Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
File:                     kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json)
Hash identifier:          MnAuFr3zoyh0iHOIUsy2JWGAdCS8NYW6FqqkyQTl0sc=
Subject key identifier:   0E:8D:6A:17:51:FA:55:50:D6:1F:99:D1:F4:BE:AC:2C:44:5B:26:B0
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Certificate issuer:       /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
Manifest number:          027C
Signing time:             Fri 17 Apr 2026 01:41:04 +0000
Manifest this update:     Fri 17 Apr 2026 01:41:04 +0000
Manifest next update:     Fri 24 Apr 2026 01:41:04 +0000
Files and hashes:         1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: h1xNa5bGCYA8tEsI5Jq5+D+vJqoLbf6g7vW0ULe9w/0=)
                          2: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 3uTrRG1V9dC0o0IOwmSmMEJhHbML0nSq3yiQY+3J84k=)
                          3: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: sa00jH8bw4HUITlYrffZw+f88KkU69vSq0M65+ZIMYI=)
                          4: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: yctNWWiZhPVXhgLMblmsUERi9o24TYY6zYqQrUfyMsc=)
                          5: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: lyLkwnvPiADGaBvpMXNqGtu0ktHuqEPAoUGEfoeoW7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
                          rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
        Validity
            Not Before: Apr 17 01:41:04 2026 GMT
            Not After : Apr 24 01:41:04 2026 GMT
        Subject: CN=69e18fb0-5892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:40:2b:1b:7b:79:0e:10:72:7a:ee:67:b9:
                    3d:47:00:60:e1:4b:c9:ee:a8:56:37:34:79:17:4f:
                    53:09:66:04:7c:ad:99:b3:05:97:56:ab:16:48:68:
                    33:90:8a:a4:16:a8:98:16:eb:4f:2b:11:90:0e:90:
                    5d:81:60:4f:b9:e3:e3:01:f1:5a:03:a0:ac:f9:fa:
                    46:70:af:aa:b6:08:f2:f3:54:f5:6e:b1:9e:60:cc:
                    b2:a0:15:91:e1:fb:7e:88:4d:cb:f8:64:31:25:34:
                    12:b6:12:58:e7:da:c0:55:82:73:35:d7:15:d9:9f:
                    2f:80:e5:9d:57:6e:6b:96:65:74:48:84:34:5f:a3:
                    c6:11:95:41:36:1d:8b:5e:58:2e:6f:f8:46:94:78:
                    9b:db:a3:e8:07:a4:9d:7f:dd:37:82:f9:e8:b6:ab:
                    ae:3f:68:34:14:43:27:4f:26:41:b8:47:fc:c9:a8:
                    1e:c1:81:a0:62:ec:c5:8d:18:ae:ca:75:aa:dc:de:
                    db:e1:4a:11:46:33:a3:5c:31:43:b8:90:a7:92:56:
                    da:54:71:d4:11:6e:bd:f3:f6:3d:61:65:d6:94:95:
                    54:ce:8e:94:d7:73:34:56:2a:40:87:9b:d3:21:af:
                    3b:17:e2:5e:34:3b:a9:ee:1e:46:e3:78:11:08:95:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8D:6A:17:51:FA:55:50:D6:1F:99:D1:F4:BE:AC:2C:44:5B:26:B0
            X509v3 Authority Key Identifier:
                keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:32:13:a3:8c:af:99:4e:97:b8:91:0d:ca:59:82:44:39:c3:
         eb:45:0b:d3:20:b2:8c:b7:26:c3:47:70:63:13:f1:3c:2e:ed:
         10:90:36:cc:94:b7:58:dd:c0:c3:22:21:45:3e:bd:9b:9d:2c:
         90:a9:a7:2b:2d:8b:c7:b7:50:08:3c:be:ef:c7:95:c2:8b:11:
         55:29:3e:6b:a8:6a:17:b9:cf:09:d4:6b:db:fa:e2:66:ee:62:
         77:4f:2c:73:63:d2:d0:37:6a:cf:cd:8d:d4:c9:6a:60:ae:0d:
         84:3d:93:02:a2:b8:19:af:ce:13:ea:1b:c5:f2:da:ca:1d:8d:
         3c:09:85:db:7a:eb:69:59:2d:55:19:94:dc:8e:18:54:a3:ac:
         f3:65:7a:ee:1e:99:81:8b:05:59:01:ba:66:23:b5:00:04:49:
         76:90:55:cb:df:ef:91:08:10:f3:24:87:68:51:fa:31:97:f9:
         68:71:15:7c:99:6e:53:54:71:02:f7:28:44:14:95:fe:4b:67:
         8d:4f:01:a2:09:b6:88:cb:4e:77:5f:db:07:9d:6b:49:d5:38:
         f4:ce:66:11:3a:bc:1e:03:35:06:40:94:28:1a:b5:3a:c2:58:
         73:ee:81:a0:7e:a2:78:d1:16:03:e5:1c:bc:9b:03:63:35:92:
         5f:20:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:53 2026 by rpki-client