Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File:                     8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier:          QO4BwqrD+YlkalHcFE4Z1ORaqP5/Xx83lfpAENS+btM=
Subject key identifier:   5F:46:C3:BB:B4:0C:01:D1:EC:85:81:EC:BD:2C:99:2B:0A:7E:94:2E
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       0312
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number:          02EA
Signing time:             Fri 17 Apr 2026 01:14:33 +0000
Manifest this update:     Fri 17 Apr 2026 01:14:33 +0000
Manifest next update:     Fri 24 Apr 2026 01:14:33 +0000
Files and hashes:         1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: +KqrdTTwk8/bdhJGPa+oIn6W7KelEiHek17sL7EZoxQ=)
                          2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=)
                          3: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=)
                          4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=)
                          5: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=)
                          6: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=)
                          7: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: OvljHmGaqlHVvH/NKwVEhE+BSY1Ndq3kJG4YsbW7t7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
        Validity
            Not Before: Apr 17 01:14:33 2026 GMT
            Not After : Apr 24 01:14:33 2026 GMT
        Subject: CN=69e18979-c8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:85:2a:18:b1:ac:9c:2e:e6:cc:cb:49:a3:
                    f9:07:92:48:0a:72:10:b0:ea:86:77:7e:a9:1b:26:
                    46:78:b6:c8:b6:ec:80:02:05:8b:1c:1e:7c:65:9e:
                    a8:35:f0:02:48:68:e6:ac:12:72:26:82:43:58:48:
                    e4:57:72:cf:46:a1:09:b5:92:ca:17:a7:9a:a9:6e:
                    6a:89:93:df:f9:8b:a1:18:fc:ce:2c:ac:aa:5e:9c:
                    2b:32:9e:e7:5d:bc:dc:9f:75:c2:49:cb:fb:78:0b:
                    07:4a:7e:4c:cc:d7:64:cd:15:20:81:4e:04:4d:ff:
                    b1:c3:83:b6:9b:76:2c:a4:00:fe:15:b3:cd:75:fd:
                    62:1f:ba:7a:a4:7d:dd:ba:73:a3:3b:4d:da:49:66:
                    d9:d8:5e:c2:fd:0a:4e:f3:bf:86:a6:d6:19:e5:27:
                    e7:54:95:7b:db:c0:63:f5:57:27:94:ee:0d:a5:bb:
                    29:11:eb:14:ae:d3:44:87:e7:4d:f9:7b:22:73:8c:
                    ea:a0:af:e9:d6:74:8f:b3:f7:6d:c8:30:18:25:20:
                    0b:5d:0c:68:63:d9:16:7a:ce:85:b1:f8:01:7f:d1:
                    e8:b4:4b:63:d8:e8:3a:27:f5:dd:77:10:5c:38:17:
                    c4:e6:11:36:20:25:3a:8c:94:a8:2b:0b:64:69:4f:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:C3:BB:B4:0C:01:D1:EC:85:81:EC:BD:2C:99:2B:0A:7E:94:2E
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7e:ac:cb:72:ad:40:56:f5:70:1f:73:b9:8b:24:6d:15:e5:
         a3:74:4a:6e:34:32:c1:62:40:ed:b3:e2:1a:ca:e5:87:9e:69:
         c1:0c:10:72:cb:8d:a8:ee:5f:11:c6:7c:cf:35:04:0b:ec:5b:
         e4:63:dc:9a:e9:da:9e:ad:4c:40:ec:d9:0d:51:20:2d:f5:d9:
         7e:43:9b:80:3f:a3:27:b7:86:b7:50:2b:f3:0a:bb:a1:fa:69:
         dd:c1:0e:4e:b5:45:3e:5e:b0:32:6e:d5:72:1d:6c:84:8e:78:
         5e:a7:af:1a:17:cf:6d:dc:25:d6:34:25:bf:a0:a6:8f:ce:eb:
         b5:59:58:93:c9:d2:46:96:ab:b7:e1:43:e8:28:a8:a0:26:c5:
         31:21:ea:6e:a3:29:a0:9e:d4:e0:59:b2:c2:d2:93:ed:86:49:
         ba:fe:8c:9c:9b:ca:c3:a4:7a:d4:a4:65:3d:95:47:7d:a5:96:
         57:cd:6e:45:00:88:3a:3f:a2:8a:7a:f9:99:e7:ff:25:5e:8a:
         3b:b4:3f:1a:d7:48:02:b7:2e:6b:15:00:b0:20:f9:45:37:79:
         50:3b:bb:fa:3e:1b:b9:9b:21:f0:a9:9f:e8:63:47:bb:1f:3d:
         a9:f7:c9:c5:17:d7:31:f7:db:a4:ed:96:af:70:c5:87:47:13:
         46:94:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:05 2026 by rpki-client