Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
File:                     8T313f28CQG_wEdBIIjaNJOg8kQ.mft (raw, json)
Hash identifier:          2VKpwdYqu6+xytdxZ04oocGj+AtpWzs5n2UeFWk93es=
Subject key identifier:   B2:DF:EA:63:AC:84:9B:58:AA:98:E5:D2:28:A1:4B:8E:19:FB:F0:8C
Authority key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44
Certificate issuer:       /CN=A916E1C6/serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
Manifest number:          45
Signing time:             Fri 17 Apr 2026 08:06:04 +0000
Manifest this update:     Fri 17 Apr 2026 08:06:03 +0000
Manifest next update:     Fri 24 Apr 2026 08:06:03 +0000
Files and hashes:         1: 8T313f28CQG_wEdBIIjaNJOg8kQ.crl (hash: P+AIG66AxyktJAmngzatzDF9/MUu2o4cgm7Poq4EzDc=)
                          2: 20F76E36056911F187C42801313D8C67.roa (hash: Se4FSt1iM9MDo+gX2SyfdFL5Hm8kZKb/ZKJR41JulNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
        Validity
            Not Before: Apr 17 08:06:03 2026 GMT
            Not After : Apr 24 08:06:03 2026 GMT
        Subject: CN=69e1e9eb-660b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:de:b0:44:f3:78:13:d2:64:c0:e5:82:4f:
                    71:49:09:fc:10:7e:75:57:fe:7c:e8:6e:a0:5b:d0:
                    23:8f:c6:c3:b1:26:f1:a0:95:63:f3:7a:15:c7:6d:
                    4f:cd:ee:96:e3:6d:de:39:23:34:30:85:98:4e:dd:
                    d9:e6:f3:7f:b0:5d:8e:3c:8b:23:af:80:d1:49:0e:
                    62:86:38:12:87:1d:97:b4:ee:ce:91:6c:af:42:79:
                    cb:38:47:df:43:93:f5:14:83:34:6e:77:5a:57:09:
                    69:80:d1:2f:f4:2e:8e:6d:2f:c9:7f:6f:46:8d:38:
                    51:a3:a1:20:10:61:b7:20:a8:3f:4d:e7:8b:74:66:
                    13:e2:bd:e3:aa:fb:f6:d5:2a:b3:bb:6b:8b:1c:38:
                    32:03:63:67:17:4d:ef:1e:16:be:fe:ab:85:a0:c3:
                    5d:b3:0d:f6:94:7f:36:77:dc:a9:1c:43:5f:2c:a4:
                    46:fa:c3:01:5b:29:ea:47:54:d7:2f:3a:43:9f:62:
                    1f:6b:ed:7a:4d:3b:0f:c1:68:6d:f1:37:4b:80:5d:
                    6d:18:b7:ae:b7:be:d6:c6:74:55:15:c7:90:fd:32:
                    82:35:a4:d6:e0:0a:a6:0d:9d:53:7d:67:2c:3a:9e:
                    2f:cf:e6:c7:b7:96:72:e6:46:4e:19:64:55:68:89:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:EA:63:AC:84:9B:58:AA:98:E5:D2:28:A1:4B:8E:19:FB:F0:8C
            X509v3 Authority Key Identifier:
                keyid:F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:4a:3b:51:d4:78:0c:df:e4:3f:42:77:1b:22:99:71:17:
         9e:a5:04:e7:f5:68:30:bb:41:87:03:16:29:71:46:f0:9d:81:
         4a:a9:42:14:ad:1e:7e:81:13:b3:57:3b:78:33:65:04:a5:bf:
         71:72:c4:9c:61:1b:b5:5f:4e:69:5c:ea:46:d0:5a:8c:0c:e6:
         cf:14:98:2c:c2:9a:b7:c3:9f:f7:c9:9a:1b:f7:7a:8b:9f:d7:
         40:d7:92:ef:86:7f:17:10:92:31:f7:3e:87:5e:0f:89:85:e1:
         84:43:19:a0:3c:92:86:7a:59:d1:f0:71:34:3b:fc:90:25:65:
         67:bc:66:46:96:2d:1a:f8:8d:9b:d8:a4:5e:35:38:d4:92:f3:
         91:f5:66:4d:75:f8:f7:f7:ae:b7:61:10:f6:05:9f:b4:a4:1c:
         26:60:28:5c:7a:38:f8:6b:51:4f:35:88:ff:39:ef:e3:cd:96:
         3d:05:30:8c:c0:89:27:7b:34:f1:6f:8c:f9:e3:e5:08:b3:8b:
         33:af:89:8b:47:78:fd:2a:1b:35:e7:a9:dd:30:f5:06:24:08:
         9a:0b:3c:b5:99:e8:6d:90:78:8e:b9:53:07:09:a1:c3:ab:da:
         06:3e:bd:98:8e:42:a5:31:78:bf:6b:17:bc:7b:f0:16:75:1c:
         c9:31:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:46 2026 by rpki-client