Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
File:                     Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json)
Hash identifier:          VWZnKV6ss2as8zNzc507uVKxBFY/VUgvx0X7Mhurh24=
Subject key identifier:   FC:0A:29:50:A5:E4:E3:A2:B8:0C:1F:FE:04:50:9C:3A:C3:C5:8D:3E
Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
Certificate issuer:       /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
Manifest number:          0197
Signing time:             Fri 17 Apr 2026 04:04:08 +0000
Manifest this update:     Fri 17 Apr 2026 04:04:08 +0000
Manifest next update:     Fri 24 Apr 2026 04:04:08 +0000
Files and hashes:         1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: r4tOW91numwSTAt6EM6V0u1IBLAUV6PQoKITgc75qxg=)
                          2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: OT0428JvC1+upD3r1Q6wreYkovP29Wg2j9MuCZqS4DU=)
                          3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: vuF5k1NsD6Od4bFMuffyNgPZt3phl7DtSt9MwFSK4mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
                          rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
        Validity
            Not Before: Apr 17 04:04:08 2026 GMT
            Not After : Apr 24 04:04:08 2026 GMT
        Subject: CN=69e1b138-52b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:ce:5c:a6:56:c7:79:09:82:53:8c:81:d1:
                    9f:d2:2e:3f:52:96:d8:49:4f:8f:4f:65:98:1b:d7:
                    17:1e:af:ba:c4:ae:40:6b:97:ef:20:34:bd:54:32:
                    08:45:c6:cc:73:c0:3a:c2:32:9b:62:61:7c:c1:c8:
                    59:35:8a:d8:f6:84:7c:8e:6d:bc:21:0e:81:9d:ff:
                    81:92:a9:c8:f2:33:d1:ea:8c:bc:36:5e:38:45:76:
                    1d:b7:fd:24:e5:a2:97:6a:44:c3:f8:b6:a8:40:dc:
                    70:4f:fc:e8:15:d0:e3:03:ed:c1:08:51:04:d6:f1:
                    bb:54:08:a6:14:97:4e:ac:9e:6c:a1:ae:13:79:76:
                    14:24:c4:9e:57:d7:ec:c3:09:44:99:32:6c:79:3f:
                    2b:79:4b:48:80:24:42:00:82:e1:ae:d6:8f:c9:aa:
                    92:9c:bf:ad:c6:5e:63:b3:f0:0a:c0:4c:e5:6d:6a:
                    00:20:56:e5:55:c3:53:65:7c:a1:45:6e:59:6f:22:
                    58:a3:1d:5d:f5:48:91:5e:e1:c2:4a:d0:b7:c1:8c:
                    88:9f:ce:27:1a:1b:9b:dc:55:06:ce:b2:55:0a:60:
                    1f:7f:5e:eb:bf:d1:42:79:4f:e7:dc:17:9e:3b:22:
                    cd:88:29:30:a6:b2:90:fe:fa:a7:92:1e:32:cc:75:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:29:50:A5:E4:E3:A2:B8:0C:1F:FE:04:50:9C:3A:C3:C5:8D:3E
            X509v3 Authority Key Identifier:
                keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:85:46:f8:48:00:c9:b4:64:57:ee:fb:06:ee:1c:03:94:
         dd:22:be:68:d8:5a:5f:b4:e0:c9:b3:95:16:f1:8d:3d:ca:4e:
         71:94:e8:b5:29:b6:f0:20:db:2a:2d:4e:b8:ce:8b:8c:7b:0c:
         92:2d:f7:2f:9f:69:c2:ac:1f:55:f1:43:0b:37:61:94:8e:2f:
         10:56:33:ca:58:91:e6:cb:95:7a:a3:31:5f:ff:90:1d:8e:9f:
         ff:1b:41:b6:9e:da:a1:bc:b5:59:1a:6e:90:a3:aa:de:b7:9b:
         36:4e:a2:b3:6c:56:95:98:47:59:90:cf:ec:d0:67:02:5b:01:
         2f:60:31:b0:a3:30:c5:83:99:ee:61:eb:f2:51:11:d5:5a:72:
         02:86:bf:6a:96:d1:89:8a:54:6c:b1:48:db:b7:83:f7:98:51:
         0c:57:ce:fc:59:69:b7:1d:29:e7:36:e8:f7:8f:0a:3f:61:7b:
         3f:ab:49:47:7f:ab:fa:d2:29:fe:a8:5f:8a:92:b2:15:e4:69:
         10:0f:18:b4:86:db:35:89:dd:33:3c:dc:4f:1b:22:22:95:f9:
         ac:82:55:f4:3c:b5:d6:29:ab:8d:a1:16:26:02:56:27:27:5c:
         97:9f:22:80:6d:e1:49:5f:9c:d6:24:ce:c8:5b:1e:7d:66:b1:
         bc:b9:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:16 2026 by rpki-client