Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
File:                     9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json)
Hash identifier:          0hnpp5b5ut6z8/zEebUHgFT49ddFfRFNjCzBQy3QMGk=
Subject key identifier:   2B:9C:99:7C:03:F7:50:5B:EB:5D:FD:C8:87:D4:B0:8D:30:9F:18:2F
Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
Certificate issuer:       /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Certificate serial:       0CFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
Manifest number:          0CF1
Signing time:             Thu 16 Apr 2026 18:10:43 +0000
Manifest this update:     Thu 16 Apr 2026 18:10:42 +0000
Manifest next update:     Thu 23 Apr 2026 18:10:42 +0000
Files and hashes:         1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: +ud3EePscPjR7nH7HPM8E7zPnB6MreD7/G3rwqlnZeg=)
                          2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: 3NtaFMmRSGiQ779f2aTB3zcvMfuQOTWoqKAG2Y4TQQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
                          rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3326 (0xcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
        Validity
            Not Before: Apr 16 18:10:42 2026 GMT
            Not After : Apr 23 18:10:42 2026 GMT
        Subject: CN=69e12623-3bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:4b:54:34:43:6f:c8:e9:e2:1f:ea:90:97:
                    42:d7:16:9a:1b:5a:86:fe:4c:e8:3a:32:31:ae:cd:
                    cd:f8:26:35:b1:b9:79:e2:c5:ea:75:d2:8e:80:69:
                    ed:5f:37:c6:5c:b2:49:64:1e:b7:ad:5d:38:c4:ed:
                    40:0d:52:a9:48:5f:18:b7:71:02:57:3e:7c:59:75:
                    6f:31:bd:67:10:18:f6:66:8b:1d:2c:13:34:75:44:
                    75:52:f7:b1:9c:72:76:f3:d9:d8:ab:72:05:82:7b:
                    5a:66:6a:c2:83:dd:1f:27:0c:fc:b9:17:32:f2:ab:
                    e4:9e:2f:8e:97:b4:ac:df:c2:63:98:74:08:4f:a3:
                    23:68:6f:74:e9:33:86:f4:04:89:6c:49:37:6f:0e:
                    98:77:f6:c4:62:ac:8f:c9:66:fe:7e:f9:d5:63:bc:
                    8b:14:d6:97:7f:cc:3d:7b:04:f0:3c:48:ed:ae:67:
                    4d:98:c3:65:d6:05:54:d0:c2:93:66:42:65:b2:43:
                    72:7e:d9:e2:22:46:a1:38:ea:89:4b:7f:c6:44:c4:
                    6f:7e:96:c1:26:fa:16:26:73:64:39:3d:38:d9:9d:
                    eb:a5:6a:13:72:78:3f:06:bf:3c:3a:ba:bb:8b:f2:
                    b8:fa:0c:79:59:05:6c:04:b1:78:3d:6f:53:73:3c:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9C:99:7C:03:F7:50:5B:EB:5D:FD:C8:87:D4:B0:8D:30:9F:18:2F
            X509v3 Authority Key Identifier:
                keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:14:ea:51:46:6f:98:62:9f:92:37:32:f0:fd:db:9b:1b:b8:
         cd:ab:4b:c3:1e:83:90:b8:19:a7:fe:b6:81:7b:35:41:9d:c8:
         91:61:10:d7:73:b7:ba:30:5d:78:f7:27:b8:4a:64:d0:e0:a3:
         c1:1e:70:28:84:10:e1:3b:be:61:7a:31:87:88:e6:e3:bb:c3:
         d0:4d:8d:8f:75:e5:5a:65:e2:0b:19:62:b9:f7:7a:08:de:96:
         59:03:c4:cf:76:66:5a:ee:b5:8a:07:f7:25:b0:fe:07:9c:8c:
         44:ca:a2:a5:b2:0f:1b:b7:0e:b8:a1:0d:78:62:f4:42:97:03:
         9e:3f:b3:bc:eb:ff:30:b3:ee:86:92:67:f2:3b:8f:bd:8a:36:
         bc:0d:7f:3a:9d:5d:de:e6:73:5a:c1:05:37:6b:89:50:6a:6e:
         4e:7c:1c:bf:cc:08:cf:fc:3a:88:05:79:45:6f:c5:bd:39:8c:
         b3:1e:d9:76:b0:48:83:08:94:bd:4f:fe:f8:a3:43:45:f6:f5:
         fa:b9:32:74:a6:6d:e6:86:de:f6:49:63:ae:9a:b9:ad:10:93:
         f1:51:ce:f2:04:e0:d0:51:b2:49:18:bd:80:f4:85:02:50:37:
         00:fa:f6:f1:88:ba:ea:f2:c3:ff:d8:82:50:9b:e6:9a:7a:bc:
         26:67:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:35 2026 by rpki-client