Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
File:                     2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json)
Hash identifier:          D73XrxzSM3xJ4nMiT6SHY+Bm6kScJrcxNof2OPXjfEs=
Subject key identifier:   B1:77:25:7A:88:13:22:89:0A:A5:F7:95:BE:28:A0:6D:1D:3D:E2:BE
Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42
Certificate issuer:       /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
Manifest number:          01C9
Signing time:             Fri 17 Apr 2026 03:32:55 +0000
Manifest this update:     Fri 17 Apr 2026 03:32:54 +0000
Manifest next update:     Fri 24 Apr 2026 03:32:54 +0000
Files and hashes:         1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: bkNsWGAHUy+0L7TKKEfidg+8NpU+PXuv+t1an/Lnif8=)
                          2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl
                          rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
        Validity
            Not Before: Apr 17 03:32:54 2026 GMT
            Not After : Apr 24 03:32:54 2026 GMT
        Subject: CN=69e1a9e7-872c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:be:46:a9:0b:dc:16:18:e6:c0:f5:80:05:
                    a6:cd:3d:f2:7c:30:5c:78:02:5a:b8:70:c9:70:ff:
                    c7:56:09:38:3d:87:4e:77:b6:6d:56:d1:d8:8a:4c:
                    31:9a:80:2a:df:36:d2:28:7c:56:eb:93:59:03:48:
                    70:94:5f:2c:a0:14:76:44:3e:6c:d7:5c:28:c7:da:
                    e6:88:87:65:fd:30:07:b8:02:ef:c5:18:d2:77:aa:
                    59:db:a2:3b:90:83:c2:5a:46:d2:99:3a:98:22:cf:
                    77:bd:ee:e8:a8:94:5a:0a:6e:02:19:f6:a6:8e:c5:
                    e6:96:26:40:e7:60:a5:bc:66:a0:e2:d2:df:fb:bb:
                    35:19:5c:f6:e5:a3:dc:99:b7:91:cd:40:72:4f:68:
                    7f:ed:25:4f:8f:ed:b2:ca:ac:32:91:44:96:4b:96:
                    9b:7c:87:9e:2b:2f:4d:ab:56:b7:2f:97:d2:9d:8b:
                    0e:3f:46:06:d4:8d:8a:b9:dd:a5:24:97:17:d2:6f:
                    17:c5:5b:6e:36:db:3f:56:56:56:27:d0:13:a2:f6:
                    ff:79:8f:f4:41:40:f8:a5:f6:e3:d7:16:bf:17:6d:
                    4b:fc:c3:02:9a:b8:43:bb:5b:58:8d:6b:81:f4:81:
                    cd:f3:b7:dc:37:51:27:13:68:25:84:96:8e:44:82:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:25:7A:88:13:22:89:0A:A5:F7:95:BE:28:A0:6D:1D:3D:E2:BE
            X509v3 Authority Key Identifier:
                keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:01:69:1f:a8:7d:2e:b9:f9:a6:6b:06:b2:57:c5:31:32:55:
         24:0e:89:d6:c5:02:5d:7c:e0:a3:55:a3:7e:fb:0b:46:d2:ea:
         dd:76:fe:19:21:6f:db:36:39:fb:97:d5:a7:51:1c:f9:d8:b9:
         38:17:73:99:0c:da:dc:7c:9b:aa:44:d1:61:fb:bc:11:01:e6:
         08:71:e3:ab:49:30:c6:48:a0:76:fc:0d:48:3f:f1:77:14:e8:
         eb:8a:a8:2d:8d:6f:80:b1:62:32:fc:f0:c4:58:aa:ae:3b:5f:
         d7:8f:20:6a:7c:79:86:e4:35:1b:4b:3d:47:53:0a:1b:fd:3a:
         fd:48:32:39:32:1c:29:d4:38:df:ae:b3:ef:62:68:30:c7:5b:
         16:3a:b2:df:89:76:6b:9e:eb:a8:be:8d:d8:51:e5:9d:23:a7:
         67:99:1e:74:30:55:e9:f0:19:44:6a:12:1e:4c:c4:c5:95:1a:
         a6:5a:20:6c:8c:57:14:90:89:64:f7:fc:5d:2a:13:e8:ee:32:
         43:6c:5f:65:29:67:39:81:ca:4d:c1:bc:7a:f4:89:42:6b:a5:
         32:96:ba:ac:36:be:32:1f:92:fd:3b:9c:4d:c3:3d:bf:6a:77:
         2e:17:00:e8:ab:4a:ff:66:57:3a:24:93:ad:ec:69:1a:88:bb:
         3c:70:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:56 2026 by rpki-client