Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File:                     T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier:          DTplQIAc7/zWv0SSxxp8rBPNPWz51GJ47tx024dySIA=
Subject key identifier:   B4:2F:2E:B6:8B:F6:E9:6C:61:0D:0B:9A:A6:4B:BC:6E:4D:85:4B:49
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer:       /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number:          11
Signing time:             Fri 17 Apr 2026 08:49:16 +0000
Manifest this update:     Fri 17 Apr 2026 08:49:16 +0000
Manifest next update:     Fri 24 Apr 2026 08:49:16 +0000
Files and hashes:         1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: YpWjyNBHpqUrMXQwFsjd5SQ6R6+yhMtl5IMZ8FuWaRs=)
                          2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
                          rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
        Validity
            Not Before: Apr 17 08:49:16 2026 GMT
            Not After : Apr 24 08:49:16 2026 GMT
        Subject: CN=69e1f40c-3a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:01:9a:94:2a:30:d4:6d:3a:84:26:93:2e:
                    45:a1:c0:da:c9:f9:17:d5:0f:a0:97:e6:c8:46:d5:
                    30:36:d7:23:42:b2:1a:c0:57:94:52:a7:95:b7:50:
                    c1:1a:44:34:e7:77:6c:c5:c1:76:c4:16:81:5d:e6:
                    1d:b3:68:c9:09:40:ed:a0:ef:d4:7c:d0:6d:29:19:
                    9a:22:7b:4d:20:29:06:a6:d5:8d:bc:5d:b2:94:fb:
                    68:65:ad:be:7f:8a:0f:6f:1a:3d:d2:0d:ec:97:92:
                    17:df:eb:fb:43:2e:38:2b:a5:e1:21:78:39:c6:4f:
                    0a:6a:9a:8f:16:5a:60:e2:6b:5b:43:8e:38:5b:0f:
                    8a:61:5b:9f:4b:35:2d:4d:e0:06:df:06:e5:6c:15:
                    a8:50:1b:04:56:b7:e0:f5:0a:00:ae:51:4c:01:87:
                    f1:de:e8:fa:e9:13:1c:b1:33:e4:fb:1d:00:38:0e:
                    de:0c:3e:f3:c8:8e:e9:c9:ea:8a:d7:7b:19:17:82:
                    91:e3:a7:80:17:44:b7:00:17:b8:ba:10:5f:16:2f:
                    51:02:df:e1:7d:d4:df:11:cd:f9:5f:60:1f:21:6a:
                    e1:6a:93:40:c2:09:a4:bc:fb:fe:fd:bf:1e:52:a9:
                    52:6f:a4:1a:64:c7:86:35:57:a9:d2:58:72:32:e9:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:2E:B6:8B:F6:E9:6C:61:0D:0B:9A:A6:4B:BC:6E:4D:85:4B:49
            X509v3 Authority Key Identifier:
                keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:a3:c2:44:b1:b7:63:b7:be:48:ab:b3:ed:d4:97:0a:cd:
         a3:8c:6e:b1:df:b1:cc:9e:78:c0:f7:e9:45:4c:23:8d:aa:79:
         c1:97:74:8a:a5:bc:87:b9:c9:95:92:32:b6:0b:e1:12:af:06:
         d9:2d:54:b6:49:db:c5:0d:75:2e:e2:00:79:22:15:02:b4:a1:
         76:8f:36:3a:c9:85:e7:f1:aa:b7:95:a1:55:0b:89:86:1b:00:
         ee:4d:90:0d:6a:73:ae:b7:c1:63:5e:28:bd:0b:c2:25:d2:b4:
         bf:fb:9f:63:da:f4:4e:52:3d:a7:99:d6:40:29:13:f5:42:41:
         95:50:5e:a7:77:99:d4:36:3a:e1:35:f5:c7:6c:1e:8c:9d:9d:
         51:d0:f4:99:b4:d7:82:40:b4:c6:ac:43:07:42:a0:af:05:22:
         7f:44:f0:5f:aa:c6:5b:55:ff:e0:95:43:6e:6a:a9:7c:c1:a1:
         60:94:97:3b:20:0d:28:29:3f:94:0b:a8:b4:16:0a:16:ed:46:
         3b:78:61:de:9b:c0:c5:69:cf:d4:c0:c6:58:10:c1:78:c2:2e:
         6c:bf:3d:06:de:df:4a:53:14:f5:90:6f:15:6e:ef:45:38:a1:
         c1:82:ba:92:7a:4c:64:0a:c4:7a:82:b5:30:10:5e:99:2e:fe:
         3f:e7:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:26 2026 by rpki-client