Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File:                     tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier:          YehSowhkL8UyuTTcqP20GIjZyo0lMjy5uoIorWDjXjs=
Subject key identifier:   EE:D7:C4:BC:49:F7:6C:F4:49:5A:60:A0:F4:59:D6:77:D0:41:BF:C7
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer:       /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number:          01A0
Signing time:             Fri 17 Apr 2026 03:56:43 +0000
Manifest this update:     Fri 17 Apr 2026 03:56:43 +0000
Manifest next update:     Fri 24 Apr 2026 03:56:43 +0000
Files and hashes:         1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: peiDMQ9/OW6t2FxPAP7GLVy+dg87ALlouWuLjqPh3gY=)
                          2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: Lqj3OiAEZ1NUj5c3pIE9yhxwkfOhtjVIBdNf9vQb1eQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
                          rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
        Validity
            Not Before: Apr 17 03:56:43 2026 GMT
            Not After : Apr 24 03:56:43 2026 GMT
        Subject: CN=69e1af7b-9540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:d1:f3:31:87:5d:f8:bc:43:e8:fe:e8:40:
                    07:ce:49:38:6a:6c:3a:2d:ff:56:2b:4b:27:c6:37:
                    ca:20:a7:4b:6f:62:2f:b2:3e:56:26:b6:8a:62:19:
                    70:cb:96:5d:b4:80:ab:f0:d7:0d:e9:24:ff:b2:dd:
                    52:c6:fa:98:7b:94:23:ed:1e:b2:4a:10:ad:7f:4d:
                    5d:e7:60:bc:e8:81:35:87:25:41:7e:21:c6:02:5e:
                    58:a2:98:3a:f8:b2:14:df:d2:e5:8c:80:bb:38:b9:
                    6c:f2:52:31:20:e1:3a:e4:e2:fa:05:f8:e9:a1:f5:
                    03:73:72:39:b9:56:83:04:7b:b8:aa:d7:b7:39:e5:
                    4a:fa:1e:a3:e9:d3:d6:71:da:ff:80:67:75:f1:d1:
                    9b:43:67:27:46:14:e1:e3:77:2b:b1:7b:fc:ae:ab:
                    54:65:74:19:f5:a5:81:4e:dc:78:45:ae:4e:ca:05:
                    0e:86:bd:9c:7e:ef:e3:af:0e:74:c4:93:66:15:c4:
                    74:0e:20:c3:d1:0e:52:f2:17:93:92:8a:d8:bb:88:
                    08:ac:5e:67:73:c4:7e:15:fd:84:b4:c9:d4:0e:c1:
                    9e:fc:df:d7:37:40:2b:70:50:b5:d2:4f:af:2e:df:
                    28:e4:8e:b2:ef:2a:a7:2f:dc:8e:2b:61:50:79:52:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D7:C4:BC:49:F7:6C:F4:49:5A:60:A0:F4:59:D6:77:D0:41:BF:C7
            X509v3 Authority Key Identifier:
                keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:67:98:9e:3b:0a:3f:49:c9:a9:cc:ee:f6:b7:f7:11:17:
         24:0c:ae:65:75:b7:e5:57:5c:7b:00:fe:18:20:d0:d3:64:2b:
         d9:31:43:1e:6f:a2:68:b0:35:a7:a0:73:c1:0f:a9:cc:4f:0c:
         06:33:f9:3b:70:b0:6d:26:5d:02:f0:29:4c:97:65:c0:74:01:
         1b:2f:83:da:5d:df:5f:26:d1:1c:32:8f:29:3d:a5:83:8f:2e:
         4a:6c:ca:26:76:14:17:fd:d2:2a:dc:1c:d6:e6:73:49:67:0b:
         e7:a4:bc:86:07:ce:80:ea:2b:b4:01:6b:f7:ca:e0:f4:44:74:
         44:b7:8d:8c:b2:14:ec:54:80:d8:91:15:c1:41:fb:75:d6:64:
         fa:60:f7:5b:69:28:05:0b:2a:27:7c:05:5c:4c:22:e5:22:7c:
         5c:0b:26:4c:5e:ea:22:d6:a0:dd:55:f8:03:c6:1a:8e:d1:ca:
         0c:61:95:04:42:eb:9b:b3:63:a9:d0:17:0a:ba:a7:5e:2d:70:
         f7:8a:f1:50:ca:ad:24:2e:cf:aa:80:c1:63:09:65:91:a6:ea:
         f4:e4:8f:91:cc:3d:6b:8c:8d:96:36:b1:88:fa:83:f5:0e:26:
         45:d5:ab:c3:80:3d:a0:77:36:89:01:1a:b8:77:45:8a:a8:b7:
         f5:5f:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:53 2026 by rpki-client