Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
File:                     dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json)
Hash identifier:          zXh6MI+E03NK355ps1xPbbpk1DA9MzdxXwaNf/I7YJk=
Subject key identifier:   88:A4:FC:B8:F0:1A:9B:13:2F:EC:A6:A4:B5:D8:09:D3:88:E9:4E:25
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Certificate issuer:       /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
Manifest number:          01C8
Signing time:             Fri 17 Apr 2026 03:28:01 +0000
Manifest this update:     Fri 17 Apr 2026 03:28:00 +0000
Manifest next update:     Fri 24 Apr 2026 03:28:00 +0000
Files and hashes:         1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: I0lv5/snlFfDQ8X65fRU+2SxgV7S5VnRG4RqfYHwPQU=)
                          2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: H+RrU+ZPqJuxRlrjQS4NUzBdPG3qKib/lM9dVIH4hoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
                          rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
        Validity
            Not Before: Apr 17 03:28:00 2026 GMT
            Not After : Apr 24 03:28:00 2026 GMT
        Subject: CN=69e1a8c1-86e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:66:da:7e:37:97:56:4e:f5:17:26:25:77:
                    b0:d7:19:a0:aa:06:05:ab:2f:4c:48:83:09:93:97:
                    e4:71:1a:60:f4:6c:a9:93:30:c2:9d:75:50:d1:93:
                    61:40:03:74:d7:4f:76:75:38:52:a8:e5:ac:87:98:
                    38:a7:50:a3:52:5a:df:ac:2d:f7:79:f2:cb:8f:b6:
                    65:23:df:17:76:bc:f2:83:f1:38:9d:d8:29:69:26:
                    ff:ef:26:54:db:a8:88:ea:39:46:68:d2:c6:3f:73:
                    00:34:d3:33:aa:82:ba:41:e4:61:22:ba:8a:ab:13:
                    86:39:d5:a2:43:7c:89:cc:ac:52:d3:1e:76:71:b9:
                    f1:fb:e3:c3:04:2d:c5:6b:33:01:eb:6b:fc:be:f1:
                    f3:67:72:b8:94:84:37:14:47:17:98:00:f6:ea:bd:
                    c9:6e:eb:2a:7e:a1:c4:8d:c8:3c:53:75:63:33:d9:
                    63:38:48:33:76:a7:8c:dc:67:be:8a:13:97:7e:30:
                    0e:f5:c5:aa:1c:27:e9:9b:92:50:60:be:ad:02:4f:
                    af:df:e7:87:4e:03:77:3b:3d:2a:1a:aa:f8:f7:50:
                    a1:a2:03:4a:ac:6c:ae:33:50:ba:cf:b1:2b:44:44:
                    59:b8:48:07:0e:23:f2:e5:7c:c7:38:f5:91:19:94:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A4:FC:B8:F0:1A:9B:13:2F:EC:A6:A4:B5:D8:09:D3:88:E9:4E:25
            X509v3 Authority Key Identifier:
                keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b0:82:f3:92:e2:d1:3e:37:23:fb:5d:cd:c7:c0:31:b8:4b:
         7b:b7:be:3a:6f:74:8c:03:70:45:6d:38:2b:f8:b7:9a:8b:41:
         6c:55:46:8b:fe:9f:9d:7e:2f:97:59:af:85:d6:e5:b3:f8:d9:
         f7:9e:29:51:24:c2:43:81:e9:13:8d:de:84:81:73:18:f3:ca:
         57:30:0f:af:b6:94:1f:ef:1c:f2:13:b7:d7:1c:14:65:31:43:
         0e:66:23:62:ed:27:73:b5:58:be:88:72:8c:1c:9f:51:36:2b:
         c3:47:d1:61:94:c0:4b:a9:15:ac:08:34:78:50:6b:05:ae:4d:
         b4:e8:e3:8e:b5:e5:8a:58:cb:d8:a9:bf:36:55:5c:09:b5:fe:
         a4:e7:73:c5:20:ed:40:58:87:7f:8e:6a:79:b1:22:84:03:2a:
         63:06:52:7f:b7:45:b8:e1:c9:c6:6f:05:e6:b9:e8:34:d5:ed:
         df:50:1b:62:bd:c5:f5:3a:2b:03:4b:fc:fe:72:92:0c:97:ec:
         88:09:99:18:64:65:ab:98:ef:6b:4a:ca:d3:49:f9:c9:22:58:
         13:ef:2f:78:aa:c5:ee:7f:00:6f:4f:d3:f5:51:7b:fd:66:07:
         13:fa:98:d3:e2:1b:5a:44:1b:d3:cb:56:95:bb:69:db:71:01:
         fd:72:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:13 2026 by rpki-client