Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File:                     gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier:          MQ5qb0VPQBMNHIDDnejlJVwHqUv8kCmqImyOigVebQA=
Subject key identifier:   B5:5A:7E:A3:A2:B5:5C:81:93:94:B4:22:BF:CE:C8:C6:0C:F8:EB:13
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer:       /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial:       0C92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number:          0C7B
Signing time:             Thu 16 Apr 2026 18:32:07 +0000
Manifest this update:     Thu 16 Apr 2026 18:32:06 +0000
Manifest next update:     Thu 23 Apr 2026 18:32:06 +0000
Files and hashes:         1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: NaPo+s44j+pm8duyNk5qJfpr+A74jp16+p+lehJoI+I=)
                          2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: zOF4QktWpAoJjg+z+k1IG8J7iOxGbLDrjxqR7aiYkLA=)
                          3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: HsO9P79p+Dz9d/F54R7UspGL8AUMT0cv4Reo5e0BZX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
                          rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3218 (0xc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
        Validity
            Not Before: Apr 16 18:32:06 2026 GMT
            Not After : Apr 23 18:32:06 2026 GMT
        Subject: CN=69e12b26-ea8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:ce:01:1d:d0:c1:30:c7:e8:1d:d5:20:60:
                    c6:a6:0c:66:0f:a1:3e:bf:2f:95:1c:60:56:9a:52:
                    ac:0d:88:63:f3:de:21:5e:db:72:4a:2f:8a:49:49:
                    ca:90:f7:58:62:49:48:1a:87:c2:1c:13:79:84:1d:
                    a4:2b:ca:81:b5:35:f8:81:18:7a:00:fb:9d:42:74:
                    55:78:84:35:d0:ee:f8:52:22:72:00:71:d5:8a:ba:
                    29:de:00:78:21:a1:48:c5:b0:aa:3f:97:86:09:d3:
                    24:f1:7f:a3:b4:95:88:7c:fb:1a:35:9c:c5:c2:13:
                    67:21:64:d5:7d:b0:4a:3c:18:65:62:5b:92:14:29:
                    48:7c:21:54:79:80:d4:50:e9:b4:ff:eb:e8:1d:52:
                    f8:2a:35:41:5b:37:8c:44:ef:b8:80:f7:11:16:bf:
                    81:4d:35:f3:21:f5:45:18:dd:f0:b6:83:d4:af:1e:
                    03:e8:dc:fb:04:27:61:0b:0d:19:d5:bc:9c:2c:17:
                    94:09:f3:dc:81:09:07:71:27:4c:8e:fe:9d:a5:34:
                    2f:82:3e:2b:cd:db:2b:47:f5:26:2a:92:ff:5b:b4:
                    7e:61:23:66:99:d9:c3:b5:20:a5:d1:0a:91:0b:70:
                    9d:46:29:89:29:3a:f4:ba:63:7f:c9:9f:0c:44:e5:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5A:7E:A3:A2:B5:5C:81:93:94:B4:22:BF:CE:C8:C6:0C:F8:EB:13
            X509v3 Authority Key Identifier:
                keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:38:f1:0a:51:41:05:95:f4:40:31:b5:60:92:70:2a:ad:
         f1:c8:66:9e:4f:ec:58:1b:5c:3b:25:91:da:e0:a6:89:96:f2:
         cb:21:39:64:79:a7:86:07:04:1f:cf:02:9e:fe:23:4b:ac:36:
         88:80:a3:2a:db:63:f0:b2:1a:f6:34:2b:57:81:8d:6b:94:17:
         79:de:a3:a1:14:46:0b:f9:33:9d:a4:27:61:cb:14:7d:74:f5:
         54:6a:5f:27:5c:33:b1:f3:4a:d2:58:01:e7:ba:80:ca:cb:59:
         b4:57:93:9f:37:a3:25:06:5e:58:1c:1e:00:19:15:40:dd:d1:
         49:c0:28:03:0a:f2:45:6b:8c:51:bd:85:79:6b:28:2e:71:10:
         cc:c0:f2:1d:25:bb:b4:43:44:8e:6d:0b:bd:12:3f:da:e1:e1:
         72:08:c9:85:7b:4e:e5:f3:ec:bf:5f:03:26:3d:c1:55:5d:42:
         f9:ab:3e:46:23:c6:3c:e1:c9:61:00:20:33:ef:cb:da:3b:0f:
         eb:dd:16:43:b8:d3:50:81:90:69:1c:14:b5:81:94:e4:d7:ed:
         db:00:38:e3:f3:69:d3:ab:16:ca:55:6b:95:af:93:c8:3f:ce:
         a5:2c:d7:07:b4:e3:b0:ed:de:ba:33:1b:bb:aa:ac:45:85:15:
         9a:81:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:27 2026 by rpki-client