Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
File:                     6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json)
Hash identifier:          QCiPSI7PhqCX57sbEXas7vD7jvDaAkIXnDsuX7JUKM8=
Subject key identifier:   46:90:0A:58:1F:F2:88:F8:F9:C5:41:49:0E:66:74:23:5C:4E:46:26
Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
Certificate issuer:       /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
Manifest number:          013B
Signing time:             Sun 19 Apr 2026 05:03:42 +0000
Manifest this update:     Sun 19 Apr 2026 05:03:42 +0000
Manifest next update:     Sun 26 Apr 2026 05:03:42 +0000
Files and hashes:         1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: 9AnF/BQOP53xAcaph99fnGgCiUX50kRZmTKwE7fiBRE=)
                          2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 4vNJQxcsfIlM8JrvGlM4evgFRLcduyTRiUIuk3E5qvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl
                          rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
        Validity
            Not Before: Apr 19 05:03:42 2026 GMT
            Not After : Apr 26 05:03:42 2026 GMT
        Subject: CN=69e4622e-7510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:f9:94:98:25:c4:d5:8b:38:91:4b:ba:7c:
                    45:df:b3:86:34:b7:ff:a8:e5:f0:5c:ea:d3:10:2b:
                    1d:db:ce:9f:a8:ab:ff:eb:b9:86:74:7b:09:a1:da:
                    1a:4b:ec:9e:75:e0:f4:a3:61:ca:6b:3c:73:70:3c:
                    5e:2d:01:3c:7d:10:07:4d:85:05:db:54:5a:8d:bd:
                    84:91:da:42:3f:56:23:8b:a9:2e:81:15:33:47:50:
                    cd:e4:a7:42:54:26:82:c1:68:34:b8:93:d2:69:1b:
                    8b:55:24:b7:3f:b9:19:fc:dc:d3:88:81:1a:3c:73:
                    b5:c5:c6:76:09:59:e7:65:d0:87:c3:b0:fe:88:29:
                    4b:8e:9a:5a:26:2d:c2:11:9c:5e:2f:97:db:2b:26:
                    c8:9f:c2:6f:30:9d:43:a5:c0:7c:69:7d:96:03:7e:
                    e9:09:2b:4f:51:e2:73:ec:b4:06:f2:6a:47:56:35:
                    39:45:7b:2f:43:40:81:5d:b4:61:73:f0:f9:23:ff:
                    0b:29:12:f9:a7:4a:f5:7a:fc:d0:8f:1b:7e:04:01:
                    9c:fe:cf:37:17:7f:26:9e:e3:1d:2f:8e:c3:39:2f:
                    a5:93:10:c7:18:19:0f:38:3c:fb:2c:8a:b7:9c:6e:
                    03:b8:3b:9a:5a:c9:87:8b:ec:d9:3b:d2:88:60:60:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:0A:58:1F:F2:88:F8:F9:C5:41:49:0E:66:74:23:5C:4E:46:26
            X509v3 Authority Key Identifier:
                keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:36:17:6e:48:e2:1f:c6:9c:eb:a1:59:02:1d:97:0f:b9:
         0a:fc:9b:36:f2:e5:98:5e:ac:24:e9:43:c2:ce:f0:8b:1e:9b:
         74:ac:fc:37:14:ac:6b:97:93:a0:fb:03:83:7e:6c:9e:35:9d:
         15:19:c0:30:05:8a:40:00:7a:e6:4a:db:95:b3:86:63:ac:62:
         bd:f1:ad:5f:73:10:1a:5f:96:6c:d9:a1:51:d1:28:ec:43:de:
         de:c4:01:87:37:a2:c1:6d:ef:50:2f:07:c3:a5:ef:a3:34:94:
         20:8b:67:48:b0:9a:d8:07:7f:c6:01:c4:b8:24:cd:07:08:da:
         01:f0:01:79:62:ab:3b:23:1c:22:1e:79:ad:40:4a:04:7a:22:
         33:b0:f9:13:ee:dd:4a:0c:6d:8a:21:86:f8:18:94:e4:8a:50:
         72:55:4d:6b:b0:f5:35:d1:9d:c2:1d:f0:f1:e4:d0:5f:6c:c6:
         61:76:6f:89:2c:3f:4e:e0:30:f0:56:ab:a3:c5:84:12:f4:15:
         2e:15:34:23:7b:1d:cb:7d:d2:5e:b8:c1:56:c2:7c:92:fc:6b:
         b5:65:0e:b4:63:6c:5e:a5:4a:7c:6c:eb:fa:52:bb:19:3f:fc:
         a1:25:d9:49:0c:75:16:9f:fa:de:a5:d4:20:93:67:83:83:68:
         0c:bc:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:41 2026 by rpki-client