Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File:                     sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier:          XtHLvSY2pzbYaysWES0Rw5geVuNKlJ+IQH6F65WkXpQ=
Subject key identifier:   CC:F0:72:2B:16:0F:EC:CC:BC:51:D1:3C:C5:35:95:17:81:5C:EB:4A
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer:       /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial:       1FC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number:          1FAD
Signing time:             Thu 16 Apr 2026 15:56:56 +0000
Manifest this update:     Thu 16 Apr 2026 15:56:56 +0000
Manifest next update:     Thu 23 Apr 2026 15:56:56 +0000
Files and hashes:         1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: Ez0diAYDcu2PWQ3kPjwXeRHmk80In8dEWzzPAv9ZP4Q=)
                          2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
                          rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8128 (0x1fc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
        Validity
            Not Before: Apr 16 15:56:56 2026 GMT
            Not After : Apr 23 15:56:56 2026 GMT
        Subject: CN=69e106c8-fc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:34:c9:09:a1:c4:90:02:05:80:b2:6b:26:
                    a8:63:d6:7e:0a:42:55:15:5c:2e:37:32:29:e5:87:
                    b3:83:99:f1:e1:b5:a6:a9:d8:17:48:be:19:6a:33:
                    55:80:06:23:1c:1c:43:b9:2b:da:22:54:de:c9:27:
                    b3:05:4a:de:81:c2:9d:eb:58:bf:b8:97:7d:90:45:
                    34:a3:20:83:fd:84:c1:f6:e8:9e:3c:52:35:45:9c:
                    13:58:14:79:82:35:76:c8:0f:fb:97:7f:a8:60:14:
                    0b:09:aa:b1:33:4f:41:d2:65:34:18:7a:f9:53:b5:
                    24:21:88:bf:f1:02:e8:7c:4f:83:d5:8b:f0:94:8e:
                    b7:fb:c2:81:9b:c7:2b:d4:de:c6:6f:7f:07:5f:4b:
                    a2:66:15:93:32:38:26:da:6f:36:2e:d1:f4:4c:55:
                    e0:27:9e:0e:cc:ef:89:13:bc:39:35:34:d0:e5:a7:
                    c2:26:c5:e9:72:91:1d:59:61:12:99:7f:d3:9f:d8:
                    a7:a3:9c:19:a4:55:ef:48:59:9c:08:11:e1:7a:e7:
                    13:aa:32:f6:8f:87:4d:f3:39:95:2b:e6:21:24:4b:
                    52:44:69:f4:e4:29:60:15:ee:2d:0f:15:6c:32:94:
                    4a:07:0f:98:ff:62:59:c9:02:d5:73:ac:81:fa:ff:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F0:72:2B:16:0F:EC:CC:BC:51:D1:3C:C5:35:95:17:81:5C:EB:4A
            X509v3 Authority Key Identifier:
                keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:d4:f1:9c:68:e5:e9:c1:56:f4:15:ea:a0:ff:d6:8e:06:
         c9:5f:d3:0b:c0:d8:16:a3:3f:43:96:37:5d:ac:3e:cd:0b:7d:
         38:09:25:f4:cb:71:ee:77:6e:27:ea:76:02:2a:05:66:99:e0:
         88:0d:fe:54:fb:07:9d:68:c9:e0:b1:81:1c:5b:65:74:e3:4f:
         0f:41:ce:42:bf:75:cd:7b:10:fb:eb:74:a1:b3:3f:0a:16:2e:
         8a:c7:5a:d6:8a:69:5b:c1:38:89:a5:f5:89:ea:52:99:73:98:
         36:71:d0:96:11:21:0d:80:2f:b1:5b:62:68:16:06:ed:17:db:
         23:f4:7e:f3:08:f8:26:c1:0a:b7:28:6b:fb:60:19:b1:4f:b6:
         66:35:c4:d2:30:dc:39:33:02:08:c8:2f:80:d2:93:29:1f:a4:
         ba:f9:f7:1c:e9:94:48:09:5f:29:de:80:31:81:80:c3:3e:fb:
         95:13:f9:db:63:35:7f:ad:0b:68:3f:7b:9a:6c:45:d1:b3:3d:
         45:f7:d9:fc:12:c2:3c:0e:8f:d6:3d:8d:31:f4:21:41:56:22:
         9e:61:c8:25:7a:65:24:9a:60:64:77:d2:95:38:b7:bf:f8:f9:
         b4:32:27:d2:7b:70:6c:fb:8c:14:4a:8d:b7:ff:d7:a9:02:1a:
         d5:01:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:24 2026 by rpki-client