Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
File:                     s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json)
Hash identifier:          MkADV/JUXjT9YM5z8Vqeus+tYzlxKDBFVnGnRBM0Wo4=
Subject key identifier:   15:7B:60:3D:56:AF:8E:4E:06:1C:67:A7:EA:D0:B7:CC:76:A7:B2:BC
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Certificate issuer:       /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
Manifest number:          0179
Signing time:             Wed 15 Apr 2026 04:19:50 +0000
Manifest this update:     Wed 15 Apr 2026 04:19:50 +0000
Manifest next update:     Wed 22 Apr 2026 04:19:50 +0000
Files and hashes:         1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: JtjBRFOBASK3t6f+9h3y0xzC+csnSPRWgVARQEv/Mm8=)
                          2: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=)
                          3: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
        Validity
            Not Before: Apr 15 04:19:50 2026 GMT
            Not After : Apr 22 04:19:50 2026 GMT
        Subject: CN=69df11e6-8c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:4c:cc:2f:fc:75:a4:4a:dd:2e:fc:3c:9d:
                    39:dd:04:eb:0d:ec:5b:80:f4:ff:6f:c8:1c:cb:0e:
                    5e:99:4d:56:4c:07:68:69:b8:4b:55:d5:c8:be:0f:
                    95:6b:ab:a6:03:5b:3a:64:0b:0a:42:e4:23:08:a5:
                    b8:44:42:35:37:6b:6f:05:06:dd:48:16:bd:79:a8:
                    d9:1b:4f:75:84:40:f7:ed:ef:b3:7e:69:8d:a2:b1:
                    a0:69:e6:39:c5:71:5c:72:ea:bb:15:79:e2:95:7d:
                    6d:9f:d2:77:90:c7:22:1a:b6:ef:bd:68:25:d3:8b:
                    8f:37:b5:67:c2:2d:f3:1e:a6:7d:53:c1:f1:30:4f:
                    e8:7e:1f:02:cf:ae:85:11:f1:24:53:3f:34:a3:37:
                    36:2c:28:19:2b:84:16:9d:bd:0e:4d:4e:73:5d:2e:
                    85:47:1a:6f:a6:db:86:37:22:1c:38:08:eb:6d:6c:
                    37:ca:67:bc:37:45:0f:84:c9:27:8d:3b:5d:ef:1c:
                    50:39:06:fd:22:84:73:36:97:af:e3:69:c9:20:25:
                    43:91:13:5a:7c:31:47:78:6b:0c:bd:c9:f1:23:70:
                    b9:ad:cc:bf:7e:7c:90:72:39:2b:65:3f:3b:7f:c1:
                    46:cd:b1:3a:c6:da:c8:ca:e2:a0:b5:0f:41:97:da:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7B:60:3D:56:AF:8E:4E:06:1C:67:A7:EA:D0:B7:CC:76:A7:B2:BC
            X509v3 Authority Key Identifier:
                keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:99:c8:0d:b6:75:3d:2e:a9:3b:00:fe:67:56:99:bf:d9:
         3d:ef:02:f7:dc:71:67:5f:33:2c:fd:3c:26:33:1d:cf:38:df:
         e4:eb:cc:2a:57:55:c5:54:8d:4f:43:0b:df:73:27:2c:fa:ec:
         ab:20:fc:86:3a:45:64:74:ed:8b:4e:12:27:65:b1:0c:f0:f1:
         e1:7f:08:91:13:e0:7b:60:9b:57:74:de:50:aa:70:57:95:41:
         2c:8f:07:f0:1a:fe:4a:93:c2:1a:d3:87:8a:b3:40:2b:95:49:
         dc:03:fe:a1:d7:3a:3e:2b:91:36:8f:cc:37:93:99:28:5a:78:
         43:c6:3b:0c:49:95:ce:c2:94:ce:41:bd:28:86:ac:b5:c6:0f:
         32:1d:7e:20:22:83:56:59:8d:15:08:88:91:73:6d:13:59:53:
         9f:34:96:d4:1d:9c:02:c7:28:c8:6a:9b:b3:4a:6e:f6:e7:c4:
         1b:47:87:b0:8d:3a:5f:fa:2e:26:19:35:f4:f7:32:bb:5c:f0:
         d7:08:41:be:8f:5b:61:55:1f:48:c0:72:7c:b1:83:75:d7:cb:
         1f:18:66:81:de:dc:1a:64:19:ff:64:0b:c3:8e:35:0e:37:c7:
         40:73:33:5c:c3:3b:a5:c5:cd:e1:f0:39:1d:cf:eb:c1:3f:38:
         96:15:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:15:14 2026 by rpki-client