Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
File:                     _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json)
Hash identifier:          zCHo2kObtGMR8EyspHeuDFzJ9EFt99kfobC8qitSgTE=
Subject key identifier:   E5:13:F5:16:31:37:DF:19:98:DC:D8:63:27:D5:4C:F9:7E:3A:2E:67
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Certificate issuer:       /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial:       355B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
Manifest number:          3547
Signing time:             Thu 16 Apr 2026 14:23:49 +0000
Manifest this update:     Thu 16 Apr 2026 14:23:48 +0000
Manifest next update:     Thu 23 Apr 2026 14:23:48 +0000
Files and hashes:         1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: jIbJCFCuzVK6Hq1x6qTiUk7QxzBKtCszVL1Iko8zuFY=)
                          2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: 3W4AiNrrj2kArnRpgqwuIaUDi20UJ9Jgfp+kFDwU8cQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
                          rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13659 (0x355b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
        Validity
            Not Before: Apr 16 14:23:48 2026 GMT
            Not After : Apr 23 14:23:48 2026 GMT
        Subject: CN=69e0f0f5-68f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:bf:e3:c7:58:5c:b7:d1:8c:e9:58:7b:51:
                    71:b3:96:d0:9b:b7:be:28:4f:aa:a5:ee:1a:1b:44:
                    8a:6d:4a:8f:f9:6c:c7:9e:43:95:e3:4a:e5:b0:4a:
                    dc:ca:7c:bf:cd:fb:50:9e:5b:f1:2f:8a:0b:1d:d1:
                    00:80:af:07:0c:db:7f:cc:7f:0b:ef:b4:01:12:8e:
                    d6:c8:09:9d:24:3d:76:7a:90:14:93:9d:0e:96:f6:
                    2b:02:7f:a4:e5:49:ed:45:fc:62:d7:7a:fc:94:7e:
                    4f:5a:92:dd:a9:14:56:4a:e8:66:e5:fb:fd:f3:7a:
                    7f:27:ed:57:6c:2e:02:a2:6f:af:e1:2b:b3:67:d6:
                    fc:c6:39:67:4b:7a:91:56:3a:10:49:fb:c1:cd:3c:
                    84:f0:fe:30:6d:ac:70:53:28:85:99:e6:15:98:a5:
                    bb:25:84:b3:1b:b9:d1:5b:37:25:08:36:2e:d1:6d:
                    98:7d:f7:42:4a:ef:7f:64:fd:66:8f:14:78:42:9a:
                    70:8a:41:dd:8c:7b:8b:aa:d9:cd:a8:94:d5:2d:43:
                    65:de:11:9b:2c:65:6b:42:f2:f2:2e:e8:8c:33:d4:
                    f4:fc:c2:d9:df:a0:45:94:ff:92:12:0e:58:c0:cd:
                    dd:28:07:9a:fc:a1:53:10:ef:ed:07:fa:3b:f1:d2:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:13:F5:16:31:37:DF:19:98:DC:D8:63:27:D5:4C:F9:7E:3A:2E:67
            X509v3 Authority Key Identifier:
                keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:c9:5c:9e:d7:1e:2b:ea:1e:47:dd:14:61:19:d7:9e:08:
         ea:92:96:dc:15:9e:4c:62:95:82:3b:08:50:c2:d1:46:c8:84:
         41:ec:1f:5a:30:48:9a:e7:e7:0e:20:6d:c3:e5:ea:49:75:f0:
         aa:8b:fa:2b:7a:d3:77:2d:4f:6e:62:54:ca:e9:d7:43:63:0f:
         62:ad:f1:de:6d:08:d0:ac:52:2c:62:88:29:62:04:19:dc:cb:
         e8:4b:40:35:59:73:3b:ac:f4:f7:c4:0a:4a:bb:9e:e4:53:31:
         9b:95:80:56:51:62:57:8e:3d:ab:ef:ce:11:d2:89:b9:7b:68:
         fb:7b:f5:71:63:73:f4:59:2b:89:80:11:0b:23:47:71:e7:a5:
         14:6f:70:24:b0:2d:be:e6:c3:af:a4:28:63:3d:b5:8d:d0:4d:
         8e:7f:e6:fe:e1:0f:c0:44:3e:c7:60:fe:85:7e:38:cc:14:df:
         eb:b7:02:b8:29:35:f7:3a:22:56:0e:46:d2:f2:ca:c2:01:99:
         5b:0d:fa:00:28:ce:20:58:16:74:ab:f1:88:cb:d0:4f:c2:ff:
         75:c5:78:30:3c:e0:ca:61:37:2b:c6:8a:4f:c9:91:2a:70:94:
         1a:da:86:68:28:cc:43:5f:e2:82:ac:e4:37:9a:06:3b:d7:41:
         be:96:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:28:28 2026 by rpki-client