Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
File:                     r48M-0f7_MfEkzxHPNs2RCtQUc4.mft (raw, json)
Hash identifier:          wfjA16KpYGBdyz4Ci2WYGghJ+67vNHcfrCrzfAIxLKE=
Subject key identifier:   55:6B:19:CD:A0:22:2A:AF:20:67:D4:50:7D:83:04:66:28:EB:E5:12
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       38EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
Manifest number:          36F9
Signing time:             Thu 16 Apr 2026 14:22:40 +0000
Manifest this update:     Thu 16 Apr 2026 14:22:39 +0000
Manifest next update:     Thu 23 Apr 2026 14:22:39 +0000
Files and hashes:         1: r48M-0f7_MfEkzxHPNs2RCtQUc4.crl (hash: +ybD73eMMECXCjMVymiQ+XvVtwFAWB+2EaWEiYbL01c=)
                          2: CF09016006A611EAA8819441C4F9AE02.roa (hash: EqVj/R6zIrNK8F/gAmcp7/6N4a51SIEQbvgRir9Ukns=)
                          3: 8513C77AF62A11E9A6941C46C4F9AE02.roa (hash: aHMoLiAWEBtx9nlKA4Tl/TgqjF+Z/5MQlN1hzLSqVwg=)
                          4: 24AC829C476311F0970DF567C4F9AE02.roa (hash: mTmW2tlcxITv3MdjbT02W69HQ7YNon9s/TUkLbZT4dY=)
                          5: BC94C436F62711E9AC18E63BC4F9AE02.roa (hash: kmwG0SfeWdiV4Xu5QoUdYfe+EQnDiuhdgFgvkYNigm8=)
                          6: 7C5F5278589611F084D9AA7BC4F9AE02.roa (hash: SpGXHIvK5nyaRkt9i4BT1y40N9SY9IO5lxOenq0eXjc=)
                          7: BD30E870F62711E9AC18E63BC4F9AE02.roa (hash: Bt1DVmp/rVACUYy7hOEWMxI2KVNrnwFOMMIiqisaZqk=)
                          8: C2C631C8A47911E99DBEDD52C4F9AE02.roa (hash: kd1iJKjt4s1p3N8o1t3iD1KrDJbU5r6zZPllhODQ63U=)
                          9: 387ABD22614211F0AED25E68C4F9AE02.roa (hash: OuvCWzbpT4a+0DOmENZtmETiFANVzW6xzRKWra0CMc0=)
                          10: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (hash: uJVGJAMKOfLYngsu0KaVCm+1tIKCd23thNZf3gP7YGw=)
                          11: 1514A670A47B11E9867CBF58C4F9AE02.roa (hash: +N3hMrjmteLApBbJuxaiuAaypR3DMXsFW+sR7UJJVtE=)
                          12: BC187B74F62711E9AC18E63BC4F9AE02.roa (hash: uvtQrM0TpfHbW7ex57nMW2ZvXTgDMttP3mpUN9tS1i4=)
                          13: EB413AD41C2311F1BB63DB7C323D8C67.roa (hash: BBLS5duYzSpsu9QB78R+aPm721JzM8zfWzR2hg39AjY=)
                          14: 94AE247A879B11EF9B78224EC4F9AE02.roa (hash: D3CTdA1kUkE++bAK3ka79TJOTO7RnLWPVR3q4485ff0=)
                          15: A62428E820B211F09941D114C4F9AE02.roa (hash: fcDJ/ZruqRqMthD4UyDytuO1DIXDnB08fy1+uiAiXPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14572 (0x38ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Apr 16 14:22:39 2026 GMT
            Not After : Apr 23 14:22:39 2026 GMT
        Subject: CN=69e0f0b0-d152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:cf:55:05:78:76:d8:e8:f1:87:ae:64:a2:
                    fa:24:3a:de:b3:41:df:b4:f9:63:f6:6c:64:4b:86:
                    c6:5d:0c:fd:24:59:ec:28:98:39:c1:0e:ed:10:21:
                    fa:6a:27:54:fd:00:bb:2c:02:39:b9:6d:cf:7d:52:
                    6b:4b:c1:9c:6b:62:03:8a:ce:6f:a1:cd:ca:ee:79:
                    ef:a0:a8:bb:37:86:6f:6d:53:35:14:d3:af:83:8b:
                    ca:61:36:b3:e1:c1:42:c4:44:ff:86:f6:9c:10:91:
                    4f:7c:66:51:0a:59:aa:25:3a:03:21:56:a2:aa:eb:
                    a9:5e:8a:db:f7:5c:91:08:73:47:db:29:7e:fc:d0:
                    6a:88:0d:df:69:56:8e:7b:76:ae:80:6f:85:91:d5:
                    02:f2:d5:79:f5:21:6a:65:2c:85:a1:a1:4e:e5:60:
                    8b:9a:89:09:3b:f4:48:f9:c6:48:61:0c:e7:02:0a:
                    13:3f:ba:c7:dd:bd:39:1b:9b:9c:ed:70:4f:06:4a:
                    9b:d0:22:1c:5b:1f:48:63:ac:9b:ec:00:64:9d:9f:
                    b6:6e:d5:5b:44:68:25:fa:42:69:f0:ad:ee:db:b7:
                    2c:e9:dc:d7:08:7b:76:4d:9c:97:0c:b9:45:50:b1:
                    d8:66:74:13:e6:77:a2:da:29:10:39:30:27:94:ec:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6B:19:CD:A0:22:2A:AF:20:67:D4:50:7D:83:04:66:28:EB:E5:12
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:28:9e:e4:62:81:ca:ac:e8:fd:0e:44:14:49:44:49:4f:42:
         bd:3f:a9:32:d0:87:d6:11:b7:11:c7:ae:9b:fc:64:0b:c6:fe:
         a6:90:eb:58:f7:e7:27:2e:4f:ae:d5:e0:a2:dd:4b:aa:ef:16:
         8f:40:58:87:c0:48:35:b1:4f:a4:bd:52:69:e8:f2:e5:68:9f:
         70:5d:ea:4f:a5:18:0a:df:52:27:26:36:ba:e7:04:51:7b:59:
         63:bc:83:39:5b:d0:ba:a5:28:68:07:56:ad:a3:a2:2f:e1:73:
         68:6e:67:d1:2d:07:74:7d:94:35:96:29:e3:1c:34:dc:15:06:
         06:76:09:27:91:e4:40:5a:4e:b4:ec:a3:21:67:55:b9:09:6a:
         ec:8b:16:ef:73:d0:72:59:7e:d4:40:2c:9c:ce:ca:eb:9b:f5:
         c2:0e:1d:22:38:08:d8:44:1c:fe:64:cb:55:dc:e6:31:02:09:
         42:6b:02:38:9f:d0:ab:ff:60:8c:ec:21:22:d3:16:79:0f:a7:
         ba:1a:91:9c:18:2d:66:df:82:09:52:ef:38:3e:8f:c5:ab:f1:
         b7:65:95:ff:9e:b2:d1:d8:98:2c:26:fb:bf:9b:8e:73:14:15:
         0b:6d:16:03:f1:76:f5:6a:bc:42:d6:a5:77:ec:21:db:71:47:
         23:2b:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:15 2026 by rpki-client