Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
File:                     -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json)
Hash identifier:          mpG1OIck1dT/OA/sTnsyp3yW7XiAYcT9Y8mnTrirXmU=
Subject key identifier:   BE:F3:54:4A:14:31:16:25:7E:5D:7F:8D:80:39:B9:5D:01:A5:A6:D7
Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
Certificate issuer:       /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
Manifest number:          01D7
Signing time:             Thu 16 Apr 2026 15:28:11 +0000
Manifest this update:     Thu 16 Apr 2026 15:28:10 +0000
Manifest next update:     Thu 23 Apr 2026 15:28:10 +0000
Files and hashes:         1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: NE++9XYre2KRpZDxWua311rOo89DnFo5NtInGsjjFs8=)
                          2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 7WBF/67tQLlM0JIff5LKTgy333KC+LPGrQsaWqMRIeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
                          rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
        Validity
            Not Before: Apr 16 15:28:10 2026 GMT
            Not After : Apr 23 15:28:10 2026 GMT
        Subject: CN=69e1000a-7810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:9d:49:7d:b9:94:9f:71:f6:5c:5a:13:d7:
                    b4:e9:eb:71:c2:96:c1:49:0c:fc:60:88:91:2f:e0:
                    81:61:6d:40:d7:f0:94:d0:40:c6:41:00:3f:a6:b0:
                    27:fb:b2:98:e6:48:4e:b5:b0:84:21:41:63:9b:c0:
                    7b:ba:8f:73:ad:f7:ea:2a:6d:ed:a2:8a:b6:db:de:
                    bc:37:e6:ea:42:1f:70:6b:40:f6:65:f2:02:08:d0:
                    7b:98:6d:82:a0:79:10:1f:19:ee:7b:b9:07:2b:6f:
                    42:90:4f:5a:be:07:47:31:be:04:86:2f:ba:1f:2b:
                    16:da:d3:b9:b8:2d:af:f6:fd:45:f4:42:5e:93:78:
                    bd:49:28:84:67:50:6b:4a:40:ff:1c:60:61:8d:81:
                    e2:3a:ec:eb:08:dd:6f:19:8e:5f:17:f4:e8:5c:98:
                    ea:aa:a0:b5:87:6e:15:46:4b:67:16:8b:7c:ef:79:
                    7d:da:31:55:41:95:d1:96:6c:5b:28:92:42:6c:7f:
                    98:d5:e0:68:be:91:08:3d:d7:a9:c5:4b:82:83:40:
                    33:ca:fa:19:f6:b8:14:f3:24:0b:98:81:f2:e9:34:
                    66:e0:e8:d1:1d:03:5e:13:f9:09:95:7b:4e:99:49:
                    7c:bb:3a:5c:20:c3:5c:2c:2f:2d:a9:9d:7e:4d:b4:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:54:4A:14:31:16:25:7E:5D:7F:8D:80:39:B9:5D:01:A5:A6:D7
            X509v3 Authority Key Identifier:
                keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:39:dc:7e:38:35:ed:77:6b:73:35:ad:33:69:77:08:91:
         b0:e8:20:fb:d1:68:3a:68:13:65:60:d2:78:6c:d7:fd:5d:42:
         6a:7c:85:2d:b6:08:92:6b:73:1f:d6:b0:3f:11:ab:42:76:30:
         2e:12:4d:76:37:a4:06:27:c7:51:cb:cf:fe:2f:ab:de:e5:6f:
         d7:98:ca:50:2e:1b:a5:a7:71:54:60:b3:ff:56:9f:19:9e:f9:
         3d:b7:28:18:e7:be:23:66:8c:50:c6:44:80:71:b7:7f:90:0b:
         25:80:a8:c6:15:12:16:37:e0:11:60:84:e3:c5:51:ca:08:b1:
         89:30:02:a9:17:56:77:e6:7b:7a:8d:ca:17:d8:ce:18:f4:32:
         63:5c:63:40:24:01:fe:d5:1b:ac:47:b7:a7:39:50:72:c4:70:
         ea:91:c3:b9:19:46:62:ce:9c:f5:ea:aa:0b:2c:46:5f:68:84:
         64:f4:de:2e:12:52:0f:db:f1:4c:2b:2f:e6:0f:14:42:55:c1:
         4e:09:c3:10:08:51:00:b6:6e:85:13:1e:8d:5e:28:a8:53:c1:
         b2:08:ce:ca:02:a7:f7:23:fa:69:53:8d:9f:37:d0:13:51:ba:
         18:99:67:26:be:82:05:4e:84:16:0f:83:fb:1b:db:cb:23:3d:
         e7:26:de:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:51 2026 by rpki-client