Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft
File:                     15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json)
Hash identifier:          2flXL3QG+aorxMouskr3CFIT24spYh/Ob4mEXwX6XX0=
Subject key identifier:   5B:59:FB:F4:5B:61:BA:9A:F1:3B:01:AA:64:6C:9E:B7:13:ED:99:BA
Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87
Certificate issuer:       /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
Certificate serial:       0A2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft
Manifest number:          0A23
Signing time:             Thu 16 Apr 2026 19:42:01 +0000
Manifest this update:     Thu 16 Apr 2026 19:42:00 +0000
Manifest next update:     Thu 23 Apr 2026 19:42:00 +0000
Files and hashes:         1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: NYcRVTwaJeQgj82F5aBNu5aQcgx9x98i1y0sg53elmE=)
                          2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: yasUXx+8XPiAPj8wnLXuLXC6RrpVezD6SS4aCg65E+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl
                          rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605 (0xa2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
        Validity
            Not Before: Apr 16 19:42:00 2026 GMT
            Not After : Apr 23 19:42:00 2026 GMT
        Subject: CN=69e13b88-1c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:5c:1c:0a:de:94:74:0d:77:ef:9d:84:c0:
                    92:33:0b:09:36:29:2e:8a:d1:d8:01:b6:42:8f:2c:
                    5b:85:50:1a:26:d2:bb:e5:8b:b9:4a:0f:94:8e:21:
                    61:9d:1b:48:c9:02:a9:bf:3d:38:36:ba:0c:72:38:
                    37:34:24:b0:2b:99:a9:e8:16:a2:b4:f9:9a:6f:f8:
                    fb:3c:b3:03:a8:71:a9:5a:f4:23:94:72:fb:5a:9e:
                    5c:34:2c:8f:5c:78:fa:7d:af:e3:1a:3b:6e:29:ce:
                    c0:d6:e5:4f:bc:a2:ac:b5:87:25:a2:e8:07:6d:f3:
                    d6:2e:ae:6b:c7:7f:a1:06:65:9d:38:61:c8:c6:81:
                    f0:09:65:cf:95:63:40:1b:dd:05:7e:71:bd:54:f1:
                    0c:5a:e8:16:f5:c9:c0:2d:d6:7c:0b:9d:98:e5:51:
                    f5:45:1d:df:d0:60:11:8f:6e:55:8b:28:57:04:cd:
                    2c:ea:e1:f9:ee:4f:2b:6d:52:8f:da:99:74:5c:d3:
                    17:63:f0:a5:c8:d6:46:95:eb:ef:9c:dc:85:d6:d1:
                    aa:f0:f4:c0:92:af:c8:ae:a6:35:2f:b4:c2:84:bf:
                    6e:99:d0:d7:fe:f5:1f:a9:c0:a1:d2:d1:0a:2c:2f:
                    4e:64:b7:b1:fc:ce:9b:38:f3:12:77:e0:e6:48:e1:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:FB:F4:5B:61:BA:9A:F1:3B:01:AA:64:6C:9E:B7:13:ED:99:BA
            X509v3 Authority Key Identifier:
                keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:72:67:a6:1b:3f:30:b6:30:69:ed:ef:2e:db:e3:56:4a:
         d7:63:27:5d:a3:d6:73:30:fe:96:ef:6c:39:5f:58:35:98:32:
         88:1a:32:37:bd:c1:64:ba:17:4a:a6:60:fb:18:b4:cb:1b:1f:
         8c:dc:4a:96:21:07:d6:d0:cf:85:02:ab:79:fe:ff:cc:3b:c4:
         db:3b:78:ca:f1:20:af:d2:3e:a4:43:a3:4c:d7:7d:e5:94:d0:
         e4:cf:1f:fb:b6:4c:af:cc:fa:8f:93:2b:1d:c4:9f:76:66:fd:
         08:27:6e:e0:44:2b:2e:64:55:b4:de:57:18:17:ab:ca:65:8e:
         1e:e6:65:65:07:5a:fd:e8:0f:e7:ff:0c:b5:ce:27:9c:93:13:
         4f:1e:93:70:50:66:ca:0a:b2:29:9e:83:d5:85:16:e1:bf:54:
         fc:90:48:33:04:71:97:a8:06:07:f4:a5:df:ad:de:af:6d:86:
         62:e8:f5:21:ff:c6:d7:ef:21:28:4e:58:da:57:a7:55:12:16:
         d5:ed:1c:15:42:50:98:b2:7e:ca:a7:32:af:da:4d:87:f3:80:
         53:41:62:4b:5b:d2:7a:53:3a:ba:fb:f3:e4:6d:fa:ea:23:23:
         a8:97:83:14:58:48:e8:00:7c:e7:45:47:59:65:81:c8:aa:1c:
         79:5b:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:26 2026 by rpki-client