Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
File:                     u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json)
Hash identifier:          E0kv3cvN6caoAYhGCFF+eT2n5NlS1wLK3gVAI8FdvoI=
Subject key identifier:   DA:9B:AB:AF:CE:9C:55:C8:C4:CB:74:0E:08:D3:95:58:C0:A3:D4:A7
Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
Certificate issuer:       /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
Certificate serial:       04E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
Manifest number:          04DB
Signing time:             Thu 16 Apr 2026 23:44:26 +0000
Manifest this update:     Thu 16 Apr 2026 23:44:26 +0000
Manifest next update:     Thu 23 Apr 2026 23:44:26 +0000
Files and hashes:         1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: VgnqwW5Nf3gTPhAOSt2DsGMutD2s187YAYjEamAouyY=)
                          2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: 9CfqYYl4auSjx9zjrb6Pvsma7el5RM6zCTL8hx3B2ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl
                          rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
        Validity
            Not Before: Apr 16 23:44:26 2026 GMT
            Not After : Apr 23 23:44:26 2026 GMT
        Subject: CN=69e1745a-6589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:fb:2e:1c:b9:bb:ef:b4:5e:dd:e8:a2:30:
                    18:c2:e5:c5:2a:98:b9:8e:e6:55:2c:96:35:78:43:
                    09:42:0a:e5:53:41:1f:a6:80:81:a5:ba:58:5a:1f:
                    dd:15:74:89:70:86:8b:60:60:f9:4b:f3:a6:e3:43:
                    ca:99:bd:02:9b:a6:a3:2e:b3:c3:b2:55:6c:5a:22:
                    52:d9:6a:38:ba:7e:bb:bc:35:a4:bd:59:bc:d3:2c:
                    ea:a0:70:92:27:ca:92:37:e9:dc:9b:48:3e:b9:a8:
                    54:b5:ca:2c:60:61:e9:98:35:53:cc:ff:b7:e5:55:
                    07:0e:4e:b6:21:48:12:59:cf:2b:3a:1e:ff:96:68:
                    b5:52:c9:b3:96:c5:66:9f:77:95:31:b8:54:86:48:
                    43:85:6f:9c:e3:81:44:b5:65:a6:ad:62:29:59:6d:
                    5e:7b:53:71:ad:c1:a8:87:d2:dc:12:40:c7:ca:5a:
                    e1:6e:8d:ff:69:fd:35:a4:59:f1:4f:49:42:4d:8b:
                    17:b9:d5:44:51:0e:26:77:e9:99:f1:67:f7:e4:07:
                    ec:16:90:cc:88:42:ac:16:6e:72:c1:ae:2f:82:1f:
                    79:1e:82:31:9a:0b:15:eb:2b:72:00:4c:48:ad:e5:
                    3c:fd:15:50:be:d2:38:90:f5:b5:83:54:9c:6d:ff:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9B:AB:AF:CE:9C:55:C8:C4:CB:74:0E:08:D3:95:58:C0:A3:D4:A7
            X509v3 Authority Key Identifier:
                keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:81:f3:00:1c:7a:cb:63:1e:e9:bd:61:3e:c6:df:cb:d0:8f:
         c2:be:8c:24:c3:77:9a:d7:40:38:10:26:3e:9a:99:fe:90:9a:
         25:6c:a7:2b:89:64:65:6a:08:a4:2c:81:78:3d:a6:fd:59:9d:
         03:a4:74:82:c9:b7:ad:73:2c:6a:4b:7a:71:59:7a:f9:e3:4a:
         94:b0:28:99:56:16:45:35:54:d2:57:f8:2c:ad:4d:87:6a:62:
         a6:6d:2d:b0:75:5c:c8:0f:35:f7:44:c1:59:be:bc:2e:24:8a:
         b9:0f:14:22:3e:ab:79:50:4e:30:50:82:33:8e:2d:10:75:5a:
         5e:cc:82:ad:12:34:69:79:27:85:6b:55:fd:7e:2b:b4:51:8b:
         94:77:d3:f9:ce:89:fc:14:25:b3:55:0c:8a:42:ae:d0:d6:45:
         22:15:d5:e9:d5:71:22:48:ad:e3:08:c9:a8:1a:ac:f5:65:fb:
         4b:98:aa:52:42:dc:9c:4c:83:b2:e9:04:27:98:42:43:69:0d:
         3b:ce:e7:80:12:a4:ed:02:d7:28:74:a9:01:e5:36:c3:63:84:
         be:54:67:60:9e:95:21:90:d0:6e:52:8c:77:a7:d9:ea:66:3c:
         68:40:6f:63:26:cf:74:85:5c:41:75:34:7e:d4:1f:0f:13:52:
         5a:d3:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:04 2026 by rpki-client