Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier:          RMaUO73XNPjx26n5Bi9et6O5aAR4eXpgP1Tg0+OZuxM=
Subject key identifier:   56:73:CD:CC:63:17:35:AF:DE:DD:BD:31:22:02:7F:81:77:DF:5D:B4
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number:          01D2
Signing time:             Sun 19 Apr 2026 03:19:58 +0000
Manifest this update:     Sun 19 Apr 2026 03:19:58 +0000
Manifest next update:     Sun 26 Apr 2026 03:19:58 +0000
Files and hashes:         1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: PDiuepqit93rVonfOgt8GgSnDO4w/GFrROH2mRcYU2A=)
                          2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: XdnJ86Ju/TwvVXOQmiqEGcvtwxhflxDC56ut32TAjmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Apr 19 03:19:58 2026 GMT
            Not After : Apr 26 03:19:58 2026 GMT
        Subject: CN=69e449de-610d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:a6:9a:b8:cb:e5:4e:86:6b:be:fb:96:54:
                    6e:4a:7a:10:67:97:d7:f4:7f:61:10:08:57:19:13:
                    7e:fe:7d:c8:c3:93:ad:b1:3b:3a:2d:10:26:4b:6d:
                    8b:7f:9a:34:90:e1:a1:d4:bb:76:e9:a4:76:30:6a:
                    70:3a:0b:f2:78:73:22:8c:64:be:31:2e:23:e2:e8:
                    88:ff:8d:3a:35:2a:ec:57:bd:3d:c5:ef:5f:7f:6c:
                    d8:ae:20:b7:bc:cc:ae:e5:46:61:d8:14:53:e1:09:
                    8d:af:3e:41:96:ae:85:dc:a3:41:97:40:da:af:b2:
                    d0:61:be:0b:e2:93:ee:09:26:b6:55:c1:ef:00:23:
                    6e:3b:1c:0d:5d:86:01:1c:5f:fa:28:a4:ce:0e:08:
                    bc:39:65:b6:df:09:f4:e3:e2:50:ed:56:02:b6:da:
                    1c:9a:cd:8d:15:6d:f7:46:8a:54:53:ad:c2:f4:5b:
                    e0:da:4a:30:4c:69:83:1d:d0:bc:82:bc:30:97:4e:
                    fb:aa:a6:19:36:65:46:02:ac:19:cf:c4:5d:25:96:
                    6b:48:f6:e8:8f:fe:41:bc:80:06:84:06:86:b5:9b:
                    65:5b:11:94:25:be:49:f2:64:f8:85:71:e1:3a:70:
                    14:ca:31:88:2f:ac:e5:f5:5e:94:de:47:db:a8:b5:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:73:CD:CC:63:17:35:AF:DE:DD:BD:31:22:02:7F:81:77:DF:5D:B4
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:c9:4b:fe:0f:20:61:b3:42:e6:72:b9:08:74:52:ff:f4:
         e0:7c:30:ab:37:ae:a9:d9:c8:31:62:9c:49:3c:a4:56:19:6c:
         26:8a:3e:36:fd:c6:1c:6a:11:2b:7c:d7:db:fd:fc:93:e9:14:
         56:ff:5f:a9:14:71:94:2f:4a:f8:45:2e:5a:c0:a0:63:60:9f:
         49:26:ee:81:77:c2:c7:cc:1a:52:1f:54:c3:e8:1a:11:f8:74:
         ef:34:76:a5:3d:80:88:43:74:56:93:39:14:99:b7:51:4e:62:
         c2:77:75:b5:62:80:e3:21:15:49:a7:f3:d6:b2:ba:c5:79:41:
         be:c0:2b:b4:1e:23:ea:59:7e:f3:ed:3f:be:58:53:ae:c5:a2:
         d0:a2:0a:96:ec:ca:86:e5:c1:f1:4a:61:54:6c:91:85:3f:df:
         f2:df:c2:8d:6d:6a:47:f1:b7:f3:36:4a:54:78:3c:00:36:e5:
         15:72:e3:5b:89:81:87:39:2a:87:1b:69:cd:d8:05:9c:b9:f8:
         ea:db:87:fe:54:23:f8:92:5d:95:57:df:d2:6e:7d:70:7b:f6:
         2f:34:b4:35:02:cc:b1:fe:19:b2:0f:c7:b4:65:bb:90:06:fd:
         9f:8a:40:d1:3f:4b:26:44:84:21:f0:fe:3f:eb:24:b2:2c:e3:
         b9:06:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:09 2026 by rpki-client