Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File:                     pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier:          W3NickhSFn8sPgXscWoLJpHmiSk458MAmn1EPSyI/kc=
Subject key identifier:   CF:27:46:BD:21:0B:0C:0D:80:34:25:72:1B:75:CE:F6:73:A6:C6:03
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer:       /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial:       01F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number:          01D7
Signing time:             Fri 17 Apr 2026 03:30:29 +0000
Manifest this update:     Fri 17 Apr 2026 03:30:29 +0000
Manifest next update:     Fri 24 Apr 2026 03:30:29 +0000
Files and hashes:         1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: aUgIDvSubT5i5gLucraiTcs/hrcBJa0TlKFxU4eNRhE=)
                          2: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: I40Mjxu1ZcWd2eWAmdNiVDMFDrp/6Wro4hhomYDrrYU=)
                          3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: hHCyyzGsEC8V5KG9Wg3TJOVPDzSEhYHLIpTWQTIziHs=)
                          4: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: NrIYNnpiRgoM0pEu2ChgWZkIBgkpnd90Qm1TMb1PFZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
                          rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
        Validity
            Not Before: Apr 17 03:30:29 2026 GMT
            Not After : Apr 24 03:30:29 2026 GMT
        Subject: CN=69e1a955-af8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:f7:f4:50:f6:77:b2:fc:7c:07:cd:c3:35:
                    de:a0:13:e2:f7:3f:ae:e3:ae:24:4d:d2:ec:8d:5a:
                    ee:50:92:d0:bb:42:dc:d1:2c:ac:f4:72:5f:24:36:
                    6e:38:fa:84:1a:38:79:50:45:d7:a3:af:de:ce:d3:
                    79:7f:5b:fa:47:b3:c7:b6:d9:32:f6:4f:a1:43:ec:
                    2c:b7:dc:24:d6:bb:d8:46:e4:c5:65:3b:4a:ab:12:
                    b2:39:64:98:ff:f2:23:6e:bf:d4:86:37:ca:b8:27:
                    44:5d:85:58:43:02:c6:49:d0:cc:3f:14:53:c3:4d:
                    4f:00:3b:08:ce:46:eb:2b:c0:85:94:a6:2d:c7:05:
                    d3:e2:04:f0:9d:30:06:38:7c:25:34:e0:28:34:a7:
                    61:f0:26:46:98:ec:20:3b:1d:19:81:8b:71:16:db:
                    72:93:8a:2e:5d:78:ff:d2:a2:73:1b:b9:63:29:29:
                    93:a2:64:7a:da:f1:16:36:38:46:69:d4:95:48:c3:
                    6b:32:fc:d1:ff:76:52:ae:fa:03:82:12:55:6c:f9:
                    4e:e5:f9:0f:0d:54:36:3b:c7:69:05:c0:45:04:85:
                    3b:bf:88:a8:a4:04:4a:16:11:c2:b2:36:91:0a:c5:
                    3f:43:07:6c:be:e1:77:99:f5:67:6a:93:a5:ac:25:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:27:46:BD:21:0B:0C:0D:80:34:25:72:1B:75:CE:F6:73:A6:C6:03
            X509v3 Authority Key Identifier:
                keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:09:60:c5:a2:92:78:cb:32:8d:2c:1f:e2:85:73:ff:b4:d5:
         82:5a:44:c6:86:da:20:08:23:20:89:fc:34:1b:a1:b7:a7:f8:
         da:eb:fb:79:a7:30:a9:68:30:c2:51:36:af:9c:d1:b9:f1:6f:
         4a:af:a8:a4:a3:9a:9b:67:12:e2:db:de:9a:8c:08:14:23:de:
         94:62:66:26:07:c5:fd:24:56:a0:dd:c7:2e:e8:43:48:32:c9:
         3c:0d:b3:76:21:85:08:fe:81:7b:ee:2c:c3:3b:5a:d7:98:49:
         f9:68:5b:f5:eb:a8:0a:0f:09:5b:a9:fd:c7:2b:bc:99:9d:52:
         5d:e5:99:43:ed:87:8c:f1:8d:2f:a8:4e:1d:04:c8:8c:ae:c4:
         e1:91:01:fb:e5:90:70:54:bb:ae:c9:20:82:fb:41:3c:4a:d1:
         f1:64:85:11:0a:c9:75:58:5e:df:9c:00:f7:95:a7:32:05:f7:
         13:5d:88:9d:0c:65:e4:2b:84:4f:bf:81:65:2a:c9:f6:7b:9e:
         f1:fc:cc:2e:30:df:26:7a:32:07:10:fb:40:6f:d4:93:30:b6:
         bf:1b:19:0b:44:6d:12:7d:14:f2:36:5a:da:87:70:ed:8e:a3:
         9d:ed:1b:af:cf:2d:14:1d:3b:9b:21:e5:0c:17:d7:49:f4:41:
         2f:d2:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:06 2026 by rpki-client