Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
File:                     _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json)
Hash identifier:          3kUJHFcYT+Eio06E90C5afIBEGShURyTGraWFVwHpSM=
Subject key identifier:   79:07:E8:73:D2:71:34:F9:8E:DD:84:FE:AC:12:3A:43:C5:A2:BF:E5
Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
Certificate issuer:       /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
Certificate serial:       0BBB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
Manifest number:          0BB0
Signing time:             Thu 16 Apr 2026 18:56:16 +0000
Manifest this update:     Thu 16 Apr 2026 18:56:15 +0000
Manifest next update:     Thu 23 Apr 2026 18:56:15 +0000
Files and hashes:         1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: evsEaB6EcBe0S72sfFz9YoY6ipNpgKeeTvnnGFGkqUo=)
                          2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: tgDOCbKwmjyp6bvMW7YcW8XxCX4tWOYG/agYINdY5ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl
                          rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3003 (0xbbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
        Validity
            Not Before: Apr 16 18:56:15 2026 GMT
            Not After : Apr 23 18:56:15 2026 GMT
        Subject: CN=69e130d0-220c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:08:1b:79:f1:91:64:e5:39:4b:63:32:70:
                    93:b5:b9:3c:92:ba:17:04:81:5b:2b:77:59:6b:8e:
                    3e:bb:21:4d:ca:fb:e2:bb:9b:d7:68:b4:4f:a6:c4:
                    75:aa:43:31:21:ad:44:93:16:7b:b3:54:01:f2:18:
                    ca:f3:9a:4a:2c:5a:ae:d6:70:30:8c:11:e5:db:48:
                    6b:76:ad:6b:ac:8a:1b:2e:bc:a5:07:2a:8b:7d:2e:
                    8a:9f:f4:15:e1:12:d8:66:95:66:8d:43:94:e7:7f:
                    4b:0e:34:c5:e7:3b:11:c1:6e:c2:0b:be:5c:a8:71:
                    03:8c:8d:7b:61:0e:41:b9:4d:a0:61:84:e7:a4:5e:
                    f1:ec:4b:e2:e1:9d:98:ef:1d:09:8e:fe:8a:ce:b7:
                    32:c2:65:cf:00:b2:c0:3a:83:fe:af:95:9a:29:ad:
                    97:bd:f7:68:39:42:d7:36:c2:39:06:68:fe:7c:0d:
                    70:fb:7e:64:db:70:ec:79:d7:a5:dc:19:30:cd:c2:
                    5c:c2:30:95:6d:51:0f:9f:b9:06:c3:8c:7c:7a:26:
                    ad:c6:8e:c3:32:a4:d0:f5:50:9f:8f:0c:29:c4:fd:
                    fe:8d:09:de:19:e8:78:20:55:8a:b2:ce:d8:40:07:
                    68:27:85:9b:84:b9:43:48:96:8a:f6:7d:2c:46:05:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:E8:73:D2:71:34:F9:8E:DD:84:FE:AC:12:3A:43:C5:A2:BF:E5
            X509v3 Authority Key Identifier:
                keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:40:4b:1e:a3:42:da:14:6f:be:cc:2e:a1:2a:a3:1a:ea:3a:
         b7:0f:af:48:be:c2:fa:8b:db:eb:da:5f:93:88:65:83:e6:d5:
         7e:cb:d8:52:de:29:51:c6:e7:cc:d0:dc:da:b4:c9:93:c7:60:
         42:bf:6f:68:e9:48:a8:3c:ae:4b:ac:79:2b:19:d2:36:e6:29:
         d9:16:41:cc:01:16:dc:59:fa:b9:98:4f:6e:43:6b:b0:62:74:
         8f:6c:91:fb:9e:34:74:12:16:bb:a0:ed:3c:a4:c8:1b:d5:c6:
         c3:23:81:05:92:89:6f:75:60:ee:fe:0f:34:75:1d:14:c9:ef:
         1f:b1:44:fe:7f:94:0f:52:68:5d:5b:0c:98:17:9e:f7:ce:88:
         bf:fe:90:58:df:a0:14:f4:8f:24:de:4f:2a:5a:d3:9b:c0:bb:
         0d:3a:ec:1b:ee:0b:20:57:38:37:d1:43:35:9c:03:b5:49:8b:
         3e:3d:ac:54:d2:a9:8a:4c:92:cc:8a:ae:16:8b:cd:20:e8:a5:
         44:f0:9c:20:7d:76:9c:c6:44:51:09:ea:62:af:f3:45:bf:73:
         82:96:48:8a:76:39:b7:96:0c:53:a0:d6:ad:b4:cc:38:1e:01:
         bb:f5:51:02:59:32:4d:a6:3d:57:8b:87:da:bf:fd:12:48:ad:
         8a:ef:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:39 2026 by rpki-client