Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
File:                     fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json)
Hash identifier:          CYzfqogXMhiaRU7qEwbBKGBg65qTNE0ixe8tSXQdlDk=
Subject key identifier:   F4:BC:88:68:03:B0:1F:77:F9:E5:A5:E5:16:32:5C:86:31:D4:B3:54
Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
Certificate issuer:       /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
Manifest number:          0189
Signing time:             Wed 15 Apr 2026 04:03:19 +0000
Manifest this update:     Wed 15 Apr 2026 04:03:19 +0000
Manifest next update:     Wed 22 Apr 2026 04:03:19 +0000
Files and hashes:         1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: tG8JxpEG+UuBrtRwNAKWvj96+v9f86XBWm0m2GGz1A8=)
                          2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: jCjUHPVQsJaqVu7vufX+mmPVYe7rI/psWHiQFh1SNOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
                          rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
        Validity
            Not Before: Apr 15 04:03:19 2026 GMT
            Not After : Apr 22 04:03:19 2026 GMT
        Subject: CN=69df0e07-4567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:33:30:1e:20:8d:15:c0:65:a1:83:c8:91:
                    c9:a8:e8:84:12:60:0e:f6:3b:75:4b:d7:b3:2f:d0:
                    7c:0d:7b:71:ee:12:49:36:df:f7:42:b8:ae:bf:9e:
                    a4:14:f7:15:9e:78:5d:76:b2:27:5e:a6:81:dd:a9:
                    be:72:f0:72:f7:c2:62:08:cb:19:93:2f:8f:a8:aa:
                    85:92:92:e0:f9:e5:83:9e:d1:9b:f8:0d:e8:32:1e:
                    0a:4c:9e:6c:1a:f8:f7:72:35:82:f3:73:dd:8b:3a:
                    83:af:c6:67:39:f4:11:3e:b8:02:bf:c9:16:e6:d1:
                    cd:1a:5c:06:58:c1:3c:d9:59:57:57:cb:0c:24:66:
                    a3:92:70:b1:ef:61:3e:b7:31:d9:90:78:6b:0a:72:
                    d4:70:be:e5:78:14:0c:71:fe:37:62:82:4b:d5:92:
                    78:71:8d:c9:bb:bd:e7:b7:1f:1a:d0:de:da:20:fe:
                    72:59:39:67:ed:90:3e:52:ae:cc:49:3a:6d:ba:ec:
                    97:df:6e:85:7f:c8:62:92:43:9b:52:c6:54:d5:b8:
                    da:1e:76:f2:84:3a:08:40:9f:f1:2d:1b:d2:79:1b:
                    98:83:3d:5c:35:c6:6d:49:aa:62:58:44:38:ea:c3:
                    c8:99:c9:a2:b0:40:f4:e4:90:db:b4:aa:04:19:c4:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BC:88:68:03:B0:1F:77:F9:E5:A5:E5:16:32:5C:86:31:D4:B3:54
            X509v3 Authority Key Identifier:
                keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:25:02:a5:a0:94:d4:19:21:3f:db:47:ce:57:32:3d:20:c9:
         c1:ee:f0:8b:58:39:f0:23:7a:04:db:0a:5d:00:d7:82:be:ee:
         36:c7:75:25:f5:7b:dc:73:63:51:bc:87:71:c2:81:90:07:be:
         72:12:5b:5f:8a:61:f7:24:f3:51:06:87:e7:65:ae:61:77:62:
         bc:7f:c5:0e:2d:4c:9c:78:b4:3e:4f:3e:d7:b2:03:cd:02:6f:
         f4:d9:84:8f:e1:c3:1c:7d:a1:26:41:11:68:6a:9f:6a:fd:95:
         54:85:a6:77:fc:08:b7:d4:43:26:24:fb:a1:db:58:85:7e:af:
         96:65:d6:65:49:db:5f:8f:8b:23:04:f4:9d:c9:2a:a8:33:cb:
         74:10:3f:8a:77:c1:de:88:22:4c:23:e2:f2:84:24:a4:f6:7a:
         f5:9c:ca:27:23:4e:e4:ea:21:15:85:7a:c1:15:ef:4a:d4:3c:
         40:a6:e3:23:11:a4:9b:29:ff:94:35:c6:47:9c:a4:00:32:2e:
         3a:88:c3:87:9a:bd:58:b5:06:e9:ac:a7:cc:fe:9f:a1:e0:6d:
         b6:7b:26:9f:a0:9b:15:72:79:cd:f7:a2:59:6c:41:03:16:8d:
         ff:22:05:67:f4:01:2f:be:94:15:aa:5c:0d:cb:31:be:62:71:
         af:4f:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:18 2026 by rpki-client