Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File:                     MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier:          BAqQt9XwXE+DfIAVM1ko/SIZffRpa/Mvm9psqw6NeG0=
Subject key identifier:   33:C3:E9:88:54:05:B7:7D:E0:56:CB:56:5E:32:73:96:F5:A8:B1:C0
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer:       /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial:       0D00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number:          0CF8
Signing time:             Thu 16 Apr 2026 18:06:19 +0000
Manifest this update:     Thu 16 Apr 2026 18:06:18 +0000
Manifest next update:     Thu 23 Apr 2026 18:06:18 +0000
Files and hashes:         1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: Gsvoz2T71+e6sQGDJt0WGXpVVyYex0UZw8wh+yIvsbs=)
                          2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: BxdToQUnq7s7IiCDOp8OROzzu8gjSdJZbTs5vKx24f4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
                          rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3328 (0xd00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
        Validity
            Not Before: Apr 16 18:06:18 2026 GMT
            Not After : Apr 23 18:06:18 2026 GMT
        Subject: CN=69e1251b-4129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:b1:a9:bc:0f:12:1a:20:29:51:a3:7c:ad:
                    91:61:65:5b:7c:6c:5d:b3:b7:8a:e6:b7:0d:7c:6f:
                    cb:51:f0:95:c1:d7:8e:67:9e:24:27:43:c3:96:70:
                    38:3d:6b:ee:79:34:74:11:e7:c4:e5:d1:57:5d:78:
                    41:ec:43:86:26:de:84:d6:b6:16:00:3a:bc:fc:9a:
                    1c:9c:18:c6:c5:75:2b:d2:f0:a6:6c:72:a3:dd:f2:
                    52:14:da:02:cb:3a:ab:b8:2e:5f:ae:f4:9e:b3:27:
                    17:8f:69:35:ce:0a:83:9f:2b:2c:d5:49:cc:cc:48:
                    10:d0:7f:51:01:4e:84:d5:4e:55:ba:79:c0:e4:d4:
                    7d:51:12:0b:35:2e:5d:45:76:e6:e7:9f:58:2a:1d:
                    75:07:46:9d:0f:3b:0e:ec:f6:0f:9b:a2:dc:20:44:
                    3c:45:e6:65:f6:1d:6f:ba:c0:00:db:dc:b9:65:33:
                    9d:7f:83:02:94:7e:44:7e:97:34:e5:c7:a5:8f:87:
                    2f:26:38:88:0d:f2:09:d3:e3:8e:e2:e7:ea:3b:c0:
                    de:df:0f:e6:7c:6c:fd:9b:06:1b:e5:51:43:b6:9a:
                    9a:e8:87:b3:56:36:e0:67:48:bb:43:57:ed:77:4e:
                    14:14:f7:d7:f3:e4:6a:8d:87:bd:3e:fe:c8:9c:ec:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C3:E9:88:54:05:B7:7D:E0:56:CB:56:5E:32:73:96:F5:A8:B1:C0
            X509v3 Authority Key Identifier:
                keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:cc:72:e6:04:50:a1:48:e9:f6:19:38:fa:7d:fa:aa:51:1d:
         b5:80:ec:24:ff:86:1f:3a:ed:c2:fe:12:36:cf:ac:b5:c7:ab:
         04:f2:e1:ed:7c:5f:13:df:3d:4d:30:40:ac:49:ed:64:ef:b7:
         a5:a8:9f:9e:4d:1a:2b:44:d0:6a:fd:54:26:74:80:70:b6:34:
         36:c3:26:3c:17:ce:24:ab:c4:ad:39:75:5c:e8:fe:3a:79:0e:
         08:99:2a:56:f9:a7:35:42:0e:3d:39:79:e0:64:a1:85:27:e4:
         a2:e6:68:3d:e6:ba:10:ba:68:9b:eb:b4:9c:bc:e4:74:31:a9:
         ab:ce:1f:e6:50:e2:35:be:77:38:17:47:c6:1e:35:f6:b7:34:
         1d:16:b2:70:8a:28:2c:19:c4:fb:fc:7d:64:a1:03:42:eb:c9:
         25:27:92:03:ea:da:ba:32:3f:43:83:5b:ca:f2:93:c3:2c:37:
         c4:53:da:bf:ef:46:4f:55:92:44:17:9a:40:35:f0:e6:c3:8d:
         4c:d4:e4:a9:46:e1:bf:46:2d:e7:34:66:a3:2c:b3:57:6d:cb:
         41:43:67:6e:5a:4b:65:38:4d:e2:ae:35:e1:4a:99:4b:a0:fe:
         2d:16:03:03:32:b3:1f:18:9f:6c:06:ee:79:f0:f9:2c:c4:95:
         93:e0:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:35 2026 by rpki-client