Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          YY+BTcr/NEDRO/1sKW+MFuSHSUxF/bWsd3eIJ/SU55s=
Subject key identifier:   44:73:49:72:C9:25:EF:3A:94:89:77:71:3E:2F:05:EC:4C:84:7B:94
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          0167
Signing time:             Fri 17 Apr 2026 04:33:04 +0000
Manifest this update:     Fri 17 Apr 2026 04:33:03 +0000
Manifest next update:     Fri 24 Apr 2026 04:33:03 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: g+qx1abwWcXMyKAJUPwQM4VpwZ1TD6S8mlztMrHunNA=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: i6NbV2TnA8xM/XbIbDntVKoMV7cehYHQufnFaA0FyJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
        Validity
            Not Before: Apr 17 04:33:03 2026 GMT
            Not After : Apr 24 04:33:03 2026 GMT
        Subject: CN=69e1b800-9564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:81:26:fa:0f:97:d8:b1:17:5a:68:20:f9:
                    98:e9:d9:aa:db:be:13:10:59:86:a9:92:f7:74:fc:
                    de:72:8d:de:15:ba:f1:be:c1:76:77:4e:f8:df:87:
                    eb:48:f9:00:f4:cb:71:25:f9:39:33:78:01:f3:ef:
                    76:a7:0f:9b:44:e1:5a:c1:30:c5:9c:93:ac:58:86:
                    90:7d:99:fc:a2:5e:05:7b:ed:ee:d9:59:0b:c7:d4:
                    52:c3:c0:a2:0d:8f:0f:f0:4b:72:90:2a:12:1c:63:
                    ec:a1:fb:dd:f7:d3:08:af:0f:b2:d8:0d:2b:29:65:
                    d1:7a:65:8d:8e:5e:72:34:9b:a9:bf:6d:5b:e0:b5:
                    50:75:68:74:7f:95:39:38:e3:53:95:9c:87:e4:42:
                    0b:7d:65:cd:f5:b6:ba:42:b8:9a:a1:bd:47:ac:0a:
                    87:d5:fd:f8:12:5d:75:f9:78:c3:34:1c:34:41:19:
                    26:0d:a6:68:66:9c:d1:cd:71:76:48:50:73:da:a5:
                    24:69:f4:74:bd:c6:09:4e:cf:84:57:6e:6d:2f:64:
                    36:cc:90:3d:6c:a2:e1:4c:63:19:2d:f1:b2:ca:7c:
                    5d:e0:46:fd:1e:06:0e:28:d1:ef:5d:2d:7e:fe:dc:
                    fe:d7:48:90:65:bb:5a:6a:61:2f:68:b4:b5:3f:93:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:49:72:C9:25:EF:3A:94:89:77:71:3E:2F:05:EC:4C:84:7B:94
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:8a:d5:b2:c1:79:bc:d4:9f:b8:49:e8:e2:78:19:ba:82:
         a7:dd:39:82:19:3e:a5:c2:81:ae:09:59:3e:7b:32:45:65:ce:
         5b:e1:d1:57:fe:bd:4f:f1:42:ba:da:41:8c:5e:03:47:ce:51:
         06:9e:ae:7c:0e:7d:83:64:33:f9:cb:c5:fb:7e:b4:15:e6:d7:
         68:c1:c7:9f:05:59:d5:13:e7:c6:5d:27:41:8d:8e:65:4c:16:
         e8:fa:da:51:e6:53:bd:a7:cf:9a:9a:e5:62:e3:75:fe:8d:fd:
         5c:98:41:a6:a7:b0:3f:ef:f7:f0:1c:67:88:9b:9f:08:ae:80:
         bb:72:47:46:97:83:ad:6a:db:e5:4e:38:0f:2a:61:01:41:e1:
         e4:b3:dc:45:20:2e:6e:de:93:e1:81:4f:28:81:6b:ef:a2:9c:
         55:3a:db:a1:1d:2a:82:3d:89:64:5e:a1:3b:5d:15:af:b7:13:
         c9:4f:b3:3c:11:4c:b8:d4:67:a5:57:2c:f3:47:a3:be:6c:8e:
         7b:56:1a:0a:57:ce:33:5a:66:7c:82:64:e8:60:be:48:62:cb:
         b7:78:6e:9c:0d:91:63:f1:30:db:c4:7a:08:88:04:52:a4:78:
         99:36:40:a3:11:53:97:59:fb:db:0e:ab:be:ef:52:72:2d:26:
         dc:5d:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:04:10 2026 by rpki-client