Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File:                     mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier:          bEuFYVDr7BUuuRkLU9iGu3VKo9FESAx9rfPRKGHHmNE=
Subject key identifier:   6D:44:34:FA:3B:3D:A2:D9:6B:C6:4B:27:0F:D8:48:09:70:BC:9E:67
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       035E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number:          0357
Signing time:             Fri 17 Apr 2026 00:49:34 +0000
Manifest this update:     Fri 17 Apr 2026 00:49:34 +0000
Manifest next update:     Fri 24 Apr 2026 00:49:34 +0000
Files and hashes:         1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: ftPapM2rik+TkdtOXxoDEcOf0EUakFCN8hucjRoGwNc=)
                          2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: +35QxxMyIjCMr8iV27/aV6sabG1DfHlXwGU/67Kw18Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
                          rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: Apr 17 00:49:34 2026 GMT
            Not After : Apr 24 00:49:34 2026 GMT
        Subject: CN=69e1839e-e250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:bc:3a:3a:bf:c3:7c:8d:bf:37:a7:68:24:
                    39:f3:b1:ce:2d:4a:79:3f:79:c4:d4:3f:29:8f:7d:
                    66:fa:de:29:36:71:ba:d2:c5:f4:55:54:03:4f:a4:
                    e2:21:fe:7d:f5:98:33:f8:64:a1:52:f8:82:1c:7d:
                    b1:f7:5c:71:82:fa:5e:aa:68:bc:7e:61:89:7f:90:
                    4c:6f:98:36:a7:98:c7:81:d2:f2:af:51:7d:aa:0a:
                    5a:91:6a:15:ec:f6:ab:f7:a8:2f:88:38:e4:d3:d2:
                    3b:fb:68:8f:b0:ee:50:f6:1d:09:25:99:e8:86:db:
                    fa:8b:5f:c1:b9:6a:68:9f:e6:e7:29:57:d7:03:7a:
                    40:38:ec:af:b3:1a:5f:c8:94:76:76:a6:79:f1:e0:
                    e0:34:9e:8e:58:cc:c3:ae:7c:e4:2a:f5:14:c8:21:
                    3f:90:ed:b2:0d:25:f2:33:39:0b:df:c1:9a:97:f1:
                    c6:9a:b3:5a:32:21:ba:75:95:7e:fc:a0:2a:8b:1a:
                    03:e3:d9:18:f9:b9:9d:ce:5f:2a:0a:eb:68:74:20:
                    ae:6f:d0:98:0c:bf:3a:11:2a:86:84:7a:61:05:cc:
                    32:4d:15:13:92:80:1f:11:3b:65:18:1f:8b:de:de:
                    1b:f0:19:39:52:bc:b6:77:c1:bc:97:a8:8f:50:85:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:44:34:FA:3B:3D:A2:D9:6B:C6:4B:27:0F:D8:48:09:70:BC:9E:67
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:a2:d6:67:3e:95:e6:85:6d:52:f5:16:e5:8c:ca:9f:3a:
         57:44:b4:7f:d3:18:29:e9:76:d3:55:a5:7f:84:67:34:3c:52:
         b5:ee:a1:42:92:2f:62:d3:fa:80:d0:f8:b7:4b:d7:72:03:03:
         4f:b2:1a:ed:77:70:17:42:83:17:3e:c5:d2:f7:84:4c:96:7f:
         6c:b4:01:88:0a:8e:16:df:e2:65:a1:50:8f:2e:f8:7d:a6:b0:
         cf:2e:06:b1:4d:bb:f2:51:5b:01:ff:8d:ce:5c:d1:ed:46:02:
         2e:a1:02:7f:91:4a:d9:5e:7e:9a:6f:22:ff:83:b2:c2:61:7b:
         70:8f:d4:62:45:a8:77:88:d6:a9:01:ba:af:87:2b:72:bd:7e:
         37:ae:6f:52:cd:7f:64:b3:f2:88:39:f8:12:66:81:3f:10:e1:
         d9:c1:3c:ba:8e:0f:15:22:7f:92:48:fb:9c:5a:a7:12:f8:f6:
         0d:ee:cf:bf:33:3b:1c:59:ed:4e:c2:50:55:84:4f:c4:d1:01:
         8f:42:fc:d5:28:3a:96:d0:bb:75:a3:bc:5e:8c:28:52:c9:4a:
         f6:d4:2f:00:54:fa:42:b2:60:a2:a3:db:58:a6:6b:07:a7:1a:
         38:20:f0:04:4d:ad:9b:88:d6:72:f5:74:eb:d6:15:fb:e1:30:
         e1:bb:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:45 2026 by rpki-client