Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
File:                     aFEZgfy52vrY49MDBLtBqW-5p28.mft (raw, json)
Hash identifier:          /SlGMrwiulbxs2njI4PVaVt5I1QYKQZ4MmEBqzmT+wY=
Subject key identifier:   7D:59:08:17:E7:1B:9B:5D:21:1E:8D:D2:6B:3B:D4:33:0D:CB:8D:C5
Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
Certificate issuer:       /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
Manifest number:          0534
Signing time:             Thu 16 Apr 2026 23:26:56 +0000
Manifest this update:     Thu 16 Apr 2026 23:26:56 +0000
Manifest next update:     Thu 23 Apr 2026 23:26:56 +0000
Files and hashes:         1: aFEZgfy52vrY49MDBLtBqW-5p28.crl (hash: s/8My9qbovo9K8+uSMd7M24eFYLmX3c8td62Lwudlo4=)
                          2: 5C2186C444B011F0B9799F48C4F9AE02.roa (hash: 7U90fAJm9Jprxru+K/b/WXWkFIPppoovbosNTZikpMg=)
                          3: 3E60217E42D211EC956C7F65C4F9AE02.roa (hash: tETiEeczeTi6RVos7PRLZrM1yj4bO0TaBc4BLbzROio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
                          rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
        Validity
            Not Before: Apr 16 23:26:56 2026 GMT
            Not After : Apr 23 23:26:56 2026 GMT
        Subject: CN=69e17040-99f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c3:7e:2d:f1:29:15:89:a9:78:14:80:89:49:
                    6a:4f:6e:20:81:16:c5:a9:7f:4a:05:5a:2c:e6:82:
                    c8:0f:e0:3b:3f:3c:60:bf:39:94:07:b2:0b:ac:b7:
                    60:ca:ea:2e:79:a8:b5:16:c1:91:b4:aa:ee:10:c0:
                    96:4a:a8:0d:f4:8b:2b:11:68:08:41:d7:49:91:b6:
                    ee:d2:38:ef:6e:ef:ec:1f:39:92:8a:01:fe:13:ab:
                    3f:bc:19:fa:0f:0d:10:3e:52:05:d3:90:4d:51:2b:
                    27:d8:13:ad:16:44:52:a3:50:23:2d:e8:3a:64:df:
                    8c:7f:f7:bf:3a:f2:49:c6:dc:b5:88:9c:1a:1e:95:
                    3a:2e:f7:4c:7d:5c:92:ef:d4:f2:dd:9a:a1:8a:f0:
                    0f:a9:18:cb:ce:92:0a:cf:1b:16:a2:2e:ff:8a:0b:
                    cf:48:79:c8:90:db:e9:40:6b:f8:76:28:a1:b2:d7:
                    50:56:6b:2a:8a:06:f1:e1:fb:8d:81:30:bf:eb:a2:
                    b4:48:2d:9a:15:f1:53:af:f3:b9:9e:8e:65:90:b0:
                    2c:d1:db:04:30:34:cd:10:e4:0c:2c:72:01:cb:7d:
                    d3:ae:ca:ba:3b:a7:fa:97:10:e4:1b:49:3b:36:1f:
                    16:c1:83:51:64:b5:17:56:cf:cc:04:82:15:ec:b7:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:59:08:17:E7:1B:9B:5D:21:1E:8D:D2:6B:3B:D4:33:0D:CB:8D:C5
            X509v3 Authority Key Identifier:
                keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:ae:27:93:e0:07:48:f4:df:d8:a1:36:b9:52:60:ae:2a:
         c8:b6:47:71:cf:0f:08:d8:f5:b4:69:65:d7:c2:f3:df:0c:36:
         7f:44:c5:3c:b7:9b:86:13:6e:be:40:ce:ae:b5:ce:c2:ba:dd:
         a8:b9:9e:19:76:da:d6:00:3b:5c:65:ae:a7:71:80:39:da:88:
         75:85:0a:9e:b9:38:31:36:6a:43:95:ba:01:07:20:aa:f1:c0:
         e2:fb:17:11:a2:f5:15:63:e6:8f:66:81:1c:c1:ce:82:14:25:
         cd:d7:8f:12:ad:ab:1d:1a:d4:e5:69:55:02:30:ba:72:00:2a:
         5e:4d:74:91:48:25:79:44:dc:eb:14:00:da:01:c0:ba:e4:40:
         33:d1:37:12:7c:69:4d:e9:22:81:d4:96:eb:99:a0:40:53:e9:
         d9:1e:58:37:e0:9c:20:65:ae:39:ba:3a:bf:dd:60:b5:80:c0:
         16:0e:05:44:de:fa:dc:d4:38:11:21:48:f3:ac:8d:78:5c:ce:
         cb:5d:e2:f8:3a:24:4d:5c:67:f2:08:12:37:10:04:83:0f:94:
         9c:77:43:c7:bf:65:47:ed:9f:60:76:db:67:27:c7:32:72:ae:
         08:57:4d:cf:b6:d6:75:3a:de:a3:a0:b5:7f:8f:3a:97:81:30:
         88:81:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:31 2026 by rpki-client