Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
File:                     RFYGB9mXqksKc6pXxvY1ND3QGNY.mft (raw, json)
Hash identifier:          +L7ZlC3p/VZ1dwbi/Y86Cb/xF7lWci5JZfAzFqsBES4=
Subject key identifier:   57:51:C0:3D:78:E1:92:9A:1C:5E:03:0B:83:BD:1B:24:04:39:8E:08
Authority key identifier: 44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6
Certificate issuer:       /CN=A917047F/serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
Manifest number:          0EF8
Signing time:             Thu 16 Apr 2026 17:34:54 +0000
Manifest this update:     Thu 16 Apr 2026 17:34:53 +0000
Manifest next update:     Thu 23 Apr 2026 17:34:53 +0000
Files and hashes:         1: RFYGB9mXqksKc6pXxvY1ND3QGNY.crl (hash: ugV0f/F1lyg+3thiEgl07FFNsL02Ij3/2ln95PbO3J0=)
                          2: 58A1565020E711F19CC84E688AEE528E.roa (hash: 0yKYPlVxJjwyMvurUmCkidN4rIU8FxKPZNApymflK/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl
                          rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917047F, serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
        Validity
            Not Before: Apr 16 17:34:53 2026 GMT
            Not After : Apr 23 17:34:53 2026 GMT
        Subject: CN=69e11dbe-e82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:67:ea:df:5c:96:0b:7e:d2:74:21:c6:aa:
                    37:b3:f7:d6:8a:7f:4f:9f:0a:23:a8:0a:f3:44:28:
                    ea:a8:71:5a:b0:2b:7c:f2:4d:f3:d9:4e:6d:23:3d:
                    76:a5:1a:04:ee:04:93:f0:fb:95:ac:08:ca:8d:56:
                    d8:2e:2d:f9:3b:17:58:55:10:c9:9f:94:3e:f0:c6:
                    b4:19:8d:3f:9b:62:b5:4e:e5:3e:8c:25:7e:d3:43:
                    b8:74:84:47:f3:04:c4:ce:df:16:cb:0a:cb:a3:85:
                    e3:37:d9:e7:fc:ad:54:3c:a6:2c:9e:42:3a:ae:8e:
                    12:67:0d:5e:50:29:ce:3f:df:a0:04:85:6f:cf:b4:
                    2b:b8:81:cb:7d:dd:73:6d:2d:ce:44:72:ac:06:c6:
                    35:52:90:30:72:35:9c:6e:71:66:53:18:17:9d:95:
                    af:67:52:64:51:f0:8a:6e:f1:46:95:3c:84:4c:c9:
                    87:bb:d8:e5:af:d9:7d:90:2e:04:39:63:8b:5d:08:
                    69:d7:a4:bc:b8:43:d7:62:df:43:a0:d0:86:bf:51:
                    b3:4c:ca:af:0e:ff:0d:5e:eb:0b:d2:4c:e9:3e:f6:
                    0f:4a:c6:8b:e4:c2:20:c8:40:e4:8c:db:78:4e:51:
                    fc:06:43:bb:31:dd:f8:45:f7:25:02:8e:80:c4:88:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:C0:3D:78:E1:92:9A:1C:5E:03:0B:83:BD:1B:24:04:39:8E:08
            X509v3 Authority Key Identifier:
                keyid:44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:e4:76:95:5c:ea:7d:38:4b:f9:c1:20:87:2d:30:0b:d1:
         a9:28:13:1a:b3:7b:1d:9e:29:dd:be:74:99:a1:1c:41:8e:dc:
         c5:01:d3:7a:d6:e5:a7:61:95:5b:61:9d:48:e1:58:23:77:48:
         bd:88:f8:a2:34:55:07:2c:d3:8b:9b:79:86:3f:8f:ae:22:3c:
         b5:c1:b1:33:71:c6:1a:aa:01:61:40:7a:70:c8:0f:cc:4e:97:
         bc:67:21:a0:c8:3d:a9:f7:3e:2d:ea:47:eb:96:4a:f0:15:4a:
         72:44:62:f0:06:03:08:36:08:72:19:5d:f2:09:d0:f7:10:9a:
         53:6a:b8:ce:49:32:c0:4e:11:44:98:bf:8b:3b:cf:31:1e:ea:
         0e:0c:70:25:d6:be:45:27:9c:7b:5a:e2:fe:34:04:d4:1f:62:
         9b:a5:b7:11:0c:23:49:06:e4:f1:7c:9a:73:e3:1e:ca:9a:cc:
         f1:86:eb:23:e3:90:5d:c4:4b:32:50:61:0a:1c:01:6c:bd:4c:
         c9:70:47:88:51:b0:0e:59:2a:21:12:e9:91:af:19:51:f4:a2:
         f7:6c:3a:90:a8:a7:f9:b7:60:5e:b8:79:4e:c4:56:57:9e:13:
         80:28:50:82:37:6f:c5:15:14:70:60:73:b4:73:6f:65:a4:a1:
         52:82:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:57 2026 by rpki-client