Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft
File:                     JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json)
Hash identifier:          DnWSA1jTqJBbMFtGtEGCfU+iLu2Jf0X58SkxLp+g72E=
Subject key identifier:   92:D8:10:0E:2D:48:0B:1F:53:60:DA:20:32:9E:CA:A9:DD:A4:B3:84
Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4
Certificate issuer:       /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4
Certificate serial:       179D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft
Manifest number:          178C
Signing time:             Thu 16 Apr 2026 16:32:01 +0000
Manifest this update:     Thu 16 Apr 2026 16:32:00 +0000
Manifest next update:     Thu 23 Apr 2026 16:32:00 +0000
Files and hashes:         1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: Ak6uXjmGiLHKdQW99EvXRRbKVWsOufCrKth4n49F5Rk=)
                          2: C96DCB80D00A11F0BC76FE15C4F9AE02.roa (hash: 9clXsEeVc8Rrec1VecieWHsCO3PFs56kSy/Kdhg94ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl
                          rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6045 (0x179d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4
        Validity
            Not Before: Apr 16 16:32:00 2026 GMT
            Not After : Apr 23 16:32:00 2026 GMT
        Subject: CN=69e10f01-18eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:17:01:6e:58:c7:7a:b2:b0:93:c6:ff:2d:
                    14:9a:ea:9b:3d:49:ef:18:49:45:e1:78:d5:9d:16:
                    c4:b5:cf:e2:94:a7:52:a1:76:41:a8:0c:74:00:dd:
                    bf:ca:45:f6:bd:58:24:97:db:40:40:32:9e:b0:9b:
                    f0:23:a4:d9:ec:a5:8d:3e:bc:5c:e6:26:9f:31:7c:
                    99:e2:6b:5c:e1:de:2f:b9:42:5b:4a:fc:3d:a5:6f:
                    20:70:11:1e:3d:a7:98:15:a0:34:e0:cd:38:fc:c4:
                    3f:e9:f1:2e:dd:df:8a:42:a5:17:43:76:72:28:11:
                    a0:bd:e8:8d:0b:64:f3:2d:8b:bd:48:05:a2:fb:78:
                    38:f8:f0:3b:21:2f:52:de:e8:b8:e2:cf:ab:ec:fb:
                    6b:18:23:a6:aa:14:19:a6:93:f3:a7:37:75:39:90:
                    9d:8c:47:bc:7a:21:9e:91:4f:bb:17:03:19:b7:1f:
                    aa:f1:e0:53:05:10:e9:45:e1:24:3a:6a:16:f5:02:
                    25:ab:17:55:04:d3:5b:d8:bd:78:4c:e2:c9:d4:00:
                    a0:5c:ed:08:03:0a:2c:9d:6c:d8:4e:ca:cf:7a:bd:
                    7d:5a:69:5a:94:a2:d3:fc:3f:ba:50:b4:40:1e:66:
                    df:df:6d:fd:c9:d1:e1:c5:6a:f1:16:03:77:51:82:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:10:0E:2D:48:0B:1F:53:60:DA:20:32:9E:CA:A9:DD:A4:B3:84
            X509v3 Authority Key Identifier:
                keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:24:81:e6:d9:bd:0d:f0:79:24:8e:03:79:93:43:40:d3:35:
         13:cb:0e:6e:0b:5b:66:14:3b:f4:33:44:85:63:54:9a:94:a1:
         fb:d4:3a:4f:94:fc:4c:99:fa:fd:6c:61:3d:11:ba:64:ae:df:
         f4:c5:6f:cd:ae:8e:bd:c9:c6:93:e7:c6:35:6b:e9:84:9c:07:
         13:22:0b:37:ad:58:c2:d2:6c:c5:86:e8:62:b7:81:f6:f9:71:
         67:e1:78:b8:5a:0a:eb:ad:68:ca:fe:4f:64:43:ff:ec:70:3a:
         8e:bb:30:21:58:dd:2c:4b:60:96:c8:26:a3:c8:c4:94:41:de:
         78:98:b6:62:fe:ab:6d:a6:ea:ee:e5:eb:c9:da:e2:b6:75:b8:
         97:7a:6a:97:a8:7f:04:62:1b:3b:5c:bc:5c:2c:b0:02:c8:e8:
         4d:e4:20:6d:f3:ed:a0:a3:f9:ae:69:6a:86:66:5e:08:72:37:
         3b:39:b0:2f:88:cc:9d:79:05:eb:e6:0f:4f:33:e3:a3:4b:3a:
         bc:a3:f7:5d:56:41:ca:2d:87:c7:8c:3f:a1:ab:80:b0:66:4b:
         93:58:a4:ea:9d:b2:70:5b:63:ef:07:80:b8:55:8a:f7:d9:e2:
         71:f7:d3:38:59:db:45:fc:67:19:04:62:8b:53:f8:58:c4:b9:
         ed:ec:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:57 2026 by rpki-client