Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
File:                     I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json)
Hash identifier:          BWEKGXEe4oL516G4vrAgi+Tl/98LMQrNbEA4oS1VGXM=
Subject key identifier:   EF:73:71:46:52:C8:1F:93:ED:DE:CD:03:5F:7D:0F:60:D5:E8:62:51
Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
Certificate issuer:       /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
Manifest number:          0230
Signing time:             Fri 17 Apr 2026 02:26:21 +0000
Manifest this update:     Fri 17 Apr 2026 02:26:20 +0000
Manifest next update:     Fri 24 Apr 2026 02:26:20 +0000
Files and hashes:         1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: 7tv+NPkC9/aQn6qq3Z2E9cj6YgL/MCRBlXfzwNnJlC4=)
                          2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: F/MPsJuFQrY3vMtey+M10ZptlzFsF6rgurZZ+bBJ41s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
        Validity
            Not Before: Apr 17 02:26:20 2026 GMT
            Not After : Apr 24 02:26:20 2026 GMT
        Subject: CN=69e19a4d-53e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:07:04:dd:6e:99:ae:bd:3f:46:c8:7c:fd:
                    8b:43:7a:a3:43:8f:bb:af:69:5e:f7:97:44:c5:a7:
                    c2:db:30:9d:12:9c:65:ff:69:c7:fd:0e:5d:59:06:
                    df:ec:cd:5f:4a:cc:15:e3:a1:02:0c:37:e8:22:1b:
                    3f:8b:76:64:a5:52:32:7e:32:5c:3d:95:a2:4a:50:
                    63:79:2b:60:0f:4c:2c:66:e3:cb:74:b7:bc:84:78:
                    4b:d9:f4:1e:a4:8f:38:06:54:19:54:ac:34:7f:1f:
                    36:a2:a8:b2:bd:86:e4:2f:36:31:ca:c2:7e:6b:f6:
                    bb:ed:b6:53:37:59:34:d3:84:67:8e:00:b8:b5:55:
                    18:59:18:c6:bc:c5:53:64:02:89:33:ff:98:f4:59:
                    8a:db:c0:a8:6c:9a:bc:70:8d:3b:da:6b:f2:c6:54:
                    97:89:e4:5e:86:e4:36:aa:67:3b:b0:e5:28:e3:b7:
                    af:6a:a2:36:d8:0a:8c:0b:36:83:9e:20:f0:03:52:
                    e6:52:8d:ca:cf:c0:cd:2a:34:a0:ed:28:dd:92:6b:
                    95:4e:72:9b:f8:21:e1:e1:84:ec:60:c8:48:fa:36:
                    f3:1a:e7:b6:5d:ec:f0:28:1f:48:65:10:9d:35:9f:
                    38:c6:06:7b:4f:76:a1:3d:5a:35:1b:6a:33:e6:ba:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:73:71:46:52:C8:1F:93:ED:DE:CD:03:5F:7D:0F:60:D5:E8:62:51
            X509v3 Authority Key Identifier:
                keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:85:dd:e8:25:c0:73:90:fa:28:1c:de:d3:92:5a:5b:b6:29:
         4c:46:cb:b2:bf:14:43:4e:04:eb:a5:f3:6e:1b:54:1c:ec:3d:
         43:16:dc:0c:11:c2:6c:9f:a0:c4:97:f6:73:49:62:e6:9c:3a:
         a8:ed:0f:01:57:00:3b:c1:a4:ea:f8:4b:94:ef:55:a2:e0:17:
         c8:29:ac:ae:46:d0:45:7c:ea:34:de:b6:b3:32:d3:ab:4e:e4:
         11:9c:33:d3:e2:d3:20:77:f4:aa:0e:55:bb:f1:23:d7:50:13:
         28:48:d4:0f:60:66:de:00:81:fd:cc:c6:98:4a:f4:d9:9c:68:
         ad:ec:b1:45:2d:ee:56:04:41:c0:c0:a5:4f:a5:08:71:62:2a:
         ad:3c:1c:52:e8:db:f2:f4:a9:e7:3a:d6:50:d3:23:68:b4:b9:
         89:b8:94:84:0d:4a:87:af:20:ba:75:f3:b5:b3:c5:6f:c9:f9:
         06:a4:49:66:f0:15:69:02:83:24:b8:c6:6d:ef:c3:d8:a9:84:
         8d:6d:5e:bc:04:68:4a:bb:8b:fe:e7:37:d5:93:d2:55:44:81:
         13:54:3b:36:2c:df:d6:f1:90:88:bc:28:ef:76:c8:29:0b:ed:
         4c:ac:62:f7:fd:53:8d:1b:a2:68:98:77:51:fa:38:1e:02:c3:
         9e:81:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:01 2026 by rpki-client