Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
File:                     kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json)
Hash identifier:          4lAsgMZogdvNdUQ7pz89b+V9ALveiDnHzgu0h9UIyxM=
Subject key identifier:   BB:54:C9:5C:E7:F1:DB:D1:9D:6D:BE:5B:C6:7C:2D:79:E8:8F:90:A0
Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
Certificate issuer:       /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
Manifest number:          9B
Signing time:             Fri 17 Apr 2026 07:06:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:05:59 +0000
Manifest next update:     Fri 24 Apr 2026 07:05:59 +0000
Files and hashes:         1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: rbY2qarW6u8OtoJlOi7RZSfcmPytqMhsUvd94y7dpxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
                          rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
        Validity
            Not Before: Apr 17 07:05:59 2026 GMT
            Not After : Apr 24 07:05:59 2026 GMT
        Subject: CN=69e1dbd7-c6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:43:08:2a:84:35:18:03:e4:d1:98:86:b0:3b:
                    da:93:1d:e6:e0:98:db:12:7c:e6:ef:51:41:46:2a:
                    8d:7a:d7:9e:cc:05:b3:bd:73:35:a8:95:0c:ef:25:
                    c5:16:92:2a:c5:a3:8e:f2:41:50:58:e5:55:73:ef:
                    be:d3:71:a3:fd:6b:fc:ae:5c:5f:a5:10:d8:b1:26:
                    b9:17:02:89:dd:7d:8b:2e:bf:1b:f7:c4:b7:d5:a9:
                    35:b9:ed:2b:1c:04:da:b7:7b:58:46:2d:21:0a:94:
                    dd:73:5e:7c:bb:72:b0:a9:cb:6d:bb:2f:91:65:53:
                    fd:c4:02:d8:6e:5f:de:27:57:19:05:c2:c4:23:ca:
                    83:ba:2f:d4:3a:f4:6e:38:ca:bf:85:fe:66:27:b9:
                    93:7e:3d:96:1a:43:5b:68:33:3a:08:16:e0:1c:e5:
                    a2:5c:e6:8c:de:de:4e:79:66:0c:cb:84:60:1d:47:
                    36:fc:ab:d9:39:33:0b:f6:98:63:35:e4:e5:a3:5b:
                    86:2c:22:65:4e:6f:23:bb:16:ed:c0:ff:69:50:b4:
                    8f:7b:96:74:78:ba:00:2b:7b:0a:1f:ad:7c:0f:54:
                    bb:c3:e9:84:53:13:ec:3a:50:a7:a3:0d:13:bd:c3:
                    4e:6a:f1:02:41:13:d1:31:76:6c:c9:e4:dd:fb:d5:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:C9:5C:E7:F1:DB:D1:9D:6D:BE:5B:C6:7C:2D:79:E8:8F:90:A0
            X509v3 Authority Key Identifier:
                keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1d:f3:49:e7:2b:ac:ea:1c:3e:c5:bf:3d:28:e4:f7:c0:ce:
         20:f9:e4:bb:20:9f:4f:b4:cd:0f:51:25:ab:a0:47:dd:0b:7c:
         5c:22:1b:64:ff:fe:02:9b:ea:11:34:fd:51:b6:2a:2b:ec:e5:
         17:ae:e3:f8:10:0a:bf:2a:66:b0:ad:04:89:34:d5:5f:67:3a:
         be:ec:42:ab:47:56:59:5c:11:37:f8:6b:ff:5a:30:9d:ca:4b:
         46:d3:45:82:ee:5a:17:e4:f0:c3:54:d9:df:5e:05:b4:c6:a3:
         ea:e5:63:1f:73:9b:f3:8e:fe:d4:7f:52:13:dd:7d:b4:64:46:
         86:cd:c7:45:63:d1:b1:5d:17:4a:de:f4:38:ab:b8:a9:70:35:
         9b:ce:f9:17:97:40:7d:92:f0:c9:f9:d5:44:43:a5:48:68:2d:
         5c:7e:28:a5:f5:f5:56:d3:dc:49:ea:de:06:a4:31:c1:4c:cb:
         27:98:4b:26:93:d1:d6:11:ee:64:45:f2:f3:0e:a0:c7:6b:d9:
         85:b8:32:44:4a:8f:cd:e9:41:c8:fe:ad:c5:f6:06:1b:b5:8d:
         25:79:1f:a5:0f:c0:19:c4:c1:88:e4:69:c1:70:fd:f0:b4:a9:
         cc:23:8c:35:d6:a1:4b:12:90:ec:3c:5e:34:c8:24:fb:50:e9:
         49:fa:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:23 2026 by rpki-client