Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
File:                     -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json)
Hash identifier:          XdO22PMz16faG3u2q7HRCmjL4RqzEx7/Oz7mUF4JaQ8=
Subject key identifier:   AB:45:B7:BC:88:1F:61:62:87:91:81:2F:1E:96:CF:72:33:07:72:98
Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
Certificate issuer:       /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
Manifest number:          CC
Signing time:             Sun 19 Apr 2026 06:26:09 +0000
Manifest this update:     Sun 19 Apr 2026 06:26:08 +0000
Manifest next update:     Sun 26 Apr 2026 06:26:08 +0000
Files and hashes:         1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: Vq8abbYUcOp946vH8QLuK+meaLZaYXfZQ14jfkoIOMg=)
                          2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: Qkz+Ibp6urTz/gTtZx61VUtVTC7J2PthL9N5ik2a+uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
                          rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
        Validity
            Not Before: Apr 19 06:26:08 2026 GMT
            Not After : Apr 26 06:26:08 2026 GMT
        Subject: CN=69e47581-eecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:c2:b8:14:59:e8:3d:8f:74:ee:2a:4a:b1:
                    fa:34:98:43:d3:fe:7c:46:22:0f:c3:aa:0f:57:7a:
                    f3:6b:60:a1:ad:96:e9:80:92:4e:30:0e:1f:64:30:
                    4c:7e:13:2f:21:0a:e0:89:9d:f6:41:09:06:cd:2e:
                    b1:28:7e:95:6c:88:5e:36:4d:74:f0:5e:87:35:1f:
                    7c:e7:de:6f:4e:be:70:fc:50:6f:0c:3d:f7:9f:4b:
                    d2:7c:2c:bd:ee:96:33:d4:33:9e:ba:0e:8a:2f:da:
                    97:e6:58:a9:60:8b:af:7a:48:bf:74:d4:0b:d1:e8:
                    0c:5f:a5:e8:e5:25:88:7d:b9:1e:fa:3c:3a:b1:d9:
                    c1:fd:d8:38:e7:ea:6c:c6:81:04:2b:53:9c:f5:c9:
                    47:fd:10:50:4b:ad:8d:3e:b8:55:01:ed:dd:df:f9:
                    db:a3:fe:b4:36:e2:15:2e:ad:d3:aa:f2:a9:27:10:
                    b6:84:70:c3:14:2f:fa:c0:0e:2c:dc:b1:77:da:e7:
                    54:90:71:45:11:17:86:13:b5:50:ac:8a:43:48:9d:
                    a9:4c:e0:4a:34:41:50:b5:c2:9c:42:7f:86:d6:d4:
                    b3:88:dc:15:51:2f:77:50:a2:bd:a4:c4:8a:02:ad:
                    6d:a3:7d:52:84:af:33:64:e5:52:cc:bc:30:31:79:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:B7:BC:88:1F:61:62:87:91:81:2F:1E:96:CF:72:33:07:72:98
            X509v3 Authority Key Identifier:
                keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8e:0a:ab:c8:47:73:4d:a9:b6:a9:09:d0:f9:d1:58:b0:af:
         3d:1a:f4:16:c1:6e:40:06:d3:5f:77:9c:1f:54:98:3c:92:18:
         c1:50:a2:9b:a6:2a:ec:42:47:3f:fa:e6:d7:9f:48:ae:79:29:
         7f:67:b8:79:be:dd:a8:c3:80:23:7f:4b:aa:b4:86:43:ab:55:
         64:e1:25:5b:44:5b:75:7a:86:9b:95:b8:ca:87:f7:14:73:15:
         56:72:e1:04:81:f9:f0:db:d8:1e:ec:7e:9f:c0:96:fa:94:d1:
         66:b1:92:76:56:f9:a6:22:8d:7e:3c:bc:80:18:73:de:2e:4c:
         f9:1d:10:eb:19:85:b0:44:2b:5b:e2:54:77:14:9f:59:83:4b:
         d0:f6:c8:3c:d9:d5:d7:31:f6:8e:e7:6d:6c:e1:c0:8b:d4:a8:
         7f:ef:5c:ce:9c:20:fc:a2:d5:73:22:5e:e1:15:cb:65:2b:a0:
         5d:b4:0d:85:47:29:06:bc:ce:68:a4:ef:2b:ee:68:27:5a:54:
         99:95:33:62:24:7f:c3:54:2b:f0:7b:d8:b5:e0:1b:20:08:f1:
         82:bb:b6:72:97:e7:8f:8b:33:8a:db:6f:f3:ad:d3:26:0f:34:
         78:d4:bf:cb:3a:8a:c0:be:4b:ee:1e:79:e0:08:bf:f6:f9:a2:
         92:f4:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:34 2026 by rpki-client