Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File:                     nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier:          kYIK09TMXAzjNI80qprKNPZ+Yan2hLMduAzP9SCYlXs=
Subject key identifier:   39:23:4B:C3:0B:2C:BC:B2:7A:4B:FE:1F:02:57:BD:21:25:26:13:8D
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer:       /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial:       07F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number:          07ED
Signing time:             Thu 16 Apr 2026 21:10:49 +0000
Manifest this update:     Thu 16 Apr 2026 21:10:48 +0000
Manifest next update:     Thu 23 Apr 2026 21:10:48 +0000
Files and hashes:         1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: Ege1acuJGbTukBl6mEclcV8zo4VZnEKbq4cWYr64hDE=)
                          2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: pv+Z3nYrrzxoESGY4e/aJmMCDLaqcQjYTIDQwPuKCpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
                          rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
        Validity
            Not Before: Apr 16 21:10:48 2026 GMT
            Not After : Apr 23 21:10:48 2026 GMT
        Subject: CN=69e15059-deb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:35:0d:06:45:b7:60:c1:8d:a2:cf:f8:18:
                    b2:ab:23:7d:5b:7e:9d:25:6b:7a:14:aa:9d:6b:b6:
                    09:e9:e9:30:a0:74:01:41:46:1a:5a:ed:12:a6:5f:
                    c1:4d:b9:34:45:a4:8b:fb:bd:ab:6d:74:dc:d5:49:
                    95:3d:a6:cd:5c:58:b6:55:ec:36:f3:79:51:03:67:
                    aa:15:59:ac:1e:95:07:8b:8f:f6:17:f3:b6:9f:e7:
                    85:73:a5:c8:0c:a4:84:3a:ba:c1:5d:f7:78:a9:de:
                    08:f9:75:11:4f:46:e2:43:cc:cf:c7:9e:bf:2f:30:
                    4d:f3:50:ac:cd:0d:cd:a0:d9:3b:52:7e:aa:19:bd:
                    98:91:fa:9e:da:ff:33:f9:87:17:f5:46:f5:c2:e2:
                    87:5c:e9:7a:7b:dc:5d:69:37:00:8e:40:2e:14:bf:
                    6a:26:67:73:47:2a:55:c0:62:e1:ed:b0:5a:52:75:
                    e2:f6:11:92:e3:7f:b5:75:37:6e:f0:8e:f2:42:7d:
                    a7:d2:7f:5b:73:33:9b:2f:bb:78:3a:f6:69:53:79:
                    59:50:7b:56:91:71:8d:a3:5b:be:69:e7:35:3b:3a:
                    de:1c:cc:68:af:0b:34:72:bc:07:28:2a:16:7e:5b:
                    f6:38:c1:d6:02:30:d9:19:c0:40:1e:7e:5c:a4:ed:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:4B:C3:0B:2C:BC:B2:7A:4B:FE:1F:02:57:BD:21:25:26:13:8D
            X509v3 Authority Key Identifier:
                keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:af:44:07:38:8c:b7:9d:4e:0b:a4:c4:ea:ce:e6:b7:d6:e2:
         b8:90:a5:ed:5e:1d:d3:6d:21:f4:63:7f:d5:a1:6a:bb:4c:28:
         f2:d8:3e:2e:97:71:08:3c:7f:bc:9f:a5:a8:6f:4a:00:c5:de:
         e5:d2:f9:d5:e0:a3:28:27:a4:c1:2d:71:72:91:0c:0c:1b:1a:
         65:87:e5:c7:bd:5e:bd:a7:76:f7:b1:53:6e:a2:02:33:aa:30:
         bc:be:79:05:aa:dd:e9:8f:c3:c7:f1:a5:9c:58:af:3a:36:53:
         95:c6:bf:18:f6:59:e2:a5:9d:ad:e6:15:d5:97:59:7b:de:f9:
         40:1c:f8:72:e1:c3:8e:1b:70:e7:e9:3f:58:91:49:70:76:dd:
         3f:d3:69:e8:08:87:6a:00:ce:7b:85:a1:94:df:91:aa:f2:c5:
         b6:34:a2:b6:8b:66:63:7b:c1:bc:5c:63:5e:5d:67:35:bf:9c:
         96:d6:de:c4:b9:b5:e7:d8:25:03:d1:a4:68:fb:a2:0d:8f:eb:
         70:09:40:b9:04:1f:7f:6e:0e:3a:0d:0b:76:0d:8a:5b:57:89:
         25:e5:cc:89:1e:df:a0:81:42:f9:10:50:d1:68:b6:06:ef:0e:
         5e:3e:18:5e:98:ef:ef:11:fb:6b:1d:9c:ed:27:b4:43:8f:6b:
         31:c8:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:46 2026 by rpki-client