Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
File:                     9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json)
Hash identifier:          w6Zu+TZr93d7DlQTbVLuzOaX+GfwlxvCSfK2/ViH/Yo=
Subject key identifier:   0A:2A:96:D9:9C:06:42:1A:EC:65:16:41:1A:A5:DB:A2:11:5D:08:FE
Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
Certificate issuer:       /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Certificate serial:       0842
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
Manifest number:          0839
Signing time:             Thu 16 Apr 2026 20:49:00 +0000
Manifest this update:     Thu 16 Apr 2026 20:49:00 +0000
Manifest next update:     Thu 23 Apr 2026 20:49:00 +0000
Files and hashes:         1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: BLvU8wl4GC5eAWUFRHfbg1OC62uZgNppLID3uKK2vgA=)
                          2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: QiYnVEsi/7K9Ji2CODrR010/x13Jz7PV/tzx2JebDQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
                          rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114 (0x842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
        Validity
            Not Before: Apr 16 20:49:00 2026 GMT
            Not After : Apr 23 20:49:00 2026 GMT
        Subject: CN=69e14b3c-c089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:c8:6d:f9:e8:b2:2a:2b:6b:e5:d2:31:07:
                    d0:ad:ea:00:59:11:b4:0a:ad:a4:18:57:e0:5f:f1:
                    fb:77:89:d2:d8:d1:2b:b8:bb:3b:95:b6:5d:75:1b:
                    73:db:96:99:90:37:28:a1:b5:dd:be:b0:d1:f1:30:
                    78:07:a8:06:5f:0d:6c:9c:b3:a7:e9:92:9c:6b:6f:
                    65:34:e9:0e:e6:6b:84:ff:79:93:27:05:7c:75:4c:
                    84:82:9f:5a:55:9f:f5:4f:eb:75:b5:4c:f6:89:09:
                    d4:b1:0c:f2:ef:42:37:3f:2a:73:0a:59:0b:43:f5:
                    60:ab:3f:69:2f:e1:7b:7b:e8:6d:18:55:b6:4f:d7:
                    4b:68:bc:6d:cc:25:df:67:38:08:22:ef:af:1d:b1:
                    2d:b2:bd:37:35:c5:89:35:44:5b:5e:b8:64:51:b7:
                    22:83:94:d3:fb:5d:d8:8b:81:17:0f:f7:30:e9:4a:
                    0c:de:87:e2:ed:a4:45:8e:fb:d5:81:19:66:c9:0d:
                    14:d2:b7:8b:15:a1:b5:12:a6:3f:6d:f7:12:71:b1:
                    fe:92:3e:b0:4c:ad:95:bd:c0:cb:27:fc:9c:f2:9c:
                    a4:46:3b:5f:1e:ab:84:52:7b:66:e1:02:c4:a0:87:
                    66:79:f7:20:0b:91:6a:53:d2:ae:a9:0a:10:cf:ce:
                    75:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:96:D9:9C:06:42:1A:EC:65:16:41:1A:A5:DB:A2:11:5D:08:FE
            X509v3 Authority Key Identifier:
                keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:7a:d6:7c:70:f6:c8:58:4b:b6:48:8e:cc:ff:14:e0:f4:
         c6:7c:a5:c3:50:13:89:19:20:d1:c0:cd:e0:2e:a3:8c:5c:ae:
         23:4a:ef:3d:a4:07:9a:11:d6:67:f3:eb:54:52:92:00:2f:e6:
         f7:c4:98:d1:fb:b9:21:70:f5:c4:28:4e:df:2c:0a:49:48:c4:
         af:ce:d9:ed:fd:1c:66:5c:b5:c2:b7:6c:f9:76:66:13:85:e9:
         84:5b:ee:94:2b:ca:d7:6a:d0:dc:4a:21:da:58:12:af:b2:b5:
         14:8b:35:8e:23:ff:f6:0b:cf:82:e5:92:67:21:1e:67:a4:d4:
         25:b1:1d:27:48:bd:77:33:b2:91:18:8e:6b:21:e4:3c:70:ff:
         63:11:08:4c:42:d9:62:c0:6f:68:19:21:8c:13:49:e9:c4:89:
         76:4c:25:91:af:c5:63:20:53:39:9b:ff:1c:cf:d8:07:03:61:
         8b:95:63:53:9c:d0:4b:96:00:e6:45:60:fb:1b:70:b4:c9:aa:
         ca:4f:7c:98:6d:be:08:36:3c:e0:e2:60:7a:16:58:52:54:a0:
         e2:86:a7:2a:1e:4e:8e:b7:e5:ca:6c:de:43:6a:41:83:f1:3a:
         f1:27:4c:6c:e6:b3:3b:d2:b7:a4:09:8f:0e:fc:b4:b2:be:e9:
         a8:b0:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:49 2026 by rpki-client