Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File:                     MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier:          16AURlFzJx2Dl9tPeA3G0q9W2ST74ifxctoGxX5TDIY=
Subject key identifier:   F8:F6:5F:4D:6A:2A:E1:73:BE:10:3E:E9:18:97:07:A7:8B:81:B3:FD
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer:       /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number:          0116
Signing time:             Wed 15 Apr 2026 04:07:26 +0000
Manifest this update:     Wed 15 Apr 2026 04:07:26 +0000
Manifest next update:     Wed 22 Apr 2026 04:07:26 +0000
Files and hashes:         1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: sXjE0rVPwmt9L2wCcH62VSXcM9DStxr9IBjrnDIhroQ=)
                          2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
        Validity
            Not Before: Apr 15 04:07:26 2026 GMT
            Not After : Apr 22 04:07:26 2026 GMT
        Subject: CN=69df0efe-ec66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:5e:4e:a5:f9:56:8f:9f:04:00:8f:ef:5e:
                    04:0e:b7:dc:aa:45:0f:e3:3f:24:3a:81:5b:01:88:
                    51:8e:1a:e9:40:9c:12:0d:e9:b6:19:56:2a:cc:a7:
                    b7:1f:c6:8b:32:53:ed:f6:01:a3:04:44:48:7a:37:
                    99:54:e6:32:b3:e3:de:2f:c4:c7:e4:50:eb:7a:66:
                    85:89:37:a5:6d:85:6d:4f:bb:a9:44:13:77:6b:84:
                    4d:32:14:8c:14:86:5f:ef:e5:8a:9a:23:78:98:23:
                    e4:ed:c1:7d:b4:d3:53:31:cb:e7:ee:ad:31:25:2c:
                    1d:fe:77:62:00:99:cc:44:87:d6:22:51:2b:d6:86:
                    e3:76:47:b8:d3:16:70:b3:ec:9d:85:c5:62:ba:36:
                    af:1f:95:ac:78:c0:70:b8:3a:9f:2a:8e:b8:79:47:
                    6d:9f:cb:5e:4f:31:0d:df:54:6d:89:dd:88:4a:20:
                    ae:4f:46:c7:20:ef:0e:15:e4:d0:9f:8b:3f:11:3e:
                    73:00:dd:a9:9e:20:88:3a:c7:55:00:27:92:74:15:
                    e3:d2:8c:02:c8:46:e6:3e:b8:c3:af:91:1b:93:f1:
                    6f:df:07:4c:46:e7:af:76:80:b0:30:be:dd:e1:e5:
                    18:a4:02:59:e9:d0:99:4b:a8:36:28:b2:d2:a9:b6:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:5F:4D:6A:2A:E1:73:BE:10:3E:E9:18:97:07:A7:8B:81:B3:FD
            X509v3 Authority Key Identifier:
                keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:61:6a:e9:31:15:75:7c:a9:73:21:29:89:68:35:84:02:
         73:f8:e3:42:f8:b7:ec:b7:fc:4b:8c:45:0f:3b:ac:29:50:1c:
         6d:44:26:6f:cd:f8:bc:a8:8a:23:9a:99:84:2b:6f:93:bc:79:
         02:7f:99:52:2f:7c:15:53:c5:cf:7e:3d:30:48:d9:26:e1:17:
         e9:16:bc:13:99:d7:95:c4:c9:e5:f6:a0:ef:3c:70:03:19:31:
         5a:25:01:58:e3:8f:e9:5b:14:a1:e7:c5:6b:43:ee:b0:0d:a3:
         80:22:65:07:a6:31:96:90:88:ba:49:13:17:74:ce:74:57:1f:
         fa:b4:c8:53:12:42:91:ad:92:ec:84:3b:78:58:0f:d5:3c:9e:
         4a:2d:cc:b0:9d:90:5f:fc:d5:7e:27:16:58:40:03:fe:e0:18:
         89:67:7b:6f:be:f1:90:df:7b:0a:f1:89:fb:49:24:b2:10:cf:
         5c:89:fb:b2:77:f2:44:ae:8c:a8:9e:da:79:91:12:36:da:c7:
         66:e1:d0:63:30:34:0c:86:63:72:2f:ca:fb:62:b9:d4:a9:36:
         c8:56:be:de:98:43:53:4f:a3:d4:ee:65:f1:a7:fc:0b:59:36:
         d0:bd:3d:4b:2f:49:52:d0:fd:b1:50:67:69:62:7e:30:89:a2:
         8f:9a:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:50 2026 by rpki-client