Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File:                     Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier:          lFujERGVYibCy1npjazE5zmNi8sSYhX6IcL5tsqwo9U=
Subject key identifier:   26:FA:43:8C:46:83:A7:18:29:38:97:69:B6:36:5D:18:EA:A8:07:D2
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer:       /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial:       0380
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number:          0374
Signing time:             Fri 17 Apr 2026 00:44:29 +0000
Manifest this update:     Fri 17 Apr 2026 00:44:29 +0000
Manifest next update:     Fri 24 Apr 2026 00:44:29 +0000
Files and hashes:         1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: 9TVgWQHocoGzQmbFBrnhSm+9USNkX7mFF8X+pyB+MGU=)
                          2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
                          3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
                          rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
        Validity
            Not Before: Apr 17 00:44:29 2026 GMT
            Not After : Apr 24 00:44:29 2026 GMT
        Subject: CN=69e1826d-5e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:34:68:26:c0:ee:97:0e:dd:48:30:36:47:
                    e6:62:fd:01:07:25:2b:68:de:a9:43:b8:19:a1:a0:
                    6d:35:40:7a:1f:b2:4c:c3:c1:2b:fa:da:5c:01:5d:
                    90:65:15:d0:be:24:2f:a2:37:09:2c:5a:c4:ed:49:
                    64:a7:e2:20:4c:be:8e:5e:aa:6b:f6:c5:4e:4f:f4:
                    cc:97:3a:3b:89:ee:35:6e:85:6c:1b:de:b5:91:14:
                    7e:56:36:33:ac:88:da:52:e6:46:24:77:6b:c1:af:
                    df:d3:85:4f:b5:36:22:31:03:d7:a0:d3:35:f8:83:
                    58:02:48:0e:97:38:47:ab:9e:7f:e8:60:d0:f8:56:
                    c2:f3:2e:16:3f:54:fd:ef:e2:0c:f3:79:1b:8c:5f:
                    4b:27:95:8b:c2:2f:9d:10:be:d0:85:8c:61:17:d3:
                    9c:db:2b:7f:8c:0c:ef:7e:f8:4b:ac:77:d8:61:54:
                    77:18:11:b1:05:6b:80:72:ed:d4:c5:69:68:83:bb:
                    ff:ca:1e:9d:dc:cd:37:88:58:92:7d:ab:99:28:af:
                    a2:79:73:2e:da:6c:c9:e6:b6:64:3f:ee:0e:b7:89:
                    75:5a:c4:7b:b6:9a:96:ec:8a:d5:1d:73:c3:7e:2b:
                    fd:8d:a0:5b:74:b2:28:c3:9b:75:b5:a1:39:b8:29:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FA:43:8C:46:83:A7:18:29:38:97:69:B6:36:5D:18:EA:A8:07:D2
            X509v3 Authority Key Identifier:
                keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:02:80:8a:e0:e8:67:57:31:65:b9:88:a5:75:39:2e:8b:6f:
         e0:5a:ef:8c:aa:22:51:a1:85:48:09:23:d4:ac:f7:b9:d2:6c:
         26:52:b4:93:b5:02:66:83:77:99:65:05:ad:d2:3d:bc:4c:65:
         8f:86:e1:46:e8:1e:1d:9f:53:7a:50:36:5e:6e:1d:54:c6:6e:
         a2:ac:c9:29:f7:cd:af:64:41:f4:b2:27:fd:65:da:ad:5d:eb:
         42:45:fd:2a:15:a5:53:06:16:3c:44:a8:f4:fd:3b:39:53:a5:
         f1:5e:da:76:2b:da:66:d0:93:7b:7d:c4:b5:db:ee:6b:54:9d:
         50:f2:e6:0a:e5:a8:9b:8a:79:46:4c:fb:3f:19:79:b7:a0:fe:
         a9:4c:e6:75:e9:95:48:fb:58:6a:e6:8d:87:26:f9:44:e7:17:
         a0:fd:70:e8:44:e8:47:46:08:43:a5:72:30:ec:d3:1c:3d:b2:
         36:1d:1e:2d:0f:d4:51:0e:28:e5:2c:e0:85:6e:46:10:93:d2:
         c7:99:b5:f8:ca:24:ce:fc:a6:4b:87:a2:43:9e:08:3b:59:9f:
         da:fc:db:f5:39:de:34:3c:92:98:be:38:aa:64:e8:9a:6c:ed:
         d0:a5:1a:c1:16:f2:80:ca:75:39:bf:42:02:fd:9f:04:e3:82:
         09:2b:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:24 2026 by rpki-client