Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File:                     7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier:          kM2U+TwGmqbxRw5koxOmqrGAMWNwkpmMn+gekDv7EPU=
Subject key identifier:   C8:9C:98:A1:11:95:A5:35:82:73:B3:16:47:0D:D8:88:EF:A6:9B:66
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer:       /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number:          F9
Signing time:             Fri 17 Apr 2026 05:58:15 +0000
Manifest this update:     Fri 17 Apr 2026 05:58:14 +0000
Manifest next update:     Fri 24 Apr 2026 05:58:14 +0000
Files and hashes:         1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: zX5zyVsIK6lDFx2Eyg8TFohPkx+SyB+hzMwEELVSNjY=)
                          2: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
                          3: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
        Validity
            Not Before: Apr 17 05:58:14 2026 GMT
            Not After : Apr 24 05:58:14 2026 GMT
        Subject: CN=69e1cbf7-6271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:c5:30:5c:a4:48:15:fe:8f:0c:90:46:38:
                    5f:f6:3d:0e:fb:60:3a:f6:96:42:8a:e1:08:3d:59:
                    16:71:90:60:b6:ed:9a:a6:45:7f:63:58:34:94:05:
                    b5:7d:e2:82:79:05:9a:27:7f:30:64:6f:fd:05:03:
                    c7:28:f7:59:7f:57:28:ca:68:7d:e8:a0:da:f2:8e:
                    a9:db:de:d9:c9:1d:a9:d7:f1:98:0a:d8:ec:e6:5a:
                    ba:fb:98:66:5b:20:6f:a5:86:72:3a:29:a5:31:26:
                    e2:1d:93:f6:6a:f2:6d:73:0d:83:16:46:42:d5:cd:
                    81:6e:97:23:74:4a:5c:d6:e5:ad:19:47:1a:7a:dd:
                    0f:69:0d:b6:0a:40:56:57:86:5c:ca:5a:04:86:67:
                    34:bf:80:71:a7:cf:14:ad:ec:0b:a8:5c:9a:8b:1b:
                    57:95:70:33:6c:82:a4:4e:d4:87:f9:b7:69:40:74:
                    74:4c:fa:d0:8b:44:b6:1b:a2:11:fc:10:26:0a:9d:
                    0e:b7:75:5e:71:c1:b5:8c:87:4d:e1:18:44:e0:5c:
                    92:b3:ed:9c:25:f1:7c:25:66:b7:88:4d:66:a1:48:
                    78:59:77:63:59:30:60:6f:6b:18:d1:ec:f9:46:35:
                    57:a8:30:d9:8d:7e:d3:b0:e6:56:99:bc:72:ad:8b:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9C:98:A1:11:95:A5:35:82:73:B3:16:47:0D:D8:88:EF:A6:9B:66
            X509v3 Authority Key Identifier:
                keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1c:05:82:8a:ce:f8:07:32:2c:20:67:28:0f:aa:99:f2:56:
         36:13:8d:61:eb:82:4b:f2:0b:6f:eb:cf:a8:4c:9b:65:ef:ea:
         1d:c7:ff:c7:aa:20:36:92:dd:85:07:c0:07:69:52:f3:dc:b4:
         ae:f1:c6:85:90:c0:fb:19:29:b5:2d:91:60:18:04:0d:3b:a2:
         0b:38:e2:18:a3:08:d1:8b:5e:67:5b:be:5c:57:c7:95:4b:4d:
         88:47:2f:c3:58:68:93:62:bb:87:de:26:f0:14:a4:a8:43:a8:
         b0:5d:34:71:ff:4b:7d:7a:83:22:e2:3e:62:8e:d1:58:4b:12:
         94:e7:60:77:0e:de:07:54:f6:ee:74:cb:e6:0c:54:20:da:4e:
         9d:18:c9:99:ea:38:3a:35:85:3a:1b:78:99:39:6d:a3:fd:fc:
         95:dc:2d:60:e6:65:92:84:a6:31:8a:93:e8:9d:bc:1d:9d:ef:
         22:7b:20:51:aa:90:6a:99:5c:2c:dd:03:e0:9e:b9:ef:3a:c3:
         18:bf:46:b1:5c:5a:cd:fe:c3:9a:81:4b:49:f7:6d:3b:86:4a:
         ff:fd:d3:8a:80:aa:31:c4:22:52:46:eb:d6:c5:f5:28:c4:44:
         e0:ab:3c:96:53:8b:cc:7e:b8:c0:e4:2f:09:af:bb:c3:0f:4d:
         c0:b8:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:50 2026 by rpki-client