Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
File:                     p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json)
Hash identifier:          sZUmRnAbMVzUc0z2oHM2uAOzgZYFMY09xhpv69i4m58=
Subject key identifier:   45:F3:67:DF:96:3B:99:F8:A0:34:ED:A6:96:04:02:C1:D2:EA:9D:B1
Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
Certificate issuer:       /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Certificate serial:       0ED9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
Manifest number:          0ECE
Signing time:             Thu 16 Apr 2026 17:35:39 +0000
Manifest this update:     Thu 16 Apr 2026 17:35:39 +0000
Manifest next update:     Thu 23 Apr 2026 17:35:39 +0000
Files and hashes:         1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: b1qbvIDzaRlsr0UFLEgBlxQGKn2E3D8faBp93JwYlpg=)
                          2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: pAr8fA1QmuWGXPOAkIJK91YR32FAAgcJ10JhZIGFapc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
                          rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3801 (0xed9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
        Validity
            Not Before: Apr 16 17:35:39 2026 GMT
            Not After : Apr 23 17:35:39 2026 GMT
        Subject: CN=69e11deb-93ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:7c:af:92:b6:fd:a7:c5:7b:c9:df:5a:6a:
                    ac:96:d8:5c:c1:5b:89:56:77:8c:53:94:d3:4b:ce:
                    2a:4e:1b:36:d8:0f:23:97:40:8f:0c:a8:a9:e3:d1:
                    15:dc:12:0c:b1:aa:d2:02:c4:fb:d7:df:dd:f1:6e:
                    92:0c:b4:0a:11:80:d9:da:f6:18:7b:06:3e:96:b5:
                    3d:cc:b8:d4:d9:3b:11:cb:7d:b9:a1:34:11:4d:c5:
                    02:6e:a7:28:49:f9:c9:5a:7d:1f:21:90:26:ac:d8:
                    07:7c:c5:fc:a9:b7:f3:d2:a5:0e:71:ee:86:e3:e3:
                    15:61:19:90:6d:09:01:45:83:b6:50:c4:9d:5a:ec:
                    c7:63:18:c0:59:d8:f4:a1:c3:64:92:11:b9:ed:84:
                    5e:1e:58:37:0f:33:47:ff:03:49:4c:4c:be:a3:0a:
                    3b:2b:21:e4:4f:32:ce:f3:16:8d:3d:3f:a3:6d:b0:
                    58:95:a9:bb:8c:61:fd:fe:8b:86:05:ab:8b:cd:05:
                    fe:05:89:77:97:1b:26:87:49:6c:e8:cb:86:9d:62:
                    12:48:69:4f:fe:ef:95:6d:15:14:7e:1d:ad:55:0e:
                    ca:b4:17:6a:7d:af:7f:61:41:12:34:03:13:43:d7:
                    24:d9:fb:82:5e:37:3a:d0:ec:6f:5f:10:0b:bb:3a:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:67:DF:96:3B:99:F8:A0:34:ED:A6:96:04:02:C1:D2:EA:9D:B1
            X509v3 Authority Key Identifier:
                keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:41:24:d5:94:e2:8c:55:33:07:65:7c:45:37:39:75:7d:
         17:2b:45:b5:20:05:8c:32:18:b1:1d:eb:a5:c2:58:bb:fc:cf:
         4e:c0:ed:c3:4e:dd:0f:2b:40:23:62:b1:dc:ad:a4:4e:c1:85:
         7d:5f:8b:96:4d:d9:d0:88:44:46:38:a6:0b:5e:c8:49:13:df:
         d2:11:a8:53:c5:2f:f0:55:9c:15:50:8b:85:ee:e3:a4:a2:f4:
         b2:93:7c:96:06:2c:56:df:fc:2e:e6:33:44:42:64:d8:b6:68:
         da:c1:38:48:93:8e:67:94:9f:42:a5:b2:46:bd:54:94:8b:e3:
         56:b8:ab:18:86:86:aa:1d:1a:d3:08:6b:f2:4e:28:05:c1:25:
         68:95:b8:d0:10:3d:c6:43:77:68:84:0d:c6:02:51:de:e7:5f:
         fc:66:88:93:cb:6a:a4:b4:86:df:29:7c:11:cb:ec:44:26:aa:
         20:f3:2b:33:18:38:40:99:a6:6a:fc:18:f5:07:c9:24:fb:1b:
         d2:da:d6:28:fd:8d:1f:ed:88:02:2f:d6:51:cd:42:72:91:fa:
         03:0d:33:80:54:25:26:e6:52:84:85:6b:ed:1e:94:05:a2:8f:
         17:4b:ea:55:a3:84:cd:b0:27:c6:52:69:48:4d:a3:97:6e:40:
         40:a2:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:53 2026 by rpki-client