Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
File:                     CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json)
Hash identifier:          4zyi8WnwREafP9J+Nejo7jYAbFUg8wgjMgbo3Cte/sg=
Subject key identifier:   B7:82:98:7D:0F:50:C8:CA:9F:73:48:0D:59:BC:ED:45:7F:CA:57:07
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Certificate issuer:       /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial:       0902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
Manifest number:          08FB
Signing time:             Thu 16 Apr 2026 20:13:28 +0000
Manifest this update:     Thu 16 Apr 2026 20:13:28 +0000
Manifest next update:     Thu 23 Apr 2026 20:13:28 +0000
Files and hashes:         1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: TxpreyQSDqKS61VPdKO2Bg7kT+PvNciySgOOCUP1PJs=)
                          2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: Z2QNPzHw5Ee7FsMiXK3KEIBE/uAyk1VrZxpoDjQMDc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
                          rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
        Validity
            Not Before: Apr 16 20:13:28 2026 GMT
            Not After : Apr 23 20:13:28 2026 GMT
        Subject: CN=69e142e8-f07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:b6:df:91:04:6c:ca:28:81:fb:80:25:50:
                    7b:9b:8a:ed:b5:69:0e:62:35:37:a1:17:24:bf:7f:
                    40:68:5d:12:dd:04:36:c3:d8:f5:9a:e8:9a:ae:71:
                    af:4d:e7:04:6d:71:15:e7:a6:30:07:4c:fd:1a:63:
                    55:b4:41:15:ac:2a:07:61:2c:0f:fd:c1:cd:c0:c8:
                    23:cf:69:a3:e9:1b:a2:06:60:c5:0b:5a:7d:34:b1:
                    a1:c7:d7:c9:3d:21:47:c5:ec:38:37:c7:4b:ea:83:
                    ac:05:61:2b:8d:15:a3:f0:75:b3:5a:31:a3:50:76:
                    17:02:b4:f3:f7:92:8b:14:45:56:89:5e:2e:4a:20:
                    ca:6f:53:43:e1:c3:c4:21:f3:35:1e:be:b3:ba:5c:
                    66:be:6f:64:ef:0a:b8:6e:2f:49:ae:c3:f1:70:69:
                    58:03:13:cb:b4:4a:03:01:86:6f:0b:07:3a:f5:bc:
                    09:9c:d6:4a:05:d6:e6:db:31:0e:37:ba:52:da:cd:
                    7d:b0:33:c3:bb:86:a9:90:92:bb:ea:2c:71:ae:00:
                    c3:f6:cc:c1:8d:99:39:a7:77:2d:50:be:29:d8:6a:
                    fe:a6:7c:23:3e:a4:6d:b6:1e:c4:bf:e7:40:df:ab:
                    59:d8:2a:22:36:91:ca:64:ad:01:13:65:d3:98:be:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:82:98:7D:0F:50:C8:CA:9F:73:48:0D:59:BC:ED:45:7F:CA:57:07
            X509v3 Authority Key Identifier:
                keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:39:65:96:3c:b5:ef:45:66:82:3e:92:39:b9:d1:7d:ce:0b:
         2b:40:36:21:ba:3b:65:2d:47:e5:e2:27:4d:cc:cf:ea:da:98:
         65:80:38:1e:9f:48:c5:30:98:4e:da:20:ff:09:c4:01:85:da:
         cd:5a:52:6d:49:da:13:77:e7:1a:40:84:7d:ec:99:a9:b9:08:
         32:12:62:1a:c5:3c:cb:57:01:8a:26:4c:49:57:ab:9a:ea:31:
         48:5f:9d:65:c7:cd:a3:bd:93:bb:0a:a3:25:f1:ed:30:17:45:
         77:f2:a2:a3:f3:63:f8:2a:fd:9b:01:67:11:41:09:da:bd:bf:
         54:c0:e4:59:f8:c5:2d:a3:02:5b:5b:f8:e9:8e:68:d7:19:c1:
         9a:75:be:46:46:c2:54:43:b1:00:a5:ad:04:06:01:ec:15:3a:
         f0:95:6b:0b:10:a6:6a:48:c0:8a:e6:5a:49:d9:3d:86:ec:45:
         88:24:8b:4b:48:1b:43:77:34:5d:8f:fa:14:82:43:a9:ce:7b:
         ed:f7:45:b8:eb:f4:66:e3:d4:5e:91:da:ea:1e:d4:df:ef:16:
         e5:4e:04:d4:5a:b8:d3:29:fd:7e:bc:84:b2:ec:f0:6d:72:d0:
         29:92:14:06:0d:cd:92:10:fe:8c:ae:9c:4c:a5:11:86:fb:75:
         33:39:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:38 2026 by rpki-client