Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File:                     4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier:          3D1yatq0Np4pD7jtF0CAEyTTRp+iDRq+ik68qqBve0Q=
Subject key identifier:   E3:20:DA:A0:FD:13:58:8E:08:FB:36:10:2B:CA:36:C6:0D:D0:3C:F0
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer:       /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial:       3664
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number:          35DC
Signing time:             Thu 16 Apr 2026 14:30:39 +0000
Manifest this update:     Thu 16 Apr 2026 14:30:38 +0000
Manifest next update:     Thu 23 Apr 2026 14:30:38 +0000
Files and hashes:         1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: 0YOO4vHlf9dy7rSGldUDEBsYzb1ODiYkpF6mAziq+3s=)
                          2: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: hG8g9R9N6g9xsHSn0imR+1vWSozb3fa3uL51Vy8mhic=)
                          3: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: YixDUXuSIn+Hh+G5kFeWAZb1NF/MvO4aijdY29fevto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
                          rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13924 (0x3664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
        Validity
            Not Before: Apr 16 14:30:38 2026 GMT
            Not After : Apr 23 14:30:38 2026 GMT
        Subject: CN=69e0f28f-69e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:87:d7:d7:16:14:3a:7a:ae:86:d3:10:66:
                    94:58:5f:84:5d:3c:2b:81:fa:bb:31:e0:64:f7:fe:
                    64:0f:1a:8e:86:12:7c:36:03:4f:f6:60:37:4c:52:
                    a5:3e:57:91:dc:2c:1d:87:9a:36:99:91:2b:26:5d:
                    27:fb:ee:3c:2a:c5:a5:cb:82:df:f3:ad:91:3c:27:
                    5c:7e:ca:75:d2:c4:73:da:36:15:61:bd:97:9f:59:
                    cd:43:e7:61:bc:94:81:5e:ef:c2:de:33:e8:e6:8b:
                    c4:93:cf:28:f8:1b:c2:e2:ee:02:a3:b9:d6:e3:aa:
                    89:44:46:7f:62:b2:e6:c9:9c:27:3d:9c:96:7f:e4:
                    b7:3d:ae:43:9e:55:6b:14:89:6c:9a:1d:e1:fc:fd:
                    5a:58:e8:37:dc:a6:aa:d9:f9:6d:93:77:e7:79:fc:
                    62:8b:7d:19:bf:44:d4:c7:7e:29:1b:8f:5d:b0:16:
                    7c:28:32:1d:1c:a2:e3:b5:08:e9:12:98:40:8c:97:
                    1e:b3:cc:96:15:00:f9:bd:6f:58:5e:0c:ea:f1:5a:
                    7c:4d:e7:8a:d9:9c:23:fc:d1:1f:06:d5:aa:8a:a1:
                    43:96:e2:70:bc:f1:71:23:7f:9e:fc:21:48:0e:22:
                    8b:c7:6a:87:60:d8:da:a0:88:0e:e5:3d:42:8b:1e:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:20:DA:A0:FD:13:58:8E:08:FB:36:10:2B:CA:36:C6:0D:D0:3C:F0
            X509v3 Authority Key Identifier:
                keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:88:ed:9c:f4:da:54:98:26:9c:21:6b:44:33:91:49:e6:
         02:83:04:85:9a:58:b8:21:c6:2c:c7:41:93:0e:48:5c:58:44:
         e9:26:9b:1e:ec:fb:07:13:41:b1:48:92:13:2e:52:32:b8:4d:
         cb:87:f3:74:5c:ce:9a:8d:8b:91:31:24:9f:d5:b5:c2:5f:47:
         9b:34:b3:0b:7b:53:e0:67:0a:df:7a:97:39:1f:ed:43:34:f3:
         f3:fe:2f:db:96:a7:93:eb:63:14:ea:2c:a9:1c:ef:58:27:11:
         7d:1b:aa:21:03:85:eb:16:94:97:9a:d9:09:0a:f5:cb:aa:09:
         61:fe:60:dc:15:a6:1b:20:f7:6d:88:7a:00:3d:c8:2d:05:f0:
         6e:0f:7d:e2:96:e0:a0:f3:77:ad:df:44:a6:13:a8:98:77:a8:
         46:fa:3b:ca:f5:10:a9:09:15:d5:52:d4:c3:e8:c5:09:0e:d0:
         27:78:b3:22:1d:6b:62:87:cb:2e:20:06:a5:67:4f:ff:f5:55:
         10:bf:a4:3b:13:bb:9f:c4:2a:98:6f:61:cb:23:92:e0:e7:df:
         a1:ed:7d:04:1e:cb:ea:bb:01:46:50:e3:fa:b0:aa:a1:a2:d3:
         fa:e6:f5:ef:03:fb:24:e1:14:55:e0:f6:74:34:8b:8e:1a:21:
         c2:49:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:47 2026 by rpki-client