Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
File:                     -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json)
Hash identifier:          5OGszEKOd+UwAgzOs9AuHYH6zyX/mDDp6rd9Y667Sfo=
Subject key identifier:   D5:E5:02:A2:61:BC:40:EF:BF:32:17:DA:DF:61:9B:27:7D:69:E7:EF
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Certificate issuer:       /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial:       1337
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
Manifest number:          132A
Signing time:             Sat 18 Apr 2026 16:55:24 +0000
Manifest this update:     Sat 18 Apr 2026 16:55:24 +0000
Manifest next update:     Sat 25 Apr 2026 16:55:24 +0000
Files and hashes:         1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: ygKYPk4fAnnT3E4/D2cICtgpw3yv0HHpMJ8w5S4kzAM=)
                          2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: o60MWP+DlNCHL5TPTYVqrO/Lu4kM0QYf6Eyv0LamcPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
                          rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4919 (0x1337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
        Validity
            Not Before: Apr 18 16:55:24 2026 GMT
            Not After : Apr 25 16:55:24 2026 GMT
        Subject: CN=69e3b77c-62b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:0a:25:e8:74:60:05:37:c0:37:1e:2b:a4:
                    47:2c:62:20:ec:2f:43:46:fb:f9:2f:5c:fb:e3:37:
                    43:99:71:0a:58:f7:4d:3e:b4:06:9d:30:5c:21:ed:
                    73:85:b7:95:5c:ee:de:70:c4:16:ba:b7:a2:52:de:
                    ef:72:1e:e3:92:13:68:ac:9f:75:cf:6e:97:63:50:
                    3c:20:08:cc:72:dd:53:4c:b1:45:a8:e3:24:ca:24:
                    17:db:39:da:c8:5d:55:76:b6:76:10:11:49:dd:00:
                    e6:0c:09:19:87:79:85:82:7d:ea:c5:89:a7:f9:7d:
                    3c:55:e4:49:b1:34:82:43:f6:0b:fb:da:b1:d7:89:
                    75:e8:fd:0e:94:19:48:57:05:f8:bc:39:97:61:60:
                    7e:fe:d5:1b:92:dc:a9:a8:6b:74:75:77:34:3c:fe:
                    4c:04:19:a6:49:88:0f:54:8d:a2:24:04:58:24:28:
                    75:d7:be:c5:ab:18:59:6c:aa:48:49:57:c1:5b:48:
                    62:2c:e4:68:55:91:ae:0a:bb:76:5d:6e:7f:b1:d6:
                    38:35:0c:94:f8:b0:a3:35:93:2f:f9:4c:9c:8b:ca:
                    d7:c4:e9:2e:fc:dd:a6:cd:db:f6:15:53:a4:44:96:
                    08:67:9d:0a:d6:39:e5:12:e1:8e:14:9a:b2:61:aa:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E5:02:A2:61:BC:40:EF:BF:32:17:DA:DF:61:9B:27:7D:69:E7:EF
            X509v3 Authority Key Identifier:
                keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:9a:83:d6:8c:1f:28:f6:71:15:99:14:bd:61:08:2c:c5:
         75:84:c3:42:0f:23:70:65:b0:09:61:ed:67:df:00:06:dd:6d:
         27:b5:60:bf:2e:17:f0:1f:43:a0:0b:c4:c7:58:76:dd:ea:0e:
         d4:05:11:35:86:1b:95:36:c4:c6:f6:88:b7:39:21:02:cf:d5:
         67:52:4b:4a:dd:9d:7e:e0:dc:f3:6b:6d:23:8b:76:ea:16:fe:
         fa:3a:f7:33:3e:46:78:ab:d6:74:78:03:1a:60:82:57:65:22:
         68:5f:a8:88:79:6d:72:f9:9b:1b:07:88:39:0c:da:9c:a1:83:
         4a:a5:1a:32:dc:0c:0d:f1:17:5c:3e:62:ae:9e:ed:fb:39:d6:
         80:cd:b1:ff:a4:55:ef:ff:fa:1c:00:8f:3a:fd:07:df:93:2d:
         96:72:77:05:0a:9c:73:a6:32:63:90:33:1d:e9:6e:59:a1:86:
         41:c6:26:bb:b4:fb:d9:a1:b6:4e:8b:82:d4:f7:8d:b0:7c:75:
         76:db:d9:bd:0a:bf:0c:cd:dd:b3:e4:42:f9:c1:12:0c:63:3b:
         fb:c2:e3:0d:de:8d:fb:55:f1:6e:85:2b:a2:f3:fa:fd:32:3f:
         bd:63:83:8a:fb:ea:54:98:97:c7:72:72:3f:f9:f2:fb:e7:fc:
         1b:46:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:02 2026 by rpki-client