Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File:                     9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier:          glaM29Aw+wWyCgXOWDCsE8p9IS4mlru/vWh/L7usDxc=
Subject key identifier:   1A:00:01:5C:40:87:8C:25:E4:82:CB:C4:83:2A:C0:E6:3C:CA:AA:9B
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       029B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number:          028B
Signing time:             Fri 17 Apr 2026 01:35:19 +0000
Manifest this update:     Fri 17 Apr 2026 01:35:19 +0000
Manifest next update:     Fri 24 Apr 2026 01:35:19 +0000
Files and hashes:         1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: q3nyVtFI+Wjer50l50p0KY404qtsTA8GgY0jiF7eGzA=)
                          2: 748DB0E603F711F18E6BFAB3133D8C67.roa (hash: 5yXcCvusSroRDCFFg1R3qeA96L5dbXS1rgIr2rg2kIE=)
                          3: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: YVtrYDGmd8yOfEjEDc3TwfWzgRK6gay3J+4YbDTK/QU=)
                          4: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: h/Anwhdw8hYIXbU00WYyYBTDgfVMK1vj6+wTY2GDHw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Apr 17 01:35:19 2026 GMT
            Not After : Apr 24 01:35:19 2026 GMT
        Subject: CN=69e18e57-6bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:a1:30:5c:4e:b2:88:85:20:5f:e5:c9:1f:
                    de:2c:0d:c4:21:63:75:56:3b:72:80:a5:04:97:31:
                    6a:ff:41:d8:b8:6d:2c:8d:23:a5:8a:05:cd:a7:6d:
                    d3:2b:e0:fd:45:f8:27:05:6b:b9:23:24:a0:01:ef:
                    57:7a:86:bc:31:04:64:3f:ca:b1:33:8b:c6:dc:54:
                    a3:2f:9e:2f:8e:1e:40:2e:a6:d6:73:af:a0:e3:28:
                    ef:0b:1d:50:52:e2:d4:0e:08:cd:b5:40:bf:3c:b2:
                    59:7a:5a:89:43:9b:dd:83:41:ca:8c:4b:aa:77:ca:
                    54:8d:71:a2:c9:ef:ea:6e:e9:1d:31:a3:df:1c:82:
                    49:d1:50:37:9a:88:88:81:f6:86:de:80:5f:3c:c8:
                    d9:66:2c:73:ce:fb:84:7a:53:ce:8c:50:a9:69:38:
                    b0:ee:aa:a9:81:99:b1:26:cf:7b:b5:cc:02:59:3b:
                    30:49:ae:3d:57:b2:57:e9:b0:bd:85:d2:27:f2:7b:
                    7c:b3:d1:af:fd:f1:97:5a:e3:87:92:f5:1e:f4:00:
                    21:db:57:b0:0c:45:e3:6e:fd:0a:67:b0:70:9d:75:
                    61:14:6a:ce:f2:1a:64:71:79:43:5b:fe:83:4c:a4:
                    b7:00:f7:b0:81:1a:79:ab:26:a7:bd:6b:57:ff:3c:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:00:01:5C:40:87:8C:25:E4:82:CB:C4:83:2A:C0:E6:3C:CA:AA:9B
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:0b:df:27:77:b9:5d:32:c5:fc:fc:ce:4c:ef:6c:4b:3a:
         9a:c5:b0:3f:2b:e8:82:08:90:65:2e:c5:f3:52:59:bf:13:35:
         37:9a:cd:d7:04:b6:9a:20:08:8e:6c:4d:0b:4a:cf:a3:e0:76:
         0f:f9:0c:2d:0e:ec:01:4f:d5:e8:70:e0:3a:88:d6:ab:4d:63:
         dd:85:ed:9e:b4:b2:93:fc:6a:84:72:13:59:12:12:9b:6b:02:
         e3:61:7d:75:4c:3f:34:f7:9d:ed:b9:2c:79:1a:fc:c3:13:65:
         a0:c0:94:87:d0:2f:e8:3f:2c:b4:c4:4b:7e:8d:5c:cb:42:03:
         74:06:92:39:7c:ae:71:b0:9a:a7:fa:92:e3:0f:3b:49:c8:6d:
         ca:cc:5e:52:cd:0c:47:d4:fe:55:4c:97:cd:8f:28:c6:1b:ff:
         21:b3:8e:11:d0:f9:27:ef:19:87:21:a2:05:46:14:d8:9f:29:
         a4:62:d6:23:3c:ea:fc:df:ab:1e:74:80:d3:53:9d:88:f2:4d:
         d4:a5:09:a8:bc:a1:f8:c9:44:44:0f:b8:4f:23:ed:4a:ba:f0:
         20:cf:a4:ae:cd:12:8f:8d:e5:18:19:53:b2:bb:c5:ea:68:5d:
         b8:0e:d4:a7:5a:b2:57:cc:8c:66:16:d8:b0:af:48:87:06:9c:
         0c:34:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:12 2026 by rpki-client