Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File:                     43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier:          IlFKDcvO0MdETYTpwf5vI1J1T1K4aHItPNQD4U/1fVQ=
Subject key identifier:   91:92:33:D7:F2:CC:BD:85:7E:B7:C7:42:0D:A6:FB:CD:BE:78:1B:27
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer:       /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number:          29
Signing time:             Fri 17 Apr 2026 08:29:47 +0000
Manifest this update:     Fri 17 Apr 2026 08:29:46 +0000
Manifest next update:     Fri 24 Apr 2026 08:29:46 +0000
Files and hashes:         1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: m2C8YgSozsEZvVH/7e12kXcdEfNeEWD1DgSwI2NnhQ0=)
                          2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
        Validity
            Not Before: Apr 17 08:29:46 2026 GMT
            Not After : Apr 24 08:29:46 2026 GMT
        Subject: CN=69e1ef7b-db3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:cc:d8:02:2d:76:ed:5a:34:ec:7a:e7:ac:
                    c9:e7:f1:8a:b1:15:33:23:24:fe:a9:04:c3:09:02:
                    d4:d6:82:7b:d9:3b:c2:36:2c:53:6a:96:8d:a6:f9:
                    11:81:54:7c:f0:13:81:48:7c:f8:95:3b:35:6c:4c:
                    83:80:61:f0:ed:22:29:cc:64:81:44:36:64:45:f1:
                    e1:c8:9c:d2:7d:1b:e4:8e:84:1d:b2:82:4d:36:34:
                    d8:b2:0f:1e:1e:31:80:95:15:46:d2:f4:21:8d:5d:
                    6e:df:60:12:cb:39:2d:89:ab:b9:44:0d:0f:32:40:
                    1d:c9:00:9d:05:b2:73:83:9b:08:db:63:f4:7c:c2:
                    97:c9:f6:67:a2:cf:6f:48:44:b3:26:68:91:2e:a7:
                    a9:c3:91:03:ab:18:bb:b8:fd:bc:6a:b0:40:b5:39:
                    bb:77:59:ce:9b:29:53:f5:ea:1a:d9:63:ec:c8:dc:
                    e4:62:ab:18:37:c2:26:b6:62:d8:db:b7:d9:13:60:
                    1f:d7:8a:9c:fd:0c:a0:89:69:cf:8e:e1:b5:7f:30:
                    49:d3:de:31:f8:b1:54:56:07:0a:6d:85:3a:bf:b2:
                    37:37:1e:2c:01:89:f1:e9:40:d9:66:54:50:f7:02:
                    1c:a2:45:a3:55:49:f7:37:0d:a6:b3:d6:df:5c:97:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:33:D7:F2:CC:BD:85:7E:B7:C7:42:0D:A6:FB:CD:BE:78:1B:27
            X509v3 Authority Key Identifier:
                keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:a8:b9:2e:e5:8c:a9:c7:c0:f1:6f:43:da:e1:6e:e8:42:
         e1:df:96:fd:65:a1:a6:85:65:c6:eb:6f:fc:42:fa:f8:88:01:
         da:b9:f7:07:35:ea:e1:e9:40:d3:47:98:8f:d7:5a:46:55:e6:
         4a:1d:a5:92:ff:89:04:70:14:92:35:96:e4:64:a9:83:fd:e8:
         21:06:62:67:a8:b2:be:fa:43:e7:bb:11:48:8f:14:3d:8e:2b:
         97:85:93:bb:99:56:f2:64:e3:a5:15:58:d3:ba:c2:59:ff:cf:
         7d:8f:13:12:70:29:14:aa:97:8c:15:b7:d8:aa:6d:e4:e1:6f:
         d5:3e:bd:7f:a3:70:dc:c6:19:df:68:9b:1f:b9:70:06:f1:00:
         31:d6:d7:19:bf:a8:cf:4a:30:95:39:28:5c:12:1e:23:c3:60:
         96:1a:d4:3c:7f:9e:15:f6:be:59:4d:d8:aa:16:83:55:65:4d:
         91:8f:2e:b8:df:bd:f9:17:b6:b6:6f:dc:14:86:7b:ed:a2:d7:
         eb:52:f8:cd:05:06:78:df:37:6d:a2:f9:5a:09:d1:fd:e9:b6:
         b3:50:2a:02:49:35:41:df:5b:e9:4d:61:c9:97:23:4a:81:6f:
         89:b7:57:d5:10:b8:5c:b0:78:eb:25:7e:ec:cc:db:95:05:61:
         11:e8:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:28 2026 by rpki-client