Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
File:                     stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json)
Hash identifier:          9YfD1QsLOMDAVvRBCUkGxSNlYuhaVXLnNsE7sH8iyY4=
Subject key identifier:   A9:8F:B8:72:EC:BC:CC:55:AC:32:19:B7:A3:74:5C:E8:BE:70:51:FC
Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
Certificate issuer:       /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Certificate serial:       03E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
Manifest number:          03D4
Signing time:             Fri 17 Apr 2026 00:29:35 +0000
Manifest this update:     Fri 17 Apr 2026 00:29:35 +0000
Manifest next update:     Fri 24 Apr 2026 00:29:35 +0000
Files and hashes:         1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: 1Z/TewMBW22NxvVrLrDTb/imoDT3EuXXKA7mVftRSeQ=)
                          2: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 59clnCTTqffhtdg3nSmGiWZQyGuiBR09wGUf8GvsiJc=)
                          3: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: vcKD0c092EwQlGRDyBF+m3f7p1gimaLImuv+7uPMwTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
                          rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
        Validity
            Not Before: Apr 17 00:29:35 2026 GMT
            Not After : Apr 24 00:29:35 2026 GMT
        Subject: CN=69e17eef-f351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:6d:11:e7:1c:5a:90:a0:c2:25:13:bc:51:
                    97:fa:4e:77:6a:e8:82:47:a7:a7:4d:5b:f9:7c:3a:
                    e7:c2:45:ae:4b:31:6f:3b:77:e5:36:c2:cc:70:3b:
                    6f:44:e3:61:95:59:d2:9e:6c:46:49:f5:7f:26:c9:
                    5e:15:c5:c0:76:18:26:04:a3:3c:e5:7a:9a:6e:6a:
                    22:aa:2b:d0:a4:12:cc:66:f0:4d:a7:a1:26:08:c3:
                    da:f7:4a:81:77:09:45:79:a3:b6:92:0e:d7:7c:97:
                    58:59:3e:ce:1a:09:32:5d:98:6c:4e:7d:24:11:be:
                    ad:34:98:db:59:e6:71:9f:ef:ee:ff:ad:25:e8:97:
                    10:e6:f4:ae:f2:3b:2d:53:bc:1c:1f:ae:19:f8:52:
                    07:a9:64:27:2b:ea:f7:d6:be:fe:d4:06:d4:4c:cd:
                    52:c1:33:cb:b1:98:41:a3:32:9f:08:58:59:48:2b:
                    05:98:a2:52:79:7a:1e:86:84:7a:3b:9a:c0:7c:60:
                    fc:eb:23:7f:89:c5:dd:41:3d:e9:42:56:f1:35:26:
                    1d:ff:4d:9f:2e:d9:4d:5e:30:32:52:f6:46:58:61:
                    58:a8:07:fa:2e:52:45:e4:30:d7:02:17:f0:76:76:
                    da:90:f8:69:75:46:59:c0:b2:73:46:44:e6:43:15:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:B8:72:EC:BC:CC:55:AC:32:19:B7:A3:74:5C:E8:BE:70:51:FC
            X509v3 Authority Key Identifier:
                keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c3:39:67:41:b3:28:f6:25:37:de:2f:44:61:62:3f:cf:60:
         a2:03:d2:31:f1:d3:3e:0a:aa:64:a5:d5:5f:f0:23:65:17:a1:
         98:53:f1:bb:72:3c:58:5b:d6:d4:ce:74:d5:cb:84:74:14:cc:
         1d:19:8c:ec:ad:22:40:f3:59:27:dc:be:48:33:25:87:8b:60:
         9d:c0:d6:08:5d:aa:08:c6:10:8a:6b:77:3d:1d:e7:7b:8c:fa:
         5c:e4:5f:f0:0b:a3:2d:59:80:24:24:41:c1:ba:5b:fc:bf:43:
         61:8a:bc:dc:0c:37:19:d0:70:ac:e9:97:e3:1d:4c:5c:fd:74:
         9b:ed:67:28:c5:62:ee:da:e0:7a:0a:e2:da:83:39:ab:da:3a:
         a6:49:50:0c:e8:38:67:dd:75:5e:af:04:d8:9b:30:c3:0b:93:
         05:5c:22:2b:42:8c:1f:46:7c:8e:49:1b:a3:01:10:1d:25:26:
         ff:4d:6e:55:b0:3a:f7:0e:bb:c2:59:bc:3c:e4:e0:69:77:1b:
         e6:36:e0:7c:33:11:6d:dd:31:c0:ef:31:3c:e8:73:84:bd:5f:
         df:76:aa:fe:a8:1d:9e:1a:0b:ca:82:6a:a2:e5:20:19:a5:a3:
         b3:54:d1:a6:8b:0f:06:21:d0:05:1c:8d:55:84:01:4f:59:8a:
         5c:0c:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:53 2026 by rpki-client