Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File:                     -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier:          RS9NU5C4YKUiQGyYuTktpU/2ymmmt8dHDHgDCV4qzSE=
Subject key identifier:   B4:FA:13:85:ED:65:DE:AE:7B:CD:41:1C:48:02:17:AA:82:09:75:F8
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer:       /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial:       05E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number:          05C8
Signing time:             Thu 16 Apr 2026 23:03:09 +0000
Manifest this update:     Thu 16 Apr 2026 23:03:09 +0000
Manifest next update:     Thu 23 Apr 2026 23:03:09 +0000
Files and hashes:         1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: aljXZTZESzW5UgRoKyMrxLvwHSdhs7UoH0Z6AR+obdY=)
                          2: 27023558912A11F09F7D4044C4F9AE02.roa (hash: OMLVMbADMiWDue7ZTRWxAOooyihp025Pd2cOw63qWcY=)
                          3: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: Sn67Wsq1d2oCfy6pDGrSn0YDKV0xfK/wnuR+TWYyUN0=)
                          4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
                          rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
        Validity
            Not Before: Apr 16 23:03:09 2026 GMT
            Not After : Apr 23 23:03:09 2026 GMT
        Subject: CN=69e16aad-30ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:33:93:68:08:58:30:ec:5d:3f:64:3f:66:
                    79:50:6f:bd:d2:e0:80:bb:92:34:79:ab:8f:2a:f4:
                    44:23:37:ab:76:04:d8:f5:51:17:5f:b1:e3:a7:85:
                    53:6d:84:34:36:a6:29:04:99:4f:2f:f5:4f:68:7a:
                    5a:db:8f:dd:3d:96:41:6e:71:99:3e:f8:bb:50:a7:
                    04:93:ba:48:2e:b2:d0:3b:c8:8a:ab:90:06:75:d6:
                    7b:7b:e7:bd:78:7a:71:f4:36:81:7b:33:24:0d:b3:
                    38:68:22:a0:72:e2:2a:1b:2b:41:3a:86:92:0b:55:
                    5e:9f:da:b2:b0:5a:65:87:cc:19:9e:d1:8a:ac:c0:
                    d6:9f:2b:81:25:e7:f7:47:cd:af:c3:f3:3a:b2:07:
                    18:73:7e:43:5c:22:14:94:94:7e:1f:15:7e:e0:4d:
                    9e:76:9c:36:aa:2d:db:58:8c:92:a0:c0:cd:f8:f1:
                    78:15:45:33:8b:51:28:92:80:47:ae:2a:5a:06:b3:
                    59:24:aa:35:5a:a2:00:b5:1b:0b:87:03:79:ef:ae:
                    56:95:dd:dd:e5:0b:37:94:92:3d:dc:45:71:e9:83:
                    2f:76:3b:98:7f:b8:60:25:5b:02:a5:4f:30:6c:f1:
                    6e:ba:2a:01:96:05:b7:8b:5e:ff:84:c0:4b:9f:f7:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FA:13:85:ED:65:DE:AE:7B:CD:41:1C:48:02:17:AA:82:09:75:F8
            X509v3 Authority Key Identifier:
                keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c3:41:58:af:d1:6a:a0:0c:12:65:80:a4:92:a0:64:12:bb:
         c1:3f:7b:87:ea:36:e5:c4:e0:b6:61:e4:29:4e:97:c0:d7:ab:
         f7:43:be:03:d7:5c:da:af:84:de:00:cf:95:c9:44:a3:7a:d7:
         71:69:d7:15:fb:ac:e5:bf:3c:b4:1c:5c:32:ea:7a:ed:2b:23:
         f9:b4:c5:71:02:b6:44:40:7b:4f:9e:71:1c:f4:57:8f:05:59:
         9c:30:59:be:0d:c4:23:15:08:e4:96:8f:1a:64:ea:94:5a:c9:
         94:b1:c9:43:0e:08:e2:c8:b6:a6:5e:3f:f9:21:19:ae:4b:93:
         de:f8:22:e2:9b:8e:09:c4:f8:59:d9:4b:15:34:f4:94:c6:d0:
         ac:6e:10:6e:a6:95:bd:e6:c1:8b:03:9e:d5:26:32:e2:ae:fd:
         c4:7a:17:e5:c3:0b:90:6a:5b:58:8e:b3:d5:1b:56:b0:96:14:
         f6:a3:de:85:95:39:61:23:13:b2:a3:e9:b5:7d:ad:22:72:15:
         07:b2:f2:29:a4:ae:8b:4d:ab:28:26:10:d2:47:14:b0:3d:00:
         50:97:58:43:81:f0:24:b2:02:68:72:a4:37:2f:62:cc:2e:1e:
         0a:db:ec:98:39:46:7a:03:33:81:11:83:2b:be:a7:80:86:44:
         82:da:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:59 2026 by rpki-client