Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File:                     d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier:          Gx109m1Wq/Dna44gYkvipXFT6coabGq68aHCj0XO5g8=
Subject key identifier:   C2:4C:3B:9D:41:5D:62:40:B4:F3:03:1F:AC:EC:14:98:CD:E2:89:00
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer:       /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number:          01B4
Signing time:             Thu 16 Apr 2026 22:57:06 +0000
Manifest this update:     Thu 16 Apr 2026 22:57:05 +0000
Manifest next update:     Thu 23 Apr 2026 22:57:05 +0000
Files and hashes:         1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: CDIEsFw3MCJ+9Mn4ZnkISiOJnVaFU1IeZn3v7Hk8wVU=)
                          2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Yv6bUlsD/jxVLpyWhyU1eut2obLAQwxoOOHmIUOMRcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
        Validity
            Not Before: Apr 16 22:57:05 2026 GMT
            Not After : Apr 23 22:57:05 2026 GMT
        Subject: CN=69e16942-cecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:2d:7e:21:d4:96:e9:54:31:a3:6f:91:e3:
                    c2:38:22:12:03:02:74:62:fd:ed:6c:6e:75:ee:08:
                    80:e0:6b:72:80:81:13:99:e0:07:09:88:0e:02:91:
                    35:6f:21:90:e0:ce:a4:04:aa:89:09:40:bf:dc:ba:
                    fb:74:a1:19:89:33:36:fb:74:bd:18:49:9a:18:b8:
                    49:4b:9c:55:97:39:12:15:ce:7e:a3:4e:2f:28:24:
                    a7:f5:66:41:9e:c5:b0:25:39:3d:dd:f8:ce:4d:91:
                    41:4c:02:0d:f3:24:73:17:18:16:b7:8b:5a:d7:2d:
                    cb:b5:17:cf:57:b1:bf:07:ed:35:ff:f4:de:85:5f:
                    13:66:f2:b1:55:e2:42:4a:63:ca:81:3c:2b:85:9c:
                    32:26:b6:b7:e8:e6:fe:df:17:92:d1:2b:f2:49:37:
                    e8:17:62:fa:84:7f:32:30:ab:bb:f7:5e:28:3c:b6:
                    a3:b0:a9:11:31:e0:5a:af:e9:e4:a3:91:b8:24:84:
                    ad:ce:7a:51:d0:5f:62:8f:a2:69:d5:79:48:53:7d:
                    62:13:53:27:71:cd:6a:c1:af:be:82:d9:7c:d5:c0:
                    af:87:22:0b:93:f2:39:be:47:37:66:c0:23:d3:1c:
                    e3:93:2b:b7:39:1d:77:76:f9:91:0b:be:b7:0e:37:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:3B:9D:41:5D:62:40:B4:F3:03:1F:AC:EC:14:98:CD:E2:89:00
            X509v3 Authority Key Identifier:
                keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:35:dd:9f:58:46:d0:2c:5d:43:d0:66:5c:22:7b:d5:61:38:
         f7:e4:94:1b:ce:ad:af:02:c9:fb:7a:dd:7c:fc:a5:7c:f1:e5:
         b2:f6:89:7e:68:22:56:e8:08:24:e7:bd:0e:65:ed:c5:fd:10:
         d8:9d:51:85:65:2a:7e:f2:6e:9e:f8:d0:ed:ed:9d:cd:d4:48:
         0a:f6:d6:80:76:c8:4f:5a:e6:b7:f0:fc:b8:81:7b:51:8f:9f:
         cb:0e:34:2f:80:4e:4f:4a:00:a1:f8:8e:67:79:f5:83:28:1d:
         3d:99:5d:56:19:05:74:d4:0f:8b:ea:d2:9e:55:da:44:c2:97:
         0b:a6:25:82:ad:ed:e4:99:14:e4:2b:4f:ef:3f:31:14:74:5b:
         13:ce:7e:61:e6:df:dd:49:c3:27:0a:65:14:ad:fc:55:c8:99:
         7f:e5:03:54:02:38:1d:6a:97:17:2e:e7:45:96:01:51:67:1b:
         ce:0a:52:d9:d0:b3:0a:11:a2:ff:14:af:38:f8:71:a6:04:ba:
         bc:bf:4d:bd:d4:c5:d4:1f:1b:e8:81:ad:7c:6f:87:0c:9d:2b:
         e4:94:01:35:d8:96:d6:2c:38:fb:a2:99:17:f9:8c:68:15:29:
         d8:8b:c0:86:36:14:e0:72:4b:bd:52:81:c0:c8:58:5d:f3:14:
         6f:fb:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:04 2026 by rpki-client