Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File:                     o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier:          /Z7TgOUnhsKvxsjqhObZHCw1OoqwiXW9dTlsBgA3YnI=
Subject key identifier:   AA:F2:8D:85:B0:CC:D0:A9:1E:86:C2:F9:43:C3:90:43:B8:94:A4:D7
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer:       /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial:       09BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number:          09B7
Signing time:             Thu 16 Apr 2026 19:50:09 +0000
Manifest this update:     Thu 16 Apr 2026 19:50:08 +0000
Manifest next update:     Thu 23 Apr 2026 19:50:08 +0000
Files and hashes:         1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: 2B0lMPxc8nFy0mqnvspUEgl36sXHZ6ewU6pqFK6te08=)
                          2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: GefkuCVL5QikekTXf83Gvk/uklG0VM+rKHaD3lTs1U4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
                          rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
        Validity
            Not Before: Apr 16 19:50:08 2026 GMT
            Not After : Apr 23 19:50:08 2026 GMT
        Subject: CN=69e13d71-d6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:11:e1:cb:a8:15:c9:61:cc:bf:6c:53:46:71:
                    c2:00:cd:fb:01:7e:39:32:25:dd:26:ce:bb:8a:92:
                    b7:3b:c7:8f:f8:ff:46:3e:93:3a:e3:52:58:f9:a5:
                    f6:8a:d0:a4:b7:ae:32:02:4c:d6:70:4f:f8:1d:1c:
                    91:68:4a:db:1e:2a:7d:56:2e:0c:c8:93:e9:55:ff:
                    63:17:a4:40:8d:af:7b:60:cd:c0:76:65:98:a5:28:
                    65:2a:47:11:ab:fd:27:b5:1c:ed:a8:10:e4:53:a1:
                    01:b1:03:a8:4c:df:c7:92:ab:ec:84:1e:3c:2c:e5:
                    0d:f4:43:16:91:f3:79:e0:c2:72:80:bc:7e:8c:51:
                    a5:f8:40:7f:17:68:a1:55:2e:28:4d:4c:7d:23:1a:
                    a2:57:08:6c:e3:56:8d:1e:5d:c3:f6:6e:b3:73:aa:
                    6f:b1:4b:c0:08:ac:e3:60:e3:34:f2:a8:6d:e0:3b:
                    24:19:ee:33:6f:72:51:71:eb:58:5b:c7:8e:80:a9:
                    0b:3b:89:63:36:5a:57:60:02:09:69:71:b5:c1:92:
                    89:f1:76:c2:4e:50:a0:b3:a5:d5:a1:82:dc:d4:43:
                    71:87:ee:cc:f7:06:5a:51:b0:cf:ce:a1:f4:1d:8d:
                    05:0e:ae:9f:8e:0d:a9:04:14:8d:86:44:79:bb:24:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:8D:85:B0:CC:D0:A9:1E:86:C2:F9:43:C3:90:43:B8:94:A4:D7
            X509v3 Authority Key Identifier:
                keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:6a:74:c2:45:8d:9f:a9:97:4d:0c:8e:71:22:e3:77:56:
         35:09:0d:8f:cd:63:0f:a2:e3:4a:e7:a0:ef:44:43:39:e2:67:
         d5:c8:e2:35:d6:b6:03:56:14:1b:b2:a5:ad:cd:5f:02:99:3e:
         25:6c:09:89:1f:3e:e7:c7:6f:0f:47:ac:0b:36:12:de:02:98:
         00:ab:92:ca:63:ac:8d:63:e6:78:e6:74:83:d6:8a:a0:d0:f6:
         62:3b:75:fb:49:d3:a8:4d:9d:b8:fb:25:e5:9f:e2:28:d3:28:
         01:64:ba:d7:e8:5c:56:bd:8d:a2:87:55:17:ba:29:0b:5a:58:
         3c:ca:3c:d6:29:11:93:f6:52:8e:f2:69:d1:c6:60:fa:aa:4d:
         22:8d:12:b9:db:89:28:27:c7:6d:b5:50:31:65:b4:7c:20:7d:
         e3:32:82:2e:3d:c8:d1:b7:d8:25:95:35:72:81:77:f3:41:dd:
         6e:26:bd:c4:2d:94:00:ff:36:f6:82:fb:62:24:51:d9:e8:ce:
         81:ed:a3:d7:44:eb:e9:f6:fa:28:20:f9:63:aa:69:72:d5:47:
         8d:6a:6e:87:bd:1c:ae:f3:24:ab:09:12:63:1f:ca:e9:b7:5f:
         36:07:65:b1:3d:de:d1:e1:10:d5:f4:22:44:b8:97:58:ca:82:
         f6:c7:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:15 2026 by rpki-client