Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File:                     4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier:          wMRsORVTa+rpQB+u8MTfSbkgtgQhIylu3YdDFfc6bBs=
Subject key identifier:   BB:35:17:E1:D7:6D:7F:A3:3F:B7:4F:18:68:12:9B:4D:9D:B2:CB:DE
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer:       /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial:       18B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number:          186F
Signing time:             Thu 16 Apr 2026 16:27:27 +0000
Manifest this update:     Thu 16 Apr 2026 16:27:27 +0000
Manifest next update:     Thu 23 Apr 2026 16:27:27 +0000
Files and hashes:         1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: tgdJyQlmpYBiFQFfFP00vfNH978FNjuu0URxxFg+6/s=)
                          2: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=)
                          3: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=)
                          4: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
                          rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6322 (0x18b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
        Validity
            Not Before: Apr 16 16:27:27 2026 GMT
            Not After : Apr 23 16:27:27 2026 GMT
        Subject: CN=69e10def-f169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:f7:4a:f4:02:da:49:d0:b4:0e:0b:aa:82:
                    70:8f:a3:41:42:d2:ea:c4:6c:18:42:89:55:3d:0e:
                    53:5e:4d:5d:52:36:40:68:a0:96:56:6c:9c:b7:de:
                    5a:f6:96:70:a8:29:d0:34:ea:4b:ee:21:02:f0:92:
                    49:35:14:7f:0d:58:78:fc:f2:49:d1:84:23:d5:ce:
                    3e:3d:90:8e:2f:96:14:3f:eb:f6:be:c3:8e:70:f4:
                    1a:dd:3b:18:82:3b:6b:03:e1:b4:84:c2:87:e9:76:
                    2e:38:be:ea:d7:65:0c:3d:39:cb:3b:f3:b4:c3:26:
                    4e:e4:be:4b:56:64:24:3e:7c:a2:a4:1d:55:ca:04:
                    8b:11:0a:04:4f:0c:bb:89:78:60:bd:43:42:51:bf:
                    ad:14:48:88:27:67:f2:33:81:ab:17:c5:6c:ba:55:
                    6e:46:50:c9:2a:d0:10:13:1c:87:a6:27:af:94:d0:
                    a0:17:b2:ae:17:78:33:de:6a:7a:fb:e2:41:aa:c6:
                    70:f4:af:48:8f:c4:c5:74:0b:ed:6e:f3:f2:3a:30:
                    32:9c:dd:04:34:26:9d:60:36:5b:c9:66:f4:19:75:
                    af:17:5d:e0:fb:e9:05:38:25:e1:3c:10:d6:ce:f2:
                    3f:c4:b4:14:67:76:df:06:d2:47:c2:c1:12:16:9c:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:35:17:E1:D7:6D:7F:A3:3F:B7:4F:18:68:12:9B:4D:9D:B2:CB:DE
            X509v3 Authority Key Identifier:
                keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e2:bd:bc:c0:a4:be:ee:3b:0c:a3:7c:ae:1b:38:e9:3e:10:
         0c:b3:1b:40:1e:a3:69:86:b8:a0:75:09:01:e8:17:a0:cf:c7:
         11:f7:fb:27:7d:43:68:e2:94:2a:65:92:05:4b:11:46:12:da:
         c1:bb:76:34:5b:f8:95:e0:bd:93:b7:5b:14:83:d9:93:bf:71:
         b4:06:d8:ad:25:98:dc:7f:d2:45:eb:36:9d:80:57:82:8a:cb:
         09:a8:d0:e4:46:9d:35:b6:c8:e7:08:8e:1b:18:cf:42:b5:94:
         c9:77:9a:4a:d6:34:c8:53:a5:ae:a2:49:5b:92:30:a1:a3:0a:
         be:41:d8:82:df:0d:c9:12:a7:1f:25:c7:dc:b2:26:3c:b6:b7:
         b3:87:a9:25:e3:b8:c5:98:23:da:f3:66:53:ca:ce:e2:82:bc:
         bb:84:78:06:f2:3b:73:8a:6a:fa:9c:49:02:94:54:a9:cd:8f:
         91:4b:46:f4:61:41:88:8b:ed:ab:f8:5b:78:40:57:f7:4c:a1:
         8d:58:92:8c:b3:67:7b:b4:09:38:17:56:9b:44:8a:61:6b:13:
         ba:b4:42:35:90:9b:4b:d6:70:24:05:6f:8a:90:77:fe:e8:b1:
         ce:0f:97:e0:a2:67:b4:5f:31:b2:44:ce:09:f7:c6:34:1f:40:
         c7:f1:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:34 2026 by rpki-client