Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File:                     M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier:          zOVTt5CURH9/5vUgv+Vp3bhh7S81e/dYfOA8uUZMuAA=
Subject key identifier:   0C:9F:8D:19:D6:A1:1E:C3:17:11:ED:82:DF:CB:D0:85:82:7B:09:75
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer:       /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number:          0130
Signing time:             Fri 17 Apr 2026 05:14:12 +0000
Manifest this update:     Fri 17 Apr 2026 05:14:11 +0000
Manifest next update:     Fri 24 Apr 2026 05:14:11 +0000
Files and hashes:         1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: sltWreSy3LCEL5cAcFJsZMlMUG6Jp0Xb1SAlfzMFD6k=)
                          2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: SFRW6ZgLtC608yEa/dd47ZCBFLjksB/GM54AXvteWIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
        Validity
            Not Before: Apr 17 05:14:11 2026 GMT
            Not After : Apr 24 05:14:11 2026 GMT
        Subject: CN=69e1c1a3-a7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:60:a3:a9:61:43:96:d6:31:8d:66:7a:f3:
                    c1:13:2b:a3:f3:79:ef:6a:15:45:b5:36:00:0a:7c:
                    76:31:80:db:cf:6a:17:17:62:b0:a3:6f:fc:c2:ae:
                    b2:af:8e:14:f6:71:73:f8:f2:3e:47:07:e4:2e:98:
                    de:c9:40:e6:f4:60:c8:fc:d5:65:46:5c:71:32:15:
                    f5:c5:2e:76:87:e7:c0:1b:d6:0a:2a:9a:80:b5:b5:
                    45:03:7f:30:02:15:db:0f:d4:41:64:ad:fb:3a:eb:
                    37:2a:ff:07:ad:a1:08:87:10:13:c0:ca:a4:38:2b:
                    72:db:8a:b5:f7:f7:4c:cc:90:84:37:71:c7:76:d2:
                    50:73:8a:71:ad:4d:26:32:99:3f:38:d2:a8:00:80:
                    e5:3a:2a:01:cd:09:e9:e8:b3:0b:83:a9:c4:f5:15:
                    04:72:93:dd:5d:2e:a2:b8:84:53:c1:8f:d6:37:dd:
                    f4:2f:87:6e:91:d8:ae:99:24:9d:dd:b5:d0:ed:46:
                    55:b7:a1:8f:9e:16:5e:8c:4a:96:4a:d9:1d:01:03:
                    f9:c3:f7:fd:1f:6f:0a:7b:55:3d:0a:f5:d7:9f:32:
                    fc:2c:5e:e7:cc:d6:35:47:ed:ec:13:99:09:2a:b3:
                    56:2c:e5:f3:a1:ce:1e:24:b4:00:ad:2d:b2:aa:cc:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9F:8D:19:D6:A1:1E:C3:17:11:ED:82:DF:CB:D0:85:82:7B:09:75
            X509v3 Authority Key Identifier:
                keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:63:5a:14:27:03:c6:1e:c5:f1:bf:f7:3d:48:a2:27:86:72:
         87:a6:32:59:57:c3:b0:61:02:71:74:b7:3d:88:8d:24:d5:c5:
         ca:59:7f:1c:44:4f:9f:be:83:65:02:87:46:5c:47:18:df:4b:
         7d:94:8e:1a:c6:8a:f9:68:03:ea:1d:53:c6:ac:6c:78:62:14:
         dc:3e:3f:8c:3e:be:20:23:fb:47:2b:97:2c:cc:3e:2b:18:0c:
         a4:0a:e6:fb:7b:1b:7f:01:36:61:09:f5:fd:c0:a7:eb:46:f9:
         b5:b5:9b:08:99:71:75:90:5e:b3:dd:50:80:3a:7f:d4:59:3e:
         d6:fc:84:fa:42:a3:0b:18:ae:eb:fb:3a:74:ad:06:67:d4:03:
         26:ac:00:96:8f:d4:bb:71:d8:db:09:33:d8:52:d2:1b:95:23:
         eb:db:d5:90:b6:4c:f7:b5:e6:b1:c6:2c:45:89:71:de:aa:21:
         1c:bc:c9:9c:6a:d2:d5:b2:92:c3:21:9a:4b:03:b7:b2:ef:60:
         22:64:a9:66:49:65:92:da:25:4c:b1:03:8f:cd:d8:31:74:4c:
         c5:59:41:15:fa:9f:3e:a9:9f:86:23:f7:eb:85:e4:4b:55:db:
         59:da:6f:f5:65:e9:9c:6b:ad:55:d9:49:f9:31:f6:3a:fa:22:
         fc:e3:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:22 2026 by rpki-client