Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
File:                     f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json)
Hash identifier:          VDLsUHviBB9LN31m7/xAQj6XHLER6xVCK7F8p4/s/vU=
Subject key identifier:   72:10:AC:27:61:93:AF:22:CD:74:D7:50:0C:AA:0B:56:F0:8D:7C:9F
Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
Certificate issuer:       /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
Manifest number:          013C
Signing time:             Wed 13 May 2026 05:33:31 +0000
Manifest this update:     Wed 13 May 2026 05:33:30 +0000
Manifest next update:     Wed 20 May 2026 05:33:30 +0000
Files and hashes:         1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: FD8HpZGNtz7b0mwNfiDdoLnfPaaBYjrfGnEZvaA4GfE=)
                          2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: s8ZLRx82qpKC8d+4Ji2PmMxFJJ+eKUDb3t+BPotA2Pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
        Validity
            Not Before: May 13 05:33:30 2026 GMT
            Not After : May 20 05:33:30 2026 GMT
        Subject: CN=6a040d2b-3840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:8b:f1:9c:49:47:7f:a4:11:36:80:6f:f0:
                    75:b6:b4:ee:e1:3f:c3:7a:e5:93:d3:29:71:e0:21:
                    2b:02:95:f4:31:bd:24:99:d8:59:16:82:4c:a2:c8:
                    d8:59:a7:87:66:9b:4d:de:38:77:a9:62:be:33:9a:
                    d2:37:e2:b8:3b:0b:3f:2a:42:93:44:b9:37:3b:d5:
                    a5:5d:21:1e:c9:4a:92:3f:7d:ba:ff:77:19:02:3a:
                    74:18:3c:57:d2:69:f9:76:7f:0d:6c:bf:06:d4:07:
                    3f:51:b5:9b:fe:0a:32:54:2f:8c:0a:0c:94:01:52:
                    f8:d3:1a:8f:1c:64:33:44:94:34:e8:cc:d1:c1:d6:
                    17:32:ea:bd:c9:d7:c2:9b:ac:55:9a:36:57:e3:66:
                    7f:16:d5:31:0d:03:86:57:9a:c3:f7:24:45:ed:15:
                    c9:d5:e1:bf:36:e2:1a:d6:9b:79:67:26:db:a9:0e:
                    eb:08:3b:e4:50:66:c6:ee:2d:58:db:4b:78:8b:48:
                    27:4b:63:6e:16:69:5a:65:0d:f5:bc:da:bf:3d:32:
                    a1:3a:82:ba:d0:c5:b0:9a:9c:5d:0b:82:3f:67:ac:
                    df:28:4b:c4:24:57:0d:0c:64:e8:a2:e0:61:6d:a6:
                    d8:0d:ec:14:f4:4c:c5:46:67:0b:e8:d7:fb:ab:61:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:AC:27:61:93:AF:22:CD:74:D7:50:0C:AA:0B:56:F0:8D:7C:9F
            X509v3 Authority Key Identifier:
                keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:27:c2:71:e4:07:23:3e:5f:9a:5e:6e:21:44:c9:1d:a6:
         f6:f3:35:27:e7:ad:14:f5:23:e8:07:56:90:27:1f:6a:78:43:
         e5:4d:57:35:5c:c1:af:38:1e:9d:4a:1b:d6:18:c3:72:f4:21:
         03:73:aa:e5:02:71:94:ee:2e:8f:79:20:9e:94:39:fc:3d:8d:
         46:b9:ba:b5:87:b8:0c:e3:10:12:5a:f7:c6:82:76:a3:75:61:
         2f:59:bd:81:99:25:5a:30:4f:6d:79:e1:22:b2:82:c6:dc:6c:
         03:e1:a5:88:ae:b5:f9:ae:34:c7:d9:8d:96:25:0b:f2:d9:e5:
         d3:35:03:64:e4:f7:99:61:e3:e2:3f:a2:9b:16:46:61:fa:84:
         ce:f1:5e:8e:7f:05:b1:cd:d2:1c:bb:10:13:85:c6:41:d5:8b:
         49:02:49:e4:02:c9:2d:17:72:a3:a5:a5:bd:6d:92:0b:23:cd:
         3e:a1:0f:88:49:fe:0c:2e:9e:a6:bd:59:d6:06:50:02:e6:0e:
         53:a3:3e:56:da:f3:30:90:f7:ef:7c:65:ef:97:d1:c8:5d:24:
         d6:50:61:1c:e2:9b:b7:fd:5b:e0:8e:8a:25:c0:20:8d:df:8d:
         6d:cf:98:50:5c:88:e6:0e:f5:61:eb:a6:e2:03:3c:b5:18:e3:
         c6:f1:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:28 2026 by rpki-client