Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
File:                     IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json)
Hash identifier:          ZRFD5o+UsiX1lYCSP/w2U8/6nEQ/mXlqnnuPVmpFfSE=
Subject key identifier:   A9:14:90:C5:0F:5C:EA:31:96:76:75:45:F6:07:23:84:38:41:52:57
Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F
Certificate issuer:       /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
Manifest number:          0230
Signing time:             Wed 15 Apr 2026 02:34:52 +0000
Manifest this update:     Wed 15 Apr 2026 02:34:51 +0000
Manifest next update:     Wed 22 Apr 2026 02:34:51 +0000
Files and hashes:         1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: cGG6bEPez3PsnMfpWw75tSOknC7e2lH7uQio2BxR1NU=)
                          2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: VW+45wcSvSFoip2OKN04CIY/5Rv2n17vde5Y8vwKCik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl
                          rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
        Validity
            Not Before: Apr 15 02:34:51 2026 GMT
            Not After : Apr 22 02:34:51 2026 GMT
        Subject: CN=69def94b-3040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:80:7a:d4:d3:4d:2c:fc:84:ad:68:1e:4d:
                    cb:1d:3e:60:55:aa:4a:ae:8f:93:64:4d:2b:7a:aa:
                    2d:6a:a9:7f:8e:13:de:95:5c:d3:99:81:15:75:ad:
                    0e:fb:5f:e7:3e:3b:5c:db:10:ff:3c:1b:46:7e:01:
                    03:5d:00:cd:68:ab:ec:2c:ad:bd:84:3d:a5:e4:d3:
                    d3:f9:80:2f:29:c4:e7:fd:aa:b4:8f:34:f5:42:1f:
                    32:9b:a9:cb:37:73:b6:18:de:c8:ad:8b:fc:62:f6:
                    fd:f0:a3:01:5c:0b:30:ed:e2:be:8d:3c:59:df:7b:
                    0b:1d:0d:ff:0d:98:9e:bb:94:9a:36:da:d7:c5:85:
                    89:93:b4:be:79:24:dd:e3:3e:fc:24:ba:dd:7d:25:
                    8f:6c:1f:ac:8e:b7:90:15:84:4c:69:8a:00:1a:d5:
                    f8:05:e1:d9:05:7c:ac:e6:10:68:98:38:91:d1:7a:
                    51:05:a5:cf:72:42:3a:d8:62:27:73:10:29:3e:4f:
                    47:9e:1e:fc:e0:b5:5e:ae:fa:e0:fc:e5:e3:7f:2f:
                    76:61:c8:68:da:bc:98:ec:5e:5f:82:67:70:da:45:
                    b5:55:a8:0c:60:57:b5:1d:5e:ad:c6:d1:fd:8d:c5:
                    28:d0:02:33:78:29:6d:af:39:5f:c7:14:15:81:8a:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:14:90:C5:0F:5C:EA:31:96:76:75:45:F6:07:23:84:38:41:52:57
            X509v3 Authority Key Identifier:
                keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:54:47:c9:fb:a3:13:15:8a:79:94:f9:bd:5c:40:05:8e:b9:
         34:07:1f:6c:c6:fa:d8:f7:97:11:99:80:91:e2:da:67:49:aa:
         0a:f8:0b:65:58:ae:f8:a1:c6:f7:1c:97:b3:5c:b9:d6:cc:ef:
         ec:8b:18:9f:5b:b2:fc:51:bd:45:04:5c:ce:5a:3d:30:89:94:
         eb:5a:ae:a9:36:81:3c:af:64:97:39:0f:7c:28:7d:52:98:85:
         fa:d5:7d:c5:75:5f:b7:e4:31:b6:07:bb:0d:33:d8:09:ac:9b:
         80:89:86:69:22:04:24:53:5d:12:ce:4a:72:d3:e2:73:47:c1:
         91:c0:2c:dc:60:f0:50:00:2d:d9:26:97:14:1b:a7:9d:cc:c0:
         93:34:9c:97:5d:d9:15:a1:04:02:49:e4:92:01:0e:cf:40:88:
         e7:67:34:7b:2c:bb:75:6b:2b:d0:a6:8b:43:e4:9a:b5:30:f1:
         da:8f:60:86:3a:1b:db:a6:65:a3:ff:b4:36:a9:7d:12:b9:77:
         93:9c:15:42:1e:c0:45:b1:63:f7:47:f0:50:b7:8d:44:c4:6d:
         04:91:b8:fb:3d:1c:2b:f7:0c:93:24:6a:58:3c:f7:a0:a7:aa:
         c5:fd:43:56:50:ef:e8:02:60:eb:06:1a:7f:78:b5:99:1b:5f:
         19:f7:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:46 2026 by rpki-client