Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
File:                     tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json)
Hash identifier:          /4j3Qbep4pLDJK3HU84RnNN3in11x4aqVHehjNAjdl4=
Subject key identifier:   A3:28:25:00:7B:39:AE:6E:54:9B:7B:86:52:16:5A:AF:F1:7E:7D:B4
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Certificate issuer:       /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
Manifest number:          0488
Signing time:             Fri 17 Apr 2026 01:17:42 +0000
Manifest this update:     Fri 17 Apr 2026 01:17:41 +0000
Manifest next update:     Fri 24 Apr 2026 01:17:41 +0000
Files and hashes:         1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: FE8xajeeX4S4gr+zBEZCoyKo3yHdxygqoWLVSJLFaNM=)
                          2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: vheM5uAeinqDGQFeaGFPdqZpD7OIlMbyVmkXjE8fDNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
        Validity
            Not Before: Apr 17 01:17:41 2026 GMT
            Not After : Apr 24 01:17:41 2026 GMT
        Subject: CN=69e18a36-497c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:b4:dd:22:4c:35:62:8d:bf:1f:52:21:e0:
                    4c:cc:20:8b:55:92:d9:aa:65:bb:2a:84:47:cc:c1:
                    16:47:7d:e1:2a:9e:75:ca:9e:56:88:33:0e:70:2b:
                    65:10:82:4d:c6:61:2d:d7:69:3a:8f:44:57:f8:34:
                    65:55:fa:bb:1b:4a:16:7f:5d:f7:1c:8c:6f:9c:35:
                    c2:2d:7b:de:ff:49:60:49:96:4c:4d:af:59:61:32:
                    24:ad:43:f7:27:ea:80:a9:f3:94:ba:05:23:10:f1:
                    ac:7a:e7:15:5b:96:7a:8a:e9:01:04:36:6e:a6:e5:
                    f5:50:78:cf:75:d0:f6:db:74:8a:31:ff:c9:ea:c4:
                    73:2a:6e:9b:cf:32:74:8b:08:cb:44:18:4c:d6:73:
                    85:06:71:e0:e0:22:9b:ff:8f:6d:35:dd:f1:35:ce:
                    31:b1:47:e7:4c:6d:b2:b9:ba:b2:b1:6e:59:df:76:
                    81:23:53:01:a4:2d:3f:c4:a5:60:cd:4e:46:9e:cf:
                    ff:0e:b7:6c:d8:45:d3:b2:14:7c:5f:f7:6d:2d:60:
                    42:be:49:f7:e1:54:33:ed:6f:43:8f:50:c9:85:26:
                    e1:b6:d1:8b:d0:a0:ba:6c:0b:f1:85:97:31:0d:88:
                    09:70:16:20:92:1c:a2:9f:2f:04:e6:46:24:3e:5e:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:28:25:00:7B:39:AE:6E:54:9B:7B:86:52:16:5A:AF:F1:7E:7D:B4
            X509v3 Authority Key Identifier:
                keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:d7:f8:f2:43:4f:1c:5b:12:d0:98:b0:bc:20:d0:39:92:
         44:51:80:0f:88:58:26:55:67:67:09:da:53:30:2a:72:97:bb:
         aa:7a:d2:bb:a7:2b:60:13:4c:d0:72:ad:be:82:a1:8c:a2:72:
         50:c4:b8:ee:92:ce:dd:a4:9c:46:6b:4a:df:8c:fa:0e:d5:e0:
         cb:3b:e2:5b:2e:3b:46:df:2c:6e:6b:6f:5d:03:9d:bf:c3:39:
         1a:f6:a7:6a:cf:bc:10:23:9f:91:c5:89:58:09:61:c6:05:dc:
         67:55:2c:9f:31:50:be:87:85:17:47:f1:f4:a8:fb:6c:71:58:
         39:89:45:9a:9f:83:22:4c:3c:90:b7:39:39:d8:e8:7d:3b:f2:
         f5:3a:12:05:b2:4f:06:f3:a8:3f:86:55:72:98:75:0c:16:a5:
         a0:f3:69:ed:c8:d9:49:ac:c2:dd:ac:66:e7:7f:24:28:42:9a:
         f8:50:4f:ae:5f:f1:f5:93:96:1f:b0:f5:9c:d7:13:67:84:b4:
         89:2d:e3:04:39:8b:37:c1:27:09:06:2f:55:7a:49:9e:77:37:
         4e:65:b4:d8:f4:fe:bb:19:f3:df:6f:c1:b8:6c:9d:22:84:e2:
         5e:15:78:a8:de:a6:97:61:0b:ed:f6:03:38:3d:08:46:03:c7:
         7c:1d:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:11 2026 by rpki-client