Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File:                     np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier:          2Vj3aXwPHxVQdoaMtVr/Ay3j+4AXPwv9JkHC8lq6Arw=
Subject key identifier:   A2:A8:A1:F3:01:86:EE:27:83:4C:8B:26:A0:71:4D:6B:AB:FF:9F:9E
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       08E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number:          08D2
Signing time:             Thu 16 Apr 2026 20:18:55 +0000
Manifest this update:     Thu 16 Apr 2026 20:18:54 +0000
Manifest next update:     Thu 23 Apr 2026 20:18:54 +0000
Files and hashes:         1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: kfZQgzsu8hQtjhEhAfLs65mBj21vvtVusXCG7NfKo7o=)
                          2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: q89Jg/7hPlysCgYbH3zg0CvpgeLJQkUN21WMNq0ChPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
                          rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2276 (0x8e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: Apr 16 20:18:54 2026 GMT
            Not After : Apr 23 20:18:54 2026 GMT
        Subject: CN=69e1442e-c1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:f9:23:92:36:35:4c:34:5d:ed:e0:e3:8c:
                    24:c5:5a:6c:47:56:8a:05:4b:1c:f5:73:b3:96:96:
                    5e:25:47:4a:d0:d4:3f:1c:e7:d3:1a:79:46:0b:a9:
                    43:50:98:e7:b9:e4:f1:26:e2:68:8a:3d:6f:90:7e:
                    54:c9:05:ac:ca:a9:fe:62:b7:fb:bd:10:4a:e0:6a:
                    9e:d7:26:50:13:b2:07:a7:51:9d:a5:e9:eb:42:1d:
                    98:0c:eb:46:e4:fc:83:9c:df:20:83:de:79:4c:ab:
                    da:cb:bf:1b:dd:77:ee:b6:07:04:ea:eb:be:16:64:
                    89:23:7e:d9:1c:f6:82:c1:1b:af:e9:1a:91:a5:12:
                    52:e2:b9:07:96:50:9b:5d:89:45:91:e0:5e:eb:46:
                    1a:05:fb:d5:4c:3a:0e:90:40:35:30:b5:51:b1:d5:
                    7a:16:ca:61:34:0e:8a:8c:7a:bd:4e:f8:f7:e9:df:
                    8a:6d:dd:e5:a3:97:59:63:07:63:1a:fc:e9:27:b4:
                    f4:6b:0a:72:b6:f0:f6:a9:80:ad:73:51:d6:3d:4b:
                    b7:92:38:ac:93:a9:c9:c5:0d:e5:ed:1f:e5:66:42:
                    e7:8d:0e:46:79:f2:ad:47:c0:0c:4c:a5:b2:7d:8c:
                    21:0a:31:c0:82:36:cf:04:8b:ac:f2:c6:c1:88:82:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:A1:F3:01:86:EE:27:83:4C:8B:26:A0:71:4D:6B:AB:FF:9F:9E
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:e4:a8:f3:bd:f7:1e:54:ea:ca:19:87:30:2a:78:87:84:
         e4:92:a2:9a:b4:2f:6b:a6:28:d2:bd:7c:8c:0a:b0:69:d8:d4:
         5a:31:d3:7e:24:0d:5d:51:34:45:53:5e:7f:de:81:82:24:76:
         01:86:d8:02:60:92:50:55:09:e7:ab:34:57:67:c9:d3:c7:f3:
         20:a8:bd:d7:f5:5b:0b:2c:3c:fe:01:a1:2e:a0:a7:6c:8e:1c:
         e2:4a:4f:e3:bf:b0:30:a6:71:46:53:fa:7a:a6:bb:74:9d:83:
         8a:06:ec:c9:b8:44:83:07:a9:bc:4e:51:8a:a6:b7:3e:9d:8c:
         48:24:bd:ac:16:0d:45:56:55:59:03:3c:db:30:60:5b:3d:42:
         a3:67:f4:0e:7a:f0:6f:ab:64:33:0d:aa:03:76:ec:27:46:dd:
         4f:50:22:d0:26:24:d7:f3:4b:fe:c4:54:0a:7a:7c:47:1b:3e:
         37:e2:5c:51:ee:25:f9:0a:88:d3:7b:a8:55:77:95:a3:52:17:
         b4:28:61:b8:de:ae:c2:fa:66:9d:6a:26:0f:2f:93:c8:55:15:
         ae:f2:03:b4:87:8f:0f:76:2a:fb:74:d3:a0:47:94:a1:a8:fe:
         29:c0:7f:e0:1b:aa:07:41:00:50:13:9e:a6:b8:52:f4:3d:5b:
         0b:8c:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:07 2026 by rpki-client