Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft
File:                     5igiDz_QD0F7mXLh1KD2QWlueZk.mft (raw, json)
Hash identifier:          tullnB+/FxisfgUJv7hbFhHvqdC21ufBcu/UyAeoZrQ=
Subject key identifier:   08:92:C1:C3:C4:9F:F7:DD:76:44:30:09:23:F6:10:B8:59:24:D8:54
Authority key identifier: E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99
Certificate issuer:       /CN=A912E31D/serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft
Manifest number:          D9
Signing time:             Fri 17 Apr 2026 06:24:51 +0000
Manifest this update:     Fri 17 Apr 2026 06:24:50 +0000
Manifest next update:     Fri 24 Apr 2026 06:24:50 +0000
Files and hashes:         1: 5igiDz_QD0F7mXLh1KD2QWlueZk.crl (hash: vZWw9PCofb/S0OQITHQGGnlLx24qwiJ43UjWWf+H31U=)
                          2: 9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa (hash: E47slZkZUSxL3blqpxWmejtiKRk74l+RdUUIQ3bo/bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl
                          rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E31D, serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999
        Validity
            Not Before: Apr 17 06:24:50 2026 GMT
            Not After : Apr 24 06:24:50 2026 GMT
        Subject: CN=69e1d233-7c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:86:3d:df:e2:79:0a:25:19:54:6e:12:b6:
                    ba:ec:d7:d1:67:83:6e:c1:db:9f:7a:a3:1b:14:36:
                    45:6a:23:50:fc:71:75:f9:30:8d:d0:4e:c3:96:ba:
                    b0:0c:77:7b:b1:61:a0:a6:f3:eb:9a:e7:a3:aa:83:
                    9d:c3:f9:ef:31:51:3a:69:e1:ef:41:b9:5e:f0:02:
                    f3:3f:7f:9d:77:7d:d8:df:74:4e:12:92:35:ee:a0:
                    fd:4b:ef:8e:25:70:9f:93:1f:a8:4b:9f:86:5c:72:
                    25:35:1e:63:d1:f1:f4:87:04:f7:ad:19:1b:49:26:
                    dd:71:6e:f7:e8:17:53:2c:38:9f:36:18:f4:38:3c:
                    37:3b:e9:ba:64:f8:c5:7b:23:d3:08:95:fd:68:98:
                    0f:d8:8d:74:01:36:d4:f5:1f:28:1a:93:f6:4d:d2:
                    34:4b:0f:fa:4a:11:83:71:b3:cb:49:10:29:32:28:
                    5d:84:2b:9e:57:19:aa:70:0b:f9:d0:88:08:e2:7e:
                    e6:37:08:58:8b:b5:3a:bf:ad:31:9d:b3:17:06:a9:
                    18:ac:40:9b:6f:b5:f4:1d:3f:e8:27:af:ca:3e:ac:
                    d6:c9:4c:52:cf:cc:04:01:8e:33:21:fd:a2:f7:ae:
                    56:28:4e:5a:85:bd:8f:16:a8:22:76:cd:98:ea:c0:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:C1:C3:C4:9F:F7:DD:76:44:30:09:23:F6:10:B8:59:24:D8:54
            X509v3 Authority Key Identifier:
                keyid:E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c1:69:f1:5d:5a:d2:d5:5a:21:a8:fd:7e:b4:cf:8b:64:1d:
         70:1b:d4:ba:56:88:02:4a:0a:ac:d6:e7:96:a1:59:5f:51:fe:
         e1:cf:9b:3b:54:6a:3b:b3:f5:81:c8:29:34:90:de:42:d8:a6:
         27:09:55:01:81:07:17:6f:0a:22:96:e0:79:f6:23:2e:e5:74:
         f9:31:ee:5a:f8:65:a8:b6:86:39:2f:0b:22:c8:41:1b:35:1a:
         52:c7:8d:f4:e6:f4:78:2d:82:40:9c:c5:43:62:7b:ee:1b:e2:
         e7:80:6a:f4:e0:f9:22:7a:37:38:38:72:5d:b7:16:e8:c1:ba:
         03:86:58:1b:0a:5e:21:a3:4f:70:69:b4:b7:5d:5e:4c:ff:d5:
         00:2b:c9:94:ee:0b:04:bd:24:2f:b7:89:cb:12:58:2e:fc:41:
         05:05:a4:88:ba:47:4b:0b:9f:06:ae:cd:a0:86:de:4e:f5:3e:
         3b:e1:93:67:be:fd:41:e9:c7:6f:a9:08:20:a3:ac:98:e7:0c:
         60:ed:c1:da:a8:9e:0f:d2:42:44:58:cf:59:72:cb:07:45:c5:
         9f:81:84:e6:e5:b6:15:10:22:86:e6:b8:39:8a:10:c3:f9:b8:
         e0:36:79:ca:4e:3a:82:48:88:14:c2:05:9a:3e:31:80:f6:72:
         41:43:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:37:15 2026 by rpki-client