Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
File:                     _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json)
Hash identifier:          +m6lP05mt6ZPRk8yU3i+zKDAawUw4FtIiuf7iWfB8/s=
Subject key identifier:   61:D6:B5:87:CE:64:25:10:E4:3F:8D:3F:BD:4C:7C:F5:00:E2:B4:DD
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       08EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
Manifest number:          08CD
Signing time:             Thu 16 Apr 2026 20:19:08 +0000
Manifest this update:     Thu 16 Apr 2026 20:19:08 +0000
Manifest next update:     Thu 23 Apr 2026 20:19:08 +0000
Files and hashes:         1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: dkCm9eZL41gC/h7YNUtW8r42tam9VxON9YGFXt/5WDg=)
                          2: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: FbU7ogZGnxwpy8uO7TQa4C+PC7rIoNaS0brHXrx8V3Q=)
                          3: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: sUJuDBkhuJMWH5qHOg81PArKhR1cM+a8Tk9uB+YtZEk=)
                          4: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: /jZlWe5b1tdB/1LzyZJMP14Lwuk7j7u94C5/2m1fSsY=)
                          5: 565FCA9C234511F18CA006D5AA833773.roa (hash: aTOHnH+PIlXLEz/PlKchWGBMGrG5zU//1ailyZ4pOQ8=)
                          6: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: Zab7lbu8SmQuXuacA27UiBSUqn7RAju8DjqLK8U+ZyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: Apr 16 20:19:08 2026 GMT
            Not After : Apr 23 20:19:08 2026 GMT
        Subject: CN=69e1443c-f186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:fb:d1:b3:33:0c:5c:8e:11:90:63:70:a4:
                    c4:c9:7e:0e:10:64:a8:2f:7a:a2:96:78:32:a3:da:
                    11:5f:e9:7b:b8:4c:f1:1e:24:2d:3b:28:4b:86:01:
                    82:17:ad:66:96:34:96:5a:19:ae:42:0c:e8:93:29:
                    61:72:f5:98:f8:af:ea:4f:72:7f:0f:ab:62:3a:e8:
                    66:52:c3:a9:22:2d:a1:cc:5e:24:77:14:0f:78:87:
                    9f:61:5e:25:72:c8:33:22:51:eb:c2:f0:ed:e7:00:
                    dc:9b:93:34:68:af:be:d3:65:dc:96:44:b1:0b:ae:
                    c9:6f:73:46:bc:3a:a7:03:8a:9d:71:dd:46:63:2a:
                    93:da:85:81:d9:b5:55:a9:66:bf:bd:61:a5:f3:0f:
                    94:9c:57:78:35:a1:46:96:41:7e:3e:61:e0:f1:44:
                    7d:05:25:ae:e8:be:cb:58:fe:9b:86:63:fb:f4:34:
                    69:cd:33:4f:d7:f9:d6:54:53:c0:b9:6c:ab:44:60:
                    67:8e:34:e5:84:2f:ec:db:8a:f6:88:25:2c:71:da:
                    96:60:91:6d:d1:42:13:01:09:42:db:35:6b:5b:8c:
                    ce:8b:5a:8e:de:eb:bd:ef:d3:5e:51:2b:18:d6:32:
                    4d:8d:7a:17:c4:3d:d6:92:cd:bc:05:36:0d:5b:ff:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D6:B5:87:CE:64:25:10:E4:3F:8D:3F:BD:4C:7C:F5:00:E2:B4:DD
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:a4:38:21:8e:4a:30:63:28:4e:0c:ea:7d:0c:d5:67:d1:
         a0:41:bb:15:bd:fb:cf:c4:88:62:4e:3c:b2:de:f9:cd:65:57:
         9d:e0:24:14:aa:2b:98:49:c3:53:96:83:30:7d:83:a9:cf:10:
         5c:33:56:43:a4:54:ea:ec:6b:7c:3c:fa:1d:35:93:b4:82:61:
         9c:d5:3f:48:60:4a:13:12:ab:22:0b:ed:02:39:81:51:b0:81:
         52:29:e7:0a:a1:a6:ff:c4:ca:5e:35:ce:b3:bb:98:54:f8:cc:
         30:05:bf:8a:b5:10:59:54:48:16:6f:a9:8d:8e:69:b6:c8:76:
         02:94:af:58:ea:12:e2:4d:2d:7c:6e:b2:61:e3:17:b5:fa:c8:
         e7:3d:90:f8:99:2f:86:4f:6b:34:f7:57:d4:44:4e:b3:61:0c:
         8e:46:d2:93:55:cc:28:60:c8:79:34:8a:65:86:98:75:a7:26:
         c9:ab:3c:0d:eb:2b:82:88:2f:a4:0f:36:72:14:5f:2b:59:e0:
         31:70:16:fd:92:ea:ea:ca:65:51:28:c2:b2:19:83:69:b2:8b:
         7e:fe:d6:1b:06:51:c6:c8:40:ac:26:32:c0:48:e3:33:ef:04:
         cd:20:09:85:53:91:63:37:9f:a4:2e:0d:a4:8c:62:e8:0a:c7:
         37:eb:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:14 2026 by rpki-client