Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
File:                     3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json)
Hash identifier:          R8WmQsdIaLuktMK+B/FrQBeO+gIwTrFkofBfPDAFMlI=
Subject key identifier:   73:E1:C6:F9:69:F1:A8:B1:30:9C:23:31:3C:D1:7F:3D:C5:17:5D:0C
Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE
Certificate issuer:       /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE
Certificate serial:       1130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
Manifest number:          1A6D
Signing time:             Thu 16 Apr 2026 17:11:19 +0000
Manifest this update:     Thu 16 Apr 2026 17:11:18 +0000
Manifest next update:     Thu 23 Apr 2026 17:11:18 +0000
Files and hashes:         1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: KaPw8e08lNsjjkniZqJkUliOKMQjNWx98aV+RuOWr6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl
                          rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4400 (0x1130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE
        Validity
            Not Before: Apr 16 17:11:18 2026 GMT
            Not After : Apr 23 17:11:18 2026 GMT
        Subject: CN=69e11837-53d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:89:7c:81:bb:08:3c:f6:78:ae:e2:77:95:
                    56:eb:5e:02:42:9f:82:d4:7c:0b:b0:27:b6:f1:95:
                    98:ed:e8:37:2c:28:fe:e9:65:fa:e0:f8:93:60:ad:
                    06:0b:5e:a6:6a:95:57:79:76:bb:be:12:61:c7:98:
                    90:e1:c8:c2:7f:f6:a9:59:9c:cb:70:77:06:c9:ed:
                    ef:3f:90:87:8e:13:44:0f:e1:4a:5e:e2:f1:70:49:
                    c0:b7:4b:9c:9e:60:a0:96:61:18:a2:5b:a1:c6:9b:
                    de:ff:67:1a:ed:cc:95:38:46:56:37:e7:8d:74:e8:
                    8b:fd:76:98:d5:bc:0c:93:91:74:80:2c:29:41:77:
                    01:45:49:dc:c6:1c:45:0e:9e:cd:16:79:72:fc:62:
                    e5:f1:31:14:31:fc:8d:73:90:bc:3b:19:89:4f:1c:
                    2b:e2:77:ef:87:1c:e5:5f:5a:f1:27:c3:40:8e:1d:
                    3d:de:72:31:28:44:de:36:78:36:5a:a0:4c:b2:22:
                    ab:d8:d1:74:59:de:5a:5b:3a:8a:45:6f:cd:84:b3:
                    e9:ae:89:91:cf:4a:f8:44:7d:e5:5d:fa:4d:c2:0b:
                    62:e6:f8:bb:cf:a9:bb:c1:50:96:61:28:bc:6b:d3:
                    0d:ea:f6:ea:34:9d:49:31:1c:41:d9:07:cc:12:56:
                    3b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:C6:F9:69:F1:A8:B1:30:9C:23:31:3C:D1:7F:3D:C5:17:5D:0C
            X509v3 Authority Key Identifier:
                keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:74:a4:91:b3:39:d2:44:fc:03:85:8a:76:08:74:8e:30:69:
         58:4e:69:ee:39:79:86:1f:09:a5:38:7a:d4:14:ce:e7:3f:3d:
         02:42:9c:ca:ae:3b:70:6a:85:b8:bb:28:bf:41:dc:62:6d:23:
         c6:31:34:7a:c3:86:65:76:9f:3d:f2:75:4c:a4:62:07:2b:37:
         ae:3b:ba:25:ed:7e:a7:df:f3:3c:ac:c3:36:0d:1f:4b:49:bd:
         f8:15:50:ae:b1:52:3a:2b:30:da:79:46:d5:b3:26:1b:37:a6:
         c3:15:c2:cc:1c:9f:04:5f:32:42:f4:7f:57:4f:4f:e3:39:37:
         52:a5:38:d2:83:37:69:9a:b0:84:0a:e2:26:6a:e3:a0:5d:b5:
         3d:4f:b0:58:c7:83:ab:fc:88:2a:3f:14:2b:38:68:a4:ea:f9:
         7f:83:ff:82:ab:a1:69:3f:b3:d9:cd:ac:37:70:62:ae:53:66:
         ab:11:63:ae:fb:f1:0d:3f:98:21:9a:a9:52:a5:75:f9:3a:59:
         e8:81:3b:20:39:48:d9:78:97:00:90:06:a6:a2:15:bd:3c:3c:
         20:7d:52:5a:a7:ea:a8:39:e8:ff:32:fc:0e:f1:3b:b1:a8:09:
         54:6e:a6:7e:b7:14:f6:00:89:74:bd:d3:3f:29:5d:51:38:79:
         cb:de:da:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:58 2026 by rpki-client