25:
         14:81:1b:62:3a:c8:29:0a:20:78:9b:b6:21:39:c4:f5:03:65:
         e6:d5:a5:b6:8c:0a:d2:b7:f0:d1:35:e6:17:38:63:9c:4e:c1:
         0d:de:b5:c7:15:2c:9e:e8:ed:3c:c9:0e:09:d2:2c:5f:65:a7:
         67:12:07:e1:73:f8:83:a9:ac:74:27:8f:e9:6e:28:2f:eb:63:
         da:8f:b9:da:d8:ef:29:30:a2:b0:10:96:6d:f5:5d:55:4e:8e:
         1a:35:c1:5b:45:ef:be:6b:ee:65:6d:16:6c:23:3e:58:0d:e0:
         b8:d0:2f:c1:b7:18:6f:5c:0e:d5:18:69:df:17:db:57:72:dc:
         f6:b1:7d:e6:02:3d:a6:bf:5d:f6:15:fe:fd:01:72:bf:b5:b7:
         d7:fc:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:18 2026 by rpki-client