Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
File:                     83g6eIBQ7px-F4lbU93tZGqSTEA.mft (raw, json)
Hash identifier:          Fz6Xk1SY+Y41t4uTCo8kMgYWbzrkNAcl7aPIaMBoB48=
Subject key identifier:   58:F8:1B:06:32:86:C7:4C:F8:64:F4:D1:74:96:48:AB:C2:6E:BC:C3
Authority key identifier: F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
Certificate issuer:       /CN=A9158019/serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
Manifest number:          14
Signing time:             Fri 17 Apr 2026 08:43:45 +0000
Manifest this update:     Fri 17 Apr 2026 08:43:44 +0000
Manifest next update:     Fri 24 Apr 2026 08:43:44 +0000
Files and hashes:         1: 83g6eIBQ7px-F4lbU93tZGqSTEA.crl (hash: qYgF18S5gkQnbxidiumL6Xp4Zcb4P7rIFTEFRhypNIs=)
                          2: 100C3F1E212211F18A5869CB2A3D8C67.roa (hash: IMdiCehXyYtBy9e96FQHmcfQXtXWDXRFaUL7xCwpfWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
                          rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158019, serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
        Validity
            Not Before: Apr 17 08:43:44 2026 GMT
            Not After : Apr 24 08:43:44 2026 GMT
        Subject: CN=69e1f2c0-c220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:b0:46:8f:80:fb:e1:56:16:08:ed:93:a4:
                    3e:95:d4:07:15:c6:c2:c5:63:59:f0:10:45:44:17:
                    6c:5f:19:5a:d6:6b:67:36:82:fb:93:dd:46:6d:aa:
                    6f:03:f4:b2:d7:0a:93:9f:3d:76:98:e5:14:c3:bc:
                    94:83:a3:ea:15:d9:7b:9b:bd:04:02:b0:b5:20:79:
                    dd:30:82:13:69:c6:76:83:7c:0e:98:8e:d3:6d:d1:
                    06:7a:14:cd:e2:3c:02:b1:5e:fc:ba:94:f4:c3:7b:
                    08:84:81:79:4c:31:29:c0:d4:fe:28:7f:b5:5b:db:
                    3e:be:6a:75:b4:1b:66:3a:9a:74:0b:fc:f0:bf:44:
                    40:c5:4c:cd:01:38:72:b2:d7:99:ac:a3:03:94:49:
                    5b:37:fd:58:3d:49:bf:24:69:a8:6b:87:65:6e:60:
                    7b:7e:dd:ed:d5:ea:b3:8b:81:29:94:9a:29:bf:99:
                    06:b8:b5:91:df:74:4b:6c:0f:15:d3:28:58:73:5f:
                    70:65:9b:c7:ee:e7:b1:e4:ac:05:f9:3a:d5:8b:bf:
                    c4:ce:b2:8d:40:67:66:48:24:79:c6:c2:cd:7d:c8:
                    11:45:69:2a:d9:94:5e:35:19:b7:84:0c:1e:f9:98:
                    31:09:5a:23:3e:9c:cd:a6:c5:72:ec:01:51:3d:91:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:1B:06:32:86:C7:4C:F8:64:F4:D1:74:96:48:AB:C2:6E:BC:C3
            X509v3 Authority Key Identifier:
                keyid:F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:88:6b:91:d2:e9:04:a7:ba:07:cb:0c:fe:f8:f8:39:9b:
         51:f4:5d:6c:0b:b5:5e:03:be:1a:34:14:d1:a1:e2:96:de:90:
         dd:c7:3d:14:ed:56:c3:6f:43:6e:9e:36:ce:06:93:a5:1d:10:
         15:98:a5:21:6e:84:8e:2a:0d:f6:b1:7b:f6:25:33:90:90:02:
         ee:b4:7f:91:8d:1c:aa:8c:68:85:b5:78:2a:6d:29:10:3d:13:
         5f:d2:03:7f:cf:34:5f:a6:b7:4e:10:b9:34:c4:e0:a0:b5:f2:
         59:2f:e6:bd:03:9d:5b:1f:69:5b:f5:b2:d0:8e:5a:83:c7:34:
         38:42:3d:b2:4b:05:2a:39:26:06:3c:38:81:3a:d9:23:47:fc:
         06:10:5a:04:ff:6d:a2:9a:85:a5:b1:9d:22:7f:6f:32:08:1b:
         65:62:04:46:d0:cb:6a:ac:a2:27:2f:49:b1:cf:47:91:0c:e6:
         6d:bf:a3:fc:7d:f9:01:95:a8:24:e2:66:cf:ac:37:00:4d:19:
         3e:90:6d:21:e6:4d:f5:b5:f6:e5:5f:b4:75:31:84:28:59:53:
         ec:62:10:26:d2:9e:a8:1b:10:0c:96:d4:3e:ba:a6:30:49:f9:
         13:24:98:f4:8f:d8:26:c7:78:17:42:f0:c9:75:54:04:96:21:
         00:39:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:41 2026 by rpki-client