Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
File:                     j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft (raw, json)
Hash identifier:          oDMTQP2OfuQx5qwCrqUEApWS/xsixTOL5sVovWkCfM0=
Subject key identifier:   90:65:36:1C:DA:C3:00:37:7E:35:1E:17:DD:D3:98:76:38:25:7C:D4
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Certificate issuer:       /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial:       085D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
Manifest number:          084C
Signing time:             Thu 16 Apr 2026 20:46:30 +0000
Manifest this update:     Thu 16 Apr 2026 20:46:30 +0000
Manifest next update:     Thu 23 Apr 2026 20:46:30 +0000
Files and hashes:         1: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl (hash: zshFti0Jronbh+QDExBp5DSUTlFLdqUkCSqkXpqfIt8=)
                          2: 706E023CD46911EE9E90881CC4F9AE02.roa (hash: Dj/qSt0IyssQ+QhMMN6zLmyTN4hQ3eLX7SkT6291BOc=)
                          3: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (hash: KzpDIugbV8vHQ/gYQ5pO+EKoT/0uahv1Vz2s5knDV8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
                          rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141 (0x85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
        Validity
            Not Before: Apr 16 20:46:30 2026 GMT
            Not After : Apr 23 20:46:30 2026 GMT
        Subject: CN=69e14aa6-84a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:4d:0a:1c:12:a1:63:da:80:9a:82:fc:9c:
                    00:66:c2:b9:75:78:7a:f0:97:f0:02:b8:c4:47:2a:
                    04:fb:e7:ae:0d:71:b8:3e:21:d2:ac:ca:8a:cc:6f:
                    73:80:2d:b6:e9:f4:fb:9e:72:7a:76:10:dc:00:2a:
                    ec:a8:c6:c0:c0:9b:fc:22:01:2a:c1:63:42:8b:3c:
                    7f:c5:6c:33:02:7a:b8:4c:84:19:1d:38:67:a2:0e:
                    75:82:f3:ee:ec:ae:74:fd:ef:97:d7:42:ea:fa:25:
                    e4:46:8c:05:99:a5:20:24:6d:b2:16:fb:2f:15:12:
                    0d:3e:a7:8a:e9:ca:c3:8a:9e:a7:6b:74:5d:06:e1:
                    80:2f:65:2d:4b:0b:14:02:14:2a:64:3d:ec:d6:b2:
                    05:e0:04:ee:39:7a:ae:36:ec:48:6a:6d:99:f5:c7:
                    58:90:4d:6d:c3:cc:b1:4c:0e:1f:b2:1d:d0:38:b3:
                    82:ae:83:d4:51:59:9d:72:ef:33:38:6d:1a:5a:a4:
                    17:79:87:7c:99:50:e7:4a:ef:29:e5:95:ee:e2:f8:
                    52:96:35:45:95:69:fc:58:92:3f:64:79:fc:24:fd:
                    69:ee:b5:8e:90:b9:84:86:3e:ea:ca:72:1f:77:91:
                    f6:fb:a7:bf:b7:46:84:48:c6:ad:33:e1:86:98:8a:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:36:1C:DA:C3:00:37:7E:35:1E:17:DD:D3:98:76:38:25:7C:D4
            X509v3 Authority Key Identifier:
                keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:6e:29:09:1f:fc:f4:cf:7a:66:71:4d:b4:05:b7:85:08:
         d4:81:96:8f:b5:bc:ed:11:93:42:fe:c4:77:b5:36:0f:ce:ab:
         b3:00:96:23:ad:41:f9:a4:ab:bb:9f:83:f8:37:9a:69:c9:59:
         c6:62:22:d2:82:ee:a2:c8:f2:de:ca:ce:60:fd:d0:e8:d1:b3:
         02:7d:2c:48:64:84:22:8d:7f:6b:e3:0f:38:61:37:1c:7d:24:
         a7:8d:24:71:c3:bd:18:45:33:e2:ce:8c:60:3b:5d:65:19:3e:
         c2:6a:cf:1e:57:d0:d0:da:34:4b:94:01:4f:e9:b5:78:b7:81:
         3d:68:c3:cc:36:4b:cc:81:0a:88:bf:da:65:b1:12:46:dd:ef:
         7b:8a:47:74:21:c8:36:aa:a8:7c:db:f7:c0:e5:e5:a7:da:3e:
         58:c2:e7:e3:ef:6f:f8:5d:6d:82:1d:ca:3a:66:e0:62:ad:55:
         bc:ee:5a:e1:49:76:00:a3:7d:ff:88:82:34:45:b5:3e:80:dd:
         23:18:a9:76:a8:80:e8:6b:14:2d:ec:b4:b4:ff:49:a9:56:d6:
         2b:78:7d:e9:c2:81:ee:8b:19:e4:af:57:3e:f4:9b:cd:c7:43:
         ce:f3:4d:62:68:66:d9:a1:4d:23:99:07:f0:79:71:c1:3c:09:
         82:c3:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:22 2026 by rpki-client