Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File:                     7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier:          l4gFTl8AwMcGKDeI6pVUiH8cy3Fu9iNQNeKM+Ifwo8A=
Subject key identifier:   20:BE:24:57:34:5C:4A:57:8E:11:49:60:6F:D8:FE:F7:04:C0:BD:8B
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer:       /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial:       0D54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number:          0D48
Signing time:             Mon 20 Apr 2026 17:56:55 +0000
Manifest this update:     Mon 20 Apr 2026 17:56:54 +0000
Manifest next update:     Mon 27 Apr 2026 17:56:54 +0000
Files and hashes:         1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: FcPu1uAfuYie3dQ9ZoLrB0D5b47d+rk3R7PHIXzq5I0=)
                          2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: WNQo1gJzwhXWEpc2UK9IPm/NBGxZHgROjQVKTAiSKXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
                          rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 17:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3412 (0xd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
        Validity
            Not Before: Apr 20 17:56:54 2026 GMT
            Not After : Apr 27 17:56:54 2026 GMT
        Subject: CN=69e668e7-af51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2f:cb:8c:80:47:06:77:58:ac:54:fb:37:40:
                    19:22:ff:7d:bf:8e:d2:e6:fe:dd:80:67:0e:16:7d:
                    bd:65:00:f9:bd:e9:46:a1:f7:d4:d1:56:49:65:3f:
                    06:22:39:1c:5a:80:cc:68:7d:04:a1:05:ff:c0:c5:
                    f1:24:9d:5a:bb:0a:a4:78:2e:1c:aa:ee:6f:7f:2e:
                    b3:cf:a8:b4:2c:18:3c:b7:b9:fb:55:54:f7:77:3f:
                    3b:a0:36:45:7a:e5:d0:2e:a0:9c:3e:93:da:15:09:
                    47:51:88:dc:7d:e6:bb:57:11:ba:99:88:f7:20:30:
                    ae:0c:7c:14:c0:b9:00:ad:eb:be:b1:a4:56:0c:9f:
                    a7:e8:42:40:92:82:ad:a4:09:5f:19:ba:2e:73:77:
                    7b:33:22:43:b5:a2:84:94:a0:95:31:03:d1:61:14:
                    8c:f7:44:79:89:f3:9d:5f:0a:c6:90:ba:66:2d:60:
                    d4:bf:3d:4d:74:56:4b:aa:51:88:e6:45:8b:34:e5:
                    d4:f4:a3:fe:ea:b1:e8:38:6a:ae:62:aa:5e:9c:18:
                    d5:e4:a2:f3:a6:b0:b4:cc:87:92:7f:23:22:26:c7:
                    a3:8c:00:cb:cc:36:90:6f:ad:a4:65:d9:82:9d:ac:
                    06:4a:8c:d9:44:0b:6a:b7:d3:d3:21:19:04:e6:f1:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:24:57:34:5C:4A:57:8E:11:49:60:6F:D8:FE:F7:04:C0:BD:8B
            X509v3 Authority Key Identifier:
                keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:19:16:d6:ef:5a:dd:5a:47:88:dd:5b:5f:44:a2:4b:a8:
         bb:dd:08:47:24:ea:1a:da:10:6a:8b:21:27:7c:aa:b7:00:89:
         b5:2d:ba:22:09:bc:5f:91:15:cd:ab:f0:cd:84:64:6d:2b:30:
         85:70:ce:40:3f:ba:4a:8e:62:d6:4b:28:63:87:ec:7f:4c:b1:
         88:95:74:30:bf:4a:7c:59:93:e4:f3:5a:80:df:2f:7e:b1:62:
         71:89:7b:19:17:f9:5d:f6:75:5a:e0:f7:51:33:4c:ec:2d:be:
         e6:5b:b6:6b:66:0d:1e:ff:34:6d:4a:d4:e1:86:11:d6:26:98:
         1a:54:05:33:c5:d9:33:00:95:a0:52:e6:63:4f:2d:8d:68:b7:
         0e:b6:94:09:ff:72:e7:fb:de:13:c4:d7:a2:a8:70:cf:15:e0:
         25:76:a8:7e:1a:32:02:5c:8e:11:44:39:dc:3a:89:fa:89:4c:
         56:95:42:36:83:43:8c:ba:a7:af:77:3d:8f:7e:57:13:56:ba:
         31:92:dd:93:3d:a3:f7:b3:be:d6:7c:16:4f:c1:e5:88:65:c1:
         54:a2:25:91:5e:ec:6c:f2:01:fb:b7:3f:a3:e8:38:3a:49:27:
         2b:cc:5d:7f:b0:a7:85:b5:61:5b:ea:21:30:8a:d3:9e:ac:30:
         e9:8f:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:24:14 2026 by rpki-client