Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
File:                     4AJb-TLnFuGh-K-QECEcQRCE_J0.mft (raw, json)
Hash identifier:          C+Gi7VgeML5p9nrNv09xHkw+KRfcpyzjp6PKVMEe5sk=
Subject key identifier:   D4:FE:00:D9:E5:9F:0B:93:65:0B:2A:D2:61:2F:3E:E3:1C:61:F7:0B
Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D
Certificate issuer:       /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
Manifest number:          0630
Signing time:             Thu 16 Apr 2026 22:42:25 +0000
Manifest this update:     Thu 16 Apr 2026 22:42:25 +0000
Manifest next update:     Thu 23 Apr 2026 22:42:25 +0000
Files and hashes:         1: 4AJb-TLnFuGh-K-QECEcQRCE_J0.crl (hash: A4fYDJayreEOO2py5ce4St5JIMiXccqBj8JFRt03MqU=)
                          2: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (hash: cLEGJuuOutpOBPsuC1eSdRC04oAPN6e0TRfgYBt8aGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
        Validity
            Not Before: Apr 16 22:42:25 2026 GMT
            Not After : Apr 23 22:42:25 2026 GMT
        Subject: CN=69e165d1-9eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:17:20:25:51:87:b7:4b:19:cd:ea:dd:d5:
                    39:8a:92:94:58:6c:04:61:66:81:23:dc:98:50:94:
                    6a:8c:26:5d:f7:af:64:b8:77:71:a5:6f:7e:0a:c2:
                    13:24:fb:46:c8:20:37:50:a1:8c:8d:31:6f:be:d1:
                    cc:f0:3e:a2:43:e1:3d:43:45:19:ff:e1:e7:f1:9d:
                    38:f3:5b:63:3d:96:ce:3b:17:3d:b0:33:d8:4c:27:
                    7c:f2:44:52:e5:b7:aa:e6:fc:76:b8:11:7a:54:ee:
                    33:7a:d5:1d:bb:42:55:aa:5e:d1:d6:77:06:e5:24:
                    36:2c:ef:8f:c7:17:d0:ad:ad:6f:77:2b:d9:2f:3f:
                    a0:f5:e0:f8:59:e5:4a:7d:21:a5:49:51:54:c1:6b:
                    00:57:65:33:ad:ae:82:57:b3:f8:dc:40:b6:f9:a4:
                    85:3f:54:6e:65:50:4d:dd:32:5f:0b:6f:0c:2c:f4:
                    77:6d:d3:1a:15:c0:85:2d:c7:d0:b0:a1:2f:51:26:
                    5c:be:f1:f6:47:d0:5f:60:2c:e0:60:3f:f1:b2:c4:
                    9f:32:7b:40:f2:37:b1:3a:5e:7d:df:34:db:8f:f2:
                    ec:d6:59:d7:a8:a0:43:e6:3f:9e:e8:50:5d:e2:ae:
                    34:4b:2e:61:cd:e4:09:f0:98:31:69:bc:06:9a:fe:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:00:D9:E5:9F:0B:93:65:0B:2A:D2:61:2F:3E:E3:1C:61:F7:0B
            X509v3 Authority Key Identifier:
                keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:6e:4b:be:81:dc:9b:c0:d8:c4:d8:c2:16:62:16:77:18:
         46:f7:3f:2d:3c:be:3e:30:8f:f7:b9:c4:88:b5:5a:18:85:2e:
         34:1d:f0:51:73:81:28:7e:64:9e:55:0d:58:89:ea:dd:41:52:
         fd:36:ba:cc:c9:45:72:04:c6:7c:d9:78:17:46:21:80:e9:ae:
         5b:08:be:c4:8a:99:77:23:17:6e:44:e9:4b:81:a6:e2:35:8f:
         23:89:3d:5e:33:99:c4:ea:64:5e:b7:3e:20:93:72:a2:98:e5:
         9e:f5:19:6a:3f:b8:a1:16:f1:67:c4:c9:92:d8:0b:0e:12:ca:
         b1:e7:9b:44:cc:c6:76:3c:26:8f:88:0e:53:d5:3f:68:bb:ba:
         24:6e:c9:cd:a1:67:3f:bb:ec:0f:9d:f4:67:06:2a:16:3c:93:
         a1:cf:a8:b2:1d:25:e2:df:af:58:12:2a:ca:de:f7:31:3a:a0:
         22:40:56:76:d8:7b:47:4e:cf:7d:13:7b:b5:de:77:bd:59:de:
         4c:6f:56:d4:b3:f2:5a:d3:53:96:3a:14:5d:b3:22:4f:ba:4b:
         23:db:7f:1c:74:cc:f9:9e:01:07:11:14:1c:3b:45:79:0c:8f:
         c0:fc:e1:90:f8:30:ee:1a:e6:49:74:0f:df:35:cc:4e:81:c8:
         47:d1:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:20:41 2026 by rpki-client