Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
File:                     b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json)
Hash identifier:          +PZTh7LM8xGLWGN5l5sga1uej8GHVZN80OqdUrZcN8o=
Subject key identifier:   05:21:63:53:DE:B7:30:DB:B2:DC:84:3D:D8:A6:69:7A:BC:15:AA:17
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Certificate issuer:       /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial:       0D22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
Manifest number:          0D03
Signing time:             Thu 16 Apr 2026 18:12:26 +0000
Manifest this update:     Thu 16 Apr 2026 18:12:26 +0000
Manifest next update:     Thu 23 Apr 2026 18:12:26 +0000
Files and hashes:         1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: N8d4hrLdzqh7rwe6sYR8IL3CnJOGVnpBxUWUGZS1Qhs=)
                          2: 199C4122356411F199EC77DFBA833773.roa (hash: JhY9Gylrwf6imONEZB/excsXAHceemOqJE8FFpSCvWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
                          rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3362 (0xd22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
        Validity
            Not Before: Apr 16 18:12:26 2026 GMT
            Not After : Apr 23 18:12:26 2026 GMT
        Subject: CN=69e1268a-002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:40:d2:60:97:b8:9e:7c:08:b6:13:56:3c:
                    d5:4e:2d:8c:32:f9:47:99:34:83:15:8f:94:f1:3e:
                    5a:2a:58:db:ef:73:0d:1d:1f:11:e6:bb:76:e4:98:
                    4a:98:30:89:2b:fc:a4:38:0d:6d:11:48:cf:89:d7:
                    50:2c:65:44:62:6f:83:c3:fd:b5:92:74:ed:14:c2:
                    27:d6:8a:19:c4:1d:6b:c6:5b:60:1d:13:59:45:ba:
                    ff:da:70:dd:c4:ba:dd:62:45:ab:27:d7:31:25:b6:
                    a7:f9:01:c5:2c:8c:fa:01:4a:5e:83:ee:c4:dc:ff:
                    73:f7:93:8a:a9:34:3b:1f:dc:ec:5f:83:e8:c3:9b:
                    11:e5:4a:89:13:a6:f1:41:cc:aa:18:e2:b1:41:65:
                    d0:52:9c:cf:86:85:68:3c:dc:a4:ad:a4:b3:2f:3a:
                    ce:fd:a7:70:10:ad:87:c8:25:10:17:a1:f9:d6:01:
                    95:b8:ec:e6:e8:99:74:56:a9:96:c6:ba:13:f5:a7:
                    69:94:b6:b4:0c:e3:6d:f3:a4:62:f5:dc:d2:3a:e2:
                    57:0c:5b:d6:fd:f3:9b:ec:cb:19:7a:45:0e:54:05:
                    09:94:81:e4:02:00:c6:84:d4:e8:8e:1c:de:62:30:
                    6f:09:e0:d3:74:15:d1:a1:d2:b6:8d:d5:c3:ce:86:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:21:63:53:DE:B7:30:DB:B2:DC:84:3D:D8:A6:69:7A:BC:15:AA:17
            X509v3 Authority Key Identifier:
                keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:71:8d:e0:c8:3f:f8:11:29:7a:86:e3:8b:56:02:89:85:
         a7:05:03:6f:fd:cb:50:9c:2c:00:e2:e9:4b:63:7e:9f:06:60:
         97:e1:80:db:e5:ed:04:5c:97:d5:b2:70:b3:85:73:20:13:dc:
         d1:b5:62:61:34:61:1e:cb:21:c9:cb:e8:67:37:f2:2b:7c:98:
         eb:d9:45:04:80:c5:c8:cc:53:81:70:9e:8e:7d:f9:12:ed:78:
         25:98:72:e2:64:24:54:97:a8:b9:80:a0:b0:6e:aa:de:55:74:
         29:e6:5d:9b:37:79:b2:40:86:91:da:ea:89:25:d6:1b:6c:f2:
         34:db:ce:d7:46:9b:89:d4:6d:8b:cc:4a:53:6f:22:33:18:bd:
         83:4a:9a:17:db:fd:fe:04:36:73:fd:95:7e:5f:f8:a8:d9:57:
         7a:ef:da:f8:1a:55:20:b2:23:27:40:22:a3:1f:8d:62:7a:78:
         b3:b8:52:aa:ab:c4:5d:f8:47:90:d6:c3:b2:02:d7:8a:4a:d5:
         0e:e2:90:b9:27:8f:07:2c:a9:42:c4:3b:59:e1:0a:59:b1:7c:
         fd:38:4a:91:f9:cb:ea:6a:38:b1:71:6a:41:92:b9:05:39:43:
         b8:fa:65:86:6e:e1:16:ff:d0:ff:d8:b0:6e:f2:98:4f:cc:19:
         f0:8e:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:59 2026 by rpki-client