Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
File:                     v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json)
Hash identifier:          AVwfwDa/ltuccPbegonlqL9qKA+ttNhdJV1ass+iHuU=
Subject key identifier:   B4:1C:4F:04:2C:92:E5:AA:1E:0B:A6:AD:0D:C0:6F:1A:2D:F8:19:D4
Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B
Certificate issuer:       /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
Manifest number:          0124
Signing time:             Fri 17 Apr 2026 05:23:28 +0000
Manifest this update:     Fri 17 Apr 2026 05:23:28 +0000
Manifest next update:     Fri 24 Apr 2026 05:23:28 +0000
Files and hashes:         1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: 6Aq9gT0MzlVHzvKuX8ClObzId923XZe+nmtuvVYuikA=)
                          2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: E9mAZb8xSaXl7oqYSgHwt0AXSurnvpPNcWXcsPgaaag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl
                          rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136302, serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
        Validity
            Not Before: Apr 17 05:23:28 2026 GMT
            Not After : Apr 24 05:23:28 2026 GMT
        Subject: CN=69e1c3d0-3766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:d6:13:29:07:67:79:72:f7:93:22:28:98:
                    aa:6e:bc:08:78:ec:18:18:7a:14:62:2c:e5:8a:6c:
                    e3:8b:79:b7:78:cf:ac:92:68:2f:fd:33:fc:4e:01:
                    34:cb:ce:2a:59:c9:1e:2c:d4:13:f3:94:13:cd:e3:
                    74:73:3b:6b:df:fe:f8:0b:97:81:31:b0:43:d0:b9:
                    a8:25:1d:dd:13:85:1d:29:47:78:67:75:87:40:a0:
                    1d:01:de:d9:6f:ea:8f:bd:08:52:1e:10:8a:e8:0c:
                    48:46:d8:1c:da:cd:f3:0f:7e:de:04:b5:ec:f5:c7:
                    da:fc:eb:f5:f6:7f:12:2f:19:b1:7d:bb:b6:55:64:
                    91:b2:3c:36:6f:75:ea:ad:c7:8a:64:31:ad:c6:a7:
                    59:a7:2f:c0:98:9b:07:1f:4c:74:28:88:d8:f0:b6:
                    2e:36:9a:a3:3c:a5:62:3d:2b:35:30:1f:f9:c1:85:
                    0f:26:5c:53:6d:81:29:42:48:bb:fd:08:70:f6:a8:
                    36:81:37:4b:cb:e4:95:02:5f:2a:92:0e:d7:04:65:
                    16:3c:f7:0b:56:54:46:f3:39:c9:57:ef:e0:40:44:
                    dc:2b:35:eb:f0:e6:3e:64:ec:2e:98:10:0e:40:4a:
                    3b:95:b3:71:3d:ba:89:49:da:78:d3:da:d6:5e:cc:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1C:4F:04:2C:92:E5:AA:1E:0B:A6:AD:0D:C0:6F:1A:2D:F8:19:D4
            X509v3 Authority Key Identifier:
                keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:5d:c6:09:ec:51:e5:9c:90:6b:e9:84:f9:c2:44:95:3b:
         a2:d0:d9:a8:14:ce:26:9a:dd:34:49:7b:ed:80:c0:0c:a5:4c:
         65:df:97:29:32:d0:55:2c:ea:5f:24:fe:cf:dd:11:e4:6b:78:
         b3:c6:d3:5c:d2:9f:61:a0:f9:53:3d:7d:e8:2a:a9:58:80:66:
         82:d0:f0:92:78:87:cc:72:9d:05:b7:80:8c:e0:04:15:c5:cf:
         8a:a6:a0:f6:9d:bf:c4:e7:25:cd:f7:f2:9a:93:89:fb:72:d7:
         4e:c5:6e:21:75:aa:b4:1f:fe:62:97:65:14:81:14:66:b2:e9:
         f2:d9:7d:00:a1:a1:4c:2c:20:2a:73:1d:84:f5:56:4f:53:a7:
         0a:b2:52:c6:36:d9:32:1e:3d:dd:7b:e3:22:c4:e7:87:a1:3b:
         d7:27:fb:0f:0f:0a:9f:68:e0:cc:f8:b9:da:19:dc:f6:f8:b7:
         6d:31:33:d1:2a:ac:06:90:9f:51:df:3a:93:d2:8e:59:d7:96:
         57:a9:82:81:63:7c:8b:dc:d5:9b:f4:73:be:32:30:80:b4:7a:
         da:24:b7:08:9f:24:04:83:5a:7f:f6:34:69:0c:96:a1:02:50:
         72:9e:29:1c:0f:b6:8b:08:80:cd:0c:d9:0b:d2:7f:b9:09:0b:
         0f:76:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:24 2026 by rpki-client