Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File:                     Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier:          u0H/52aPfiVXORz5wXRWWtJOI++uRtl6qHgy6vZDNpA=
Subject key identifier:   35:BE:2B:C8:01:AD:38:BB:5C:C4:5C:3B:21:60:96:6A:60:12:52:E8
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       097D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number:          0959
Signing time:             Thu 16 Apr 2026 20:02:46 +0000
Manifest this update:     Thu 16 Apr 2026 20:02:45 +0000
Manifest next update:     Thu 23 Apr 2026 20:02:45 +0000
Files and hashes:         1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: ULa6VL6A/pTgL3vpo1SgoO07FHroQO6itTFGLaClPgI=)
                          2: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: noOL5jEzK8jha8iyDkTIQg6FX0160KexYI9kLW2+DMs=)
                          3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: piaWPOXajzORizybKKdNWVri3dp2v0teRdjIDaord08=)
                          4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: 0BtxTED/WXMP9oTukw6NAAjWaQllEJgBeOkdUwGyy3I=)
                          5: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: BcVqX3QMZjJ8uxKDFNQBNxA0xJqgYL6h1gx88zp3U2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Apr 16 20:02:45 2026 GMT
            Not After : Apr 23 20:02:45 2026 GMT
        Subject: CN=69e14065-37b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a6:1c:ce:35:dd:c6:00:84:cc:ae:4b:42:3d:
                    6f:a8:77:fb:dc:ad:e6:8b:f3:d8:43:97:f7:dc:fa:
                    34:56:16:18:f7:cd:46:c5:2a:b3:e3:88:e7:64:b5:
                    d9:4b:45:f4:ae:84:56:87:31:53:64:3e:d5:fe:cc:
                    1c:2d:11:2d:00:41:d0:a7:0d:57:8d:26:d4:49:82:
                    47:34:a5:06:b1:b7:5a:c9:59:44:72:9a:63:bf:99:
                    7b:3a:b8:c1:28:86:9e:ce:f3:6d:63:a4:28:1b:22:
                    cf:8e:60:a2:64:3b:f1:eb:d0:ba:94:d8:f5:74:5a:
                    1e:0c:cf:0b:12:f4:78:8d:7b:da:e8:68:e4:58:97:
                    08:ce:ec:7e:1d:da:b3:1d:c9:dd:fd:ba:de:be:d3:
                    b6:5a:55:b9:f3:63:58:32:bc:32:2c:4f:af:dc:0a:
                    d6:4f:48:3a:24:0e:f0:3a:da:5d:c3:38:08:8d:51:
                    38:19:a9:6a:40:da:b9:dd:3f:c8:70:61:69:0b:2c:
                    2b:79:19:1d:3b:b2:06:7d:94:bc:23:2f:c8:a5:ef:
                    ce:57:6c:f3:33:fc:64:10:31:cd:1e:ab:76:b9:c2:
                    25:78:6f:05:8e:37:6c:ca:93:50:71:a0:ce:36:a1:
                    95:9a:7b:00:57:78:ab:17:70:b4:ae:9f:fd:0e:75:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BE:2B:C8:01:AD:38:BB:5C:C4:5C:3B:21:60:96:6A:60:12:52:E8
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:18:75:43:e4:18:72:16:9e:e5:83:d1:e8:f1:4c:33:3b:
         a9:b5:b4:42:11:37:15:bd:4d:56:0c:d2:37:40:ad:28:b7:27:
         b5:65:20:a0:d9:f2:27:6f:d3:9b:4b:2e:37:66:a7:28:76:ca:
         b0:37:1a:d1:7d:91:c2:73:30:7a:06:c2:00:3c:98:7b:40:80:
         84:10:4e:7a:e0:3d:f6:0e:fd:9c:c6:d3:d8:9b:ac:e1:c1:be:
         50:6e:6e:33:b8:49:3a:0b:4c:22:3d:e6:b6:a7:58:fa:c4:25:
         3e:0e:73:a3:21:d4:01:db:3c:72:61:99:37:12:13:ca:8c:27:
         30:df:87:29:b6:c6:54:98:67:dc:e0:35:69:86:33:e7:b0:9b:
         5b:a6:2b:54:8e:86:61:80:64:4b:02:4a:ca:5d:18:f4:07:e9:
         05:01:57:dc:23:e6:6b:05:d7:9a:00:a4:cf:7f:a6:9e:06:fb:
         9d:42:1e:da:28:9a:08:d9:9b:8e:4e:63:84:41:3d:76:53:e8:
         0c:b2:9c:6b:0d:d4:a4:5e:53:e4:ac:c0:23:70:31:3c:fb:57:
         e5:e3:3e:b9:4e:de:32:f8:f6:0b:8b:e3:78:c3:e4:25:e2:90:
         06:19:c6:fa:61:1a:1b:08:a1:f1:72:b6:cb:aa:23:eb:49:39:
         71:a0:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:00 2026 by rpki-client