Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
File:                     KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json)
Hash identifier:          8/rxT43jpMsrJy9x3ywkLkecOZOr/ej8/e6rEpQp9bU=
Subject key identifier:   0D:42:05:6B:E7:FF:6A:68:04:E6:FE:BD:EA:FD:F3:7F:E3:F6:7C:CD
Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
Certificate issuer:       /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
Manifest number:          ED
Signing time:             Fri 17 Apr 2026 05:24:06 +0000
Manifest this update:     Fri 17 Apr 2026 05:24:06 +0000
Manifest next update:     Fri 24 Apr 2026 05:24:06 +0000
Files and hashes:         1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: P04/DxD8Djgd+VCPpS3QX2waJGXayg70buI2V9Zd7yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
                          rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
        Validity
            Not Before: Apr 17 05:24:06 2026 GMT
            Not After : Apr 24 05:24:06 2026 GMT
        Subject: CN=69e1c3f6-186e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:aa:0f:c1:7a:91:3a:fa:39:24:5f:20:26:
                    37:89:b8:6e:9a:3f:98:a8:a0:b7:31:d7:35:cf:3b:
                    3a:18:fb:e1:5f:8a:2e:fb:b2:35:f2:4d:25:02:90:
                    61:17:8e:8b:39:52:d3:e2:c6:3c:d6:e7:2b:27:1c:
                    cb:85:66:8e:46:a4:1e:ee:01:4a:c4:b3:d6:26:7f:
                    86:65:29:8f:48:b4:24:fb:5c:c1:cf:db:96:c5:ca:
                    24:de:2c:83:9a:cc:6f:11:c8:62:a0:d4:b5:12:3f:
                    49:0a:a6:bc:5b:22:db:cd:50:e0:67:61:15:98:21:
                    7e:a4:48:ac:1e:02:90:00:fc:60:29:90:30:57:45:
                    9a:9c:03:a0:6d:11:c2:52:72:d0:83:91:6f:aa:39:
                    87:f4:37:36:fd:94:8b:fb:3b:b5:24:70:a2:96:f0:
                    e2:09:7f:8f:6b:44:bb:84:a8:9d:88:8a:1f:33:cf:
                    60:5f:f1:ab:9f:1f:96:df:ce:5e:55:3b:44:ad:1b:
                    03:1a:61:3c:2c:06:51:14:06:68:f0:6d:9b:66:5c:
                    41:b3:69:ab:ee:a2:71:b0:3c:6c:57:7b:9f:81:ee:
                    61:4b:76:86:c1:36:0e:ce:38:fa:02:d3:2a:b1:2c:
                    2d:67:47:76:87:24:0a:5f:90:58:69:ee:10:5d:3b:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:42:05:6B:E7:FF:6A:68:04:E6:FE:BD:EA:FD:F3:7F:E3:F6:7C:CD
            X509v3 Authority Key Identifier:
                keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ec:8d:b1:1f:cb:3e:f5:13:57:02:0d:75:17:74:0f:a8:3a:
         5a:41:d2:5e:39:97:ca:f8:81:47:ca:33:6c:08:fa:8f:ae:9f:
         8f:34:24:3f:a0:20:09:f6:32:51:d3:58:d4:a5:38:e0:a5:0d:
         fd:c0:d3:f1:5c:3b:7a:5c:f1:0f:3a:ca:42:a1:56:50:61:b4:
         a1:e5:dd:95:80:93:7c:b6:4d:2a:5f:c9:b5:9a:92:5c:e6:9e:
         7c:06:22:a9:f1:0d:28:e9:07:27:7a:b5:17:9d:74:71:73:a4:
         8d:5c:36:c5:a1:19:c1:35:db:6c:98:c5:a6:d0:76:85:ff:61:
         97:69:bc:7c:a2:1c:c1:55:b0:c8:dd:d6:5c:01:c1:19:00:b5:
         69:98:ee:d9:ce:b5:62:21:a8:82:cd:8f:d5:0d:88:83:9a:d1:
         67:72:14:5b:4c:1b:a7:4d:09:1e:87:cd:8d:cf:99:06:d0:4d:
         8f:1b:ed:37:77:b6:bf:65:af:12:2a:3f:cc:d9:8f:35:22:f5:
         1a:64:c8:a5:e3:d3:c9:12:65:6b:77:e6:a1:34:0d:64:2e:23:
         a7:0e:dc:60:12:9e:5f:1e:99:3f:30:3e:d7:39:c1:f3:fd:ce:
         6e:4f:6f:4f:c6:ed:5c:77:29:8a:1a:33:3d:32:c6:1f:bd:98:
         f0:5f:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:06 2026 by rpki-client