Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
File:                     C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json)
Hash identifier:          9lpH9DUz1F2QP6WUGxY7C/X/yek6WeepVgW4AunDzPw=
Subject key identifier:   31:6A:89:88:85:71:21:AC:56:3B:A8:B4:7F:E8:12:7E:4B:5A:49:C3
Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
Certificate issuer:       /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
Manifest number:          0882
Signing time:             Thu 16 Apr 2026 20:30:06 +0000
Manifest this update:     Thu 16 Apr 2026 20:30:05 +0000
Manifest next update:     Thu 23 Apr 2026 20:30:05 +0000
Files and hashes:         1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: mhOYNOs0gjGg7EtTo8gaVs/E7g18asyv9iZa5YczH1I=)
                          2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: mVqS9PCmyavpYnot1OnF09z2ZvLVvaBHuBfatk9kJDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
                          rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
        Validity
            Not Before: Apr 16 20:30:05 2026 GMT
            Not After : Apr 23 20:30:05 2026 GMT
        Subject: CN=69e146ce-3d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:fb:36:f7:77:d7:a8:ec:72:c7:5a:04:fe:
                    44:13:ec:b9:9d:a0:dd:40:6f:63:f9:56:95:7d:b7:
                    55:7b:7f:23:16:31:b3:a7:53:2d:21:9f:cc:7e:db:
                    01:58:b0:cc:45:40:90:4e:9e:ce:14:f9:37:b5:26:
                    e5:48:4e:1d:8b:f9:eb:2a:53:c4:6c:50:9f:8e:6d:
                    2c:8d:d6:dc:cf:fc:fe:15:55:61:a4:73:1c:34:81:
                    ae:3c:25:0a:80:5a:91:6a:cd:56:a6:f9:7c:99:c5:
                    7a:8f:d8:11:45:55:c0:8c:53:88:64:fd:9c:14:7b:
                    ab:35:82:1a:a7:43:f9:1a:3e:79:5a:d6:49:d8:92:
                    95:23:d2:d6:05:6b:e3:4a:33:53:08:91:27:ce:67:
                    bb:30:e6:96:90:f4:3a:41:91:74:4b:63:a0:34:1c:
                    8d:c6:7f:cc:b3:d8:74:6f:24:34:13:3a:2e:da:78:
                    2d:e0:3d:90:45:0f:4c:1f:e0:1a:3e:ad:91:ef:ba:
                    7a:71:6c:65:06:38:7b:8c:52:26:f3:87:9d:67:7b:
                    6c:c3:c9:fe:12:f4:01:5a:4b:e9:ec:5e:61:77:6d:
                    9c:9f:25:96:74:dc:2f:f4:78:26:3a:79:7b:81:c9:
                    89:54:a7:81:86:06:09:10:6f:1e:22:5d:80:f8:f9:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6A:89:88:85:71:21:AC:56:3B:A8:B4:7F:E8:12:7E:4B:5A:49:C3
            X509v3 Authority Key Identifier:
                keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:7c:e9:0d:59:97:fd:3a:75:79:b1:d9:30:40:94:c5:68:
         37:c1:7e:4b:f3:3d:98:ae:bb:d7:e3:6f:50:59:0b:a4:b2:ea:
         51:83:ac:2e:9f:30:ab:1a:04:8c:65:c5:98:cf:a9:42:bd:32:
         f7:61:70:39:94:cf:01:0b:63:ee:96:5b:99:9a:bf:8a:cd:0d:
         c3:25:e1:b4:40:eb:0a:cf:dd:8a:df:91:23:85:47:80:5e:d6:
         9a:21:1a:cf:4d:50:ff:30:80:02:cd:da:4d:c1:44:9f:10:e6:
         6c:a8:f0:e2:ad:5c:c7:7c:1a:76:50:eb:22:8a:2c:3f:a5:fb:
         34:2c:df:53:5a:1c:86:75:48:d7:4b:b9:0f:9c:fb:98:61:cc:
         ed:a5:a8:3d:85:6f:12:27:c0:aa:cb:2a:26:ae:63:f9:e7:e7:
         39:44:db:ee:65:5d:b3:eb:f0:b1:3f:a4:c9:c9:55:37:0f:18:
         70:33:3c:af:40:24:13:e0:8e:8f:aa:7d:4d:fb:60:3d:4b:af:
         35:a4:62:7a:c0:df:fd:68:1a:e1:bb:3f:56:7c:4b:83:1a:d4:
         9b:69:e4:b5:81:91:f5:48:18:38:89:81:db:1b:c2:1c:78:0e:
         da:71:22:eb:60:c2:c6:eb:62:b9:71:7a:fa:02:8a:d6:65:d1:
         59:44:22:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:30 2026 by rpki-client