Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File:                     I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier:          xBfU9ogx3lN9a4qUvPjmYZUafRtz09sMcNhT0I5xFyU=
Subject key identifier:   5A:4F:FD:45:DD:F0:9E:08:66:65:F5:3E:B6:65:78:D7:DC:30:2F:7C
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer:       /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial:       366E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number:          35E8
Signing time:             Thu 16 Apr 2026 14:59:32 +0000
Manifest this update:     Thu 16 Apr 2026 14:59:31 +0000
Manifest next update:     Thu 23 Apr 2026 14:59:31 +0000
Files and hashes:         1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: 4cnLBV9IZKMrlApeN3FziQNLm+eStDaBXQl4ncH07hU=)
                          2: 7E9AB614268F11F1809EA271B6833773.roa (hash: LfL1qgct7s9A78jWSOYPbYR71D4pCSzR81xKFvr3q4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
                          rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13934 (0x366e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
        Validity
            Not Before: Apr 16 14:59:31 2026 GMT
            Not After : Apr 23 14:59:31 2026 GMT
        Subject: CN=69e0f954-0efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:44:6d:e1:83:5d:2b:26:08:24:75:0f:06:
                    f0:99:89:b8:08:d9:5b:d4:31:48:0c:91:dd:cc:4c:
                    38:ac:7f:a5:2c:54:a2:65:b7:1d:1f:5a:af:a4:9d:
                    3e:b5:53:8f:f5:4d:45:29:17:8a:b0:b6:e3:d1:7c:
                    86:ad:25:bf:c2:02:98:38:2e:84:25:d1:97:11:c3:
                    f1:8a:9c:b1:d5:55:42:4d:3e:f1:bf:c0:bb:06:da:
                    1a:bd:bd:66:5a:e2:e5:ce:3c:c2:1b:7b:b4:fa:bf:
                    1e:e1:d3:74:6c:e4:81:b8:be:64:26:96:86:26:bb:
                    91:7a:2f:16:a4:ee:3e:8c:9e:ed:eb:1c:66:fb:50:
                    75:4e:a8:ed:dc:df:97:89:91:92:9f:fd:df:7b:34:
                    59:90:4c:09:ac:05:89:78:9b:97:8b:9a:6b:1a:09:
                    dc:65:22:ac:2f:c1:36:df:74:f0:fb:d5:8a:41:7e:
                    85:7c:25:30:3e:8b:df:0b:22:62:63:eb:ee:a2:4f:
                    8b:b8:1e:ac:09:cd:49:f0:0d:4b:d9:12:cc:ac:5b:
                    7a:59:b4:f0:20:09:c2:f3:c1:33:24:ad:8e:59:0d:
                    61:d0:db:d5:6a:60:d1:68:93:c4:c6:be:df:0c:c6:
                    4c:7d:c5:83:32:cf:a9:a3:00:23:f2:1e:09:19:e1:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4F:FD:45:DD:F0:9E:08:66:65:F5:3E:B6:65:78:D7:DC:30:2F:7C
            X509v3 Authority Key Identifier:
                keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:18:d9:5a:25:64:49:c5:41:19:34:c2:83:e3:d0:74:33:6d:
         04:eb:7c:4a:fc:a6:15:a4:44:bf:1e:7c:bb:65:5f:e7:f5:79:
         d6:ed:84:77:7a:b7:0f:30:bc:cc:73:44:89:25:68:32:bb:88:
         a1:fa:c9:be:b4:1f:ff:0e:d9:11:61:ab:b3:38:45:d6:cc:bb:
         0f:77:77:3b:11:82:00:6d:e1:24:12:be:23:23:17:f2:d5:d3:
         4f:6d:12:9b:13:5a:4d:cf:5e:88:e5:28:9f:d9:5d:83:20:7d:
         b5:ba:ce:b0:b6:0e:12:78:bd:96:d5:c4:9f:27:7b:91:e4:fe:
         61:c6:a0:1f:e8:3d:85:8d:a6:27:78:de:d8:59:3d:07:78:cd:
         2c:3f:38:83:9c:fc:e0:44:f0:9d:fd:6d:ab:a1:13:b2:ba:37:
         e6:2f:1f:64:29:f9:d5:af:cf:c0:f3:cd:13:56:f4:fb:7e:02:
         0b:9b:fb:b9:14:47:e4:83:4f:10:60:e9:bb:b2:ab:c3:ed:d6:
         08:f2:a8:ec:9f:85:3e:78:e9:94:d9:17:86:d8:2c:43:9a:4d:
         a7:b4:2e:bc:28:03:92:c3:ff:0a:14:f9:ad:6e:b2:a1:42:45:
         50:23:ee:4a:87:58:f5:8e:79:29:5e:9f:5c:2d:62:d1:19:0a:
         bd:08:6c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:01 2026 by rpki-client