Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
File:                     091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json)
Hash identifier:          FbjXoqWgecTAIB4WfglrBvq9pI2jGStwKzEaDP8oK/s=
Subject key identifier:   4D:D4:23:F9:C9:E7:52:0A:74:AA:69:23:57:99:62:E9:FA:6F:EA:17
Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
Certificate issuer:       /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Certificate serial:       0C49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
Manifest number:          0C40
Signing time:             Thu 16 Apr 2026 18:39:41 +0000
Manifest this update:     Thu 16 Apr 2026 18:39:40 +0000
Manifest next update:     Thu 23 Apr 2026 18:39:40 +0000
Files and hashes:         1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: hbcb6TUVLTsKMWh0PdjbRGuYeqaVCtiql8dAwViexFs=)
                          2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: /sfKGHFYsBIuxUCECw5LtfRTpuF1owLyFhhwOm+9Juw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
                          rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
        Validity
            Not Before: Apr 16 18:39:40 2026 GMT
            Not After : Apr 23 18:39:40 2026 GMT
        Subject: CN=69e12cec-7eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:00:23:e2:44:84:1f:04:05:d1:66:40:06:
                    e4:72:a8:82:e6:47:56:c3:b4:e3:c2:36:c2:a6:8a:
                    ac:13:5c:df:20:d1:0b:44:d5:d5:a1:70:7c:78:f8:
                    c6:24:a4:5d:d7:b1:24:e7:f7:ec:7a:a1:da:46:b9:
                    9d:0b:39:9b:54:a5:bb:d0:2f:1c:06:c9:c3:18:b9:
                    d2:02:29:9a:20:2e:28:a6:55:e7:50:3b:8e:a6:04:
                    94:37:68:33:df:87:e6:f9:b4:e6:b3:5c:c5:78:e9:
                    3b:4f:ac:67:b7:c0:60:ca:cc:72:47:7c:5a:33:23:
                    07:94:aa:40:84:8c:46:df:45:f4:c1:5b:a3:1b:9e:
                    39:15:68:97:b2:66:7a:96:c3:e7:63:c2:0c:87:79:
                    11:45:e0:c3:4b:68:4d:a0:24:24:5e:52:e4:38:4b:
                    ce:f6:c5:45:ee:c6:e6:57:c8:6f:86:15:fe:68:fd:
                    79:ee:c3:ff:5d:e3:80:40:38:e6:00:db:45:ec:9f:
                    20:20:37:88:50:a1:31:29:16:62:0f:2f:11:fb:a5:
                    da:3f:e0:d2:ce:00:f3:cd:70:bf:a3:00:51:3a:1e:
                    0a:81:1e:d2:30:9c:5a:da:3c:1b:66:c5:33:da:4d:
                    4d:79:9f:ba:b0:dd:a2:f5:9f:80:05:af:75:ed:48:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:23:F9:C9:E7:52:0A:74:AA:69:23:57:99:62:E9:FA:6F:EA:17
            X509v3 Authority Key Identifier:
                keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:b5:ae:01:5c:84:33:54:aa:ae:04:d7:a3:f5:a8:c6:ce:
         06:d2:53:d1:50:74:53:37:08:2c:86:e2:78:19:87:ec:47:56:
         e1:40:c2:db:c8:83:eb:7e:59:32:ea:58:36:18:88:da:b3:ed:
         2b:00:b3:0e:0f:c3:9b:73:66:8a:d5:4c:e0:fb:a2:ca:45:f2:
         67:5f:d2:28:43:75:78:ad:55:1f:50:ca:33:3e:79:39:77:52:
         58:5d:b7:4d:14:d7:45:d7:c2:ca:69:bd:f2:36:1e:b6:b9:4c:
         19:f5:f6:a2:be:4c:c2:bb:e8:9b:1f:15:66:ad:1e:22:db:ac:
         59:1b:0f:f2:17:5c:3c:9c:00:b9:ec:dc:c8:f7:cb:95:ee:3d:
         78:cb:04:1f:0d:3e:68:5a:7b:87:2a:af:29:bf:1e:2e:da:8c:
         94:8e:6f:a4:7f:00:85:c7:07:86:79:16:9f:d4:e9:de:75:cd:
         e4:53:e6:09:6c:10:aa:0a:c2:b6:f2:a6:a2:31:cd:75:a1:d8:
         f3:fb:70:9c:dd:2d:e6:2a:eb:52:ab:1b:90:1b:ea:0d:0f:ca:
         92:cd:76:01:11:b7:35:46:97:48:30:9e:65:1b:ac:26:7f:85:
         f0:56:db:8e:10:38:ea:c5:52:ac:00:ed:d6:8c:f4:3a:4d:15:
         da:16:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:10 2026 by rpki-client