Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          gLD3h1wP9edt0T3Wu8PJAJKGV3epN9qm8ZIe3+k5Gb0=
Subject key identifier:   13:E5:B9:4B:72:0E:E2:DF:C1:9B:9A:AA:9E:61:28:01:31:6A:25:22
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          0262
Signing time:             Sun 19 Apr 2026 02:00:26 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:25 +0000
Manifest next update:     Sun 26 Apr 2026 02:00:25 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: k82Yu3C/n4r8qB8MJB+oPrPZGSgc3niCamDAXLGXTYo=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Apr 19 02:00:25 2026 GMT
            Not After : Apr 26 02:00:25 2026 GMT
        Subject: CN=69e4373a-e0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:5a:8f:fa:8b:ab:b1:11:6b:72:15:75:b2:
                    f1:e1:a4:ad:f0:35:3e:d6:7a:85:77:be:80:41:0c:
                    17:02:93:91:68:17:4d:ae:2c:7d:8d:01:eb:f3:45:
                    5a:cf:23:48:24:81:bd:7b:34:72:d7:4a:5e:b7:24:
                    d5:77:c4:3d:a6:2b:7e:79:b8:84:21:fd:30:bf:08:
                    5a:83:63:94:2f:7d:e7:77:45:56:6f:2a:d7:d8:bc:
                    f1:2b:5b:3e:02:1e:fa:70:d3:21:c3:c6:5e:16:1e:
                    48:07:15:0a:ca:01:40:37:a5:a2:da:79:47:19:8d:
                    03:77:9f:39:1e:42:aa:45:69:3a:7b:d4:9d:18:b4:
                    31:19:ae:58:72:3c:bd:be:a1:70:58:73:9a:f7:eb:
                    54:92:d5:7e:9d:4c:dc:23:10:63:3f:ea:9d:01:6b:
                    03:7b:65:9c:75:1b:34:44:f0:97:56:d3:15:8b:53:
                    59:30:c0:74:95:9c:c5:b5:e4:03:52:0a:10:3b:9d:
                    35:09:64:ff:6b:0d:e3:8b:0e:fe:5a:60:4b:61:d9:
                    90:36:5e:88:87:26:fd:69:77:e6:24:44:c4:32:45:
                    75:38:48:57:f2:31:ab:49:87:f9:c9:63:07:4d:a4:
                    27:46:8f:78:d0:09:cc:39:30:d1:a8:b1:9e:64:dd:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E5:B9:4B:72:0E:E2:DF:C1:9B:9A:AA:9E:61:28:01:31:6A:25:22
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b2:42:eb:69:0f:c0:0a:9f:71:6b:a6:28:65:85:fa:9e:bd:
         69:2c:68:f6:29:e9:90:4d:4c:c8:5a:ba:2c:71:0b:fb:33:e2:
         fa:c3:26:6b:e3:9b:75:b2:a3:a5:40:df:97:33:65:3c:f9:aa:
         b8:d4:6e:7b:ee:99:dc:af:7d:3f:c1:f9:66:6a:d4:64:be:5c:
         dc:54:d1:7b:73:e0:67:57:88:d1:78:e1:ad:11:c7:c3:46:2d:
         2e:42:b1:76:d8:ae:44:60:7f:10:31:7e:fc:c5:f7:69:8d:d4:
         2c:0e:a9:75:a1:5c:e3:16:e6:8a:fc:a0:bd:ca:4a:f4:d4:e3:
         db:a2:79:44:e5:f1:3e:a5:e6:78:84:ab:9d:8c:9b:c7:4a:72:
         7e:a0:77:c2:10:59:cd:d1:70:39:4b:26:b3:57:e9:71:7c:9c:
         3d:cc:55:32:8c:ad:64:db:15:5a:99:df:38:4b:8e:ca:4e:85:
         60:8b:3a:db:3e:ef:13:2e:43:3c:e3:16:04:29:50:4c:41:68:
         67:6e:c7:84:a3:fa:3a:46:af:42:89:4d:99:99:18:a6:18:87:
         2d:3b:0c:39:b2:dd:ba:1f:ff:dc:91:76:eb:c1:67:bc:d4:0a:
         64:9e:3b:2a:39:1b:3c:0d:f0:17:dd:49:0b:e7:b8:b5:ae:16:
         3e:c1:0b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:13 2026 by rpki-client