Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File:                     aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier:          IaVeWv4W9i6R8dqZDkRndWn45EVnSBjlAbnDZmXGIY4=
Subject key identifier:   78:8B:9B:A3:E4:DB:BE:CE:4A:EE:5B:6E:5A:B8:C2:B4:B1:47:7E:57
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer:       /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial:       070D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number:          06FD
Signing time:             Thu 16 Apr 2026 21:58:25 +0000
Manifest this update:     Thu 16 Apr 2026 21:58:25 +0000
Manifest next update:     Thu 23 Apr 2026 21:58:25 +0000
Files and hashes:         1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: oUl+JO8KCauRN3/lxJ3GsQQfwsWfkCgImRAodw6JetU=)
                          2: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: /5wXx4cmTVQVdguvfntlB2W6kj2rZMU7vB1692wCKvA=)
                          3: 8D20F290411811ECA0929516C4F9AE02.roa (hash: fjAS87Fa2KTDfIBPfFBgVc4CwHe6EqcmmF1tEiz37Qc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
                          rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
        Validity
            Not Before: Apr 16 21:58:25 2026 GMT
            Not After : Apr 23 21:58:25 2026 GMT
        Subject: CN=69e15b81-d700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:49:6c:e8:1a:a2:47:e6:ff:2b:f6:79:60:
                    61:be:2a:b9:cc:fa:f0:6c:3d:a5:77:db:a0:ea:26:
                    6e:f2:c2:3e:91:83:13:12:7c:94:24:4e:20:f2:81:
                    eb:58:34:62:05:d2:16:44:8e:e5:73:22:36:f2:2b:
                    65:5f:08:b2:fa:42:4a:70:6f:4e:ba:3f:f7:8f:5d:
                    cb:09:0a:96:73:0c:18:11:2f:a0:f7:61:20:f4:c5:
                    01:c8:a0:11:07:21:62:c3:a2:54:8d:d7:bd:e1:46:
                    b7:de:ab:a5:e3:3f:2c:c2:d9:c9:3b:fd:36:7e:91:
                    eb:b6:d9:48:f3:42:d1:f8:ee:96:d7:f3:30:e0:96:
                    6b:89:c8:36:69:bf:ef:4e:5d:ed:d9:14:9d:9c:63:
                    22:21:5c:4c:52:83:d7:9e:b3:6d:ef:1f:b5:fd:de:
                    f1:de:68:8b:91:d3:e2:75:f6:42:b5:01:1e:5c:33:
                    cb:ae:28:b4:9c:92:4e:ba:77:84:97:ae:79:bb:f4:
                    e3:4e:61:60:f7:7f:00:93:64:53:7a:fa:3e:fc:b6:
                    86:b2:1f:39:09:73:10:2b:cd:5a:fc:a1:4c:8e:e7:
                    f2:10:8c:0d:10:30:0f:5b:b5:f5:84:61:ab:d3:aa:
                    0a:43:56:28:85:6b:94:73:5e:f3:80:65:e5:62:70:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:9B:A3:E4:DB:BE:CE:4A:EE:5B:6E:5A:B8:C2:B4:B1:47:7E:57
            X509v3 Authority Key Identifier:
                keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:9d:a3:60:23:a2:08:e9:6c:de:27:fc:ae:86:f9:7a:c8:
         44:f6:33:51:94:e8:15:c2:65:16:4b:66:65:60:eb:0f:e5:46:
         0d:20:8c:ba:a7:ce:8b:ad:9d:6e:92:84:ff:95:20:28:a1:12:
         03:e8:c6:f6:eb:47:d6:45:ae:9f:fc:34:77:b1:58:dd:6b:80:
         c4:00:86:ec:a9:d1:b3:98:b5:e0:6a:e5:e6:93:63:64:6f:0a:
         54:dd:9c:4c:21:70:0e:8f:21:4d:87:a3:9b:46:b3:3c:69:bd:
         35:c8:99:c6:5a:63:91:02:70:59:39:f4:3a:d4:1e:f6:30:1a:
         fd:b5:92:2d:c6:60:76:1e:79:86:42:72:95:2b:70:f8:b9:72:
         34:e3:60:ae:6f:3e:78:6d:3c:24:b1:97:88:17:74:38:68:ad:
         13:94:14:7f:ff:02:34:59:03:f2:3e:0a:65:9e:3f:f1:a2:26:
         e8:2c:a3:06:e1:6f:c8:5a:02:0e:dd:19:64:17:ac:5c:29:7b:
         0e:f6:ac:81:68:b1:32:ed:44:c6:78:36:c3:99:f7:f4:ca:ee:
         4a:c8:1b:8f:dd:21:04:9c:c2:72:8e:7f:51:3d:15:3b:b6:c0:
         81:21:36:6b:5f:17:17:69:20:45:42:7b:ae:0a:99:96:30:12:
         ee:c7:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:49 2026 by rpki-client