Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File:                     0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier:          1Hb6QiPiR6IykSKRw0fMBjZBCUu6O+OyhV1d4BmA4LM=
Subject key identifier:   3F:1F:19:E3:D4:D0:5D:C1:8F:02:46:7A:67:16:9E:31:81:66:8E:78
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer:       /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial:       0F30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number:          0F1D
Signing time:             Sat 18 Apr 2026 17:30:19 +0000
Manifest this update:     Sat 18 Apr 2026 17:30:18 +0000
Manifest next update:     Sat 25 Apr 2026 17:30:18 +0000
Files and hashes:         1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: 0QEq3LmWIgoOZ+A68ha/76AHI5sy0SI4XwRJcEX9/kc=)
                          2: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: CJcOsAsRwI2HXjgfMv8XqLziZucuo7uRUTz3QROpN9g=)
                          3: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: BXSVEWRNWk6Z5rdKJ6F8tnumvM/u/16zJocy0sihtdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
                          rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3888 (0xf30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
        Validity
            Not Before: Apr 18 17:30:18 2026 GMT
            Not After : Apr 25 17:30:18 2026 GMT
        Subject: CN=69e3bfab-f26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:8f:fa:54:2c:45:c5:2b:9e:e2:d5:b8:ec:
                    3f:c2:eb:9d:aa:7f:1d:6e:92:cf:d7:29:a7:c9:ed:
                    85:31:1a:d4:67:73:7d:ed:e8:d3:2a:c0:ec:84:58:
                    96:a2:82:46:2d:40:45:42:a1:05:6f:d8:33:ba:e2:
                    c7:fb:05:c2:2b:8e:ed:bc:ca:4e:b5:fb:a7:66:27:
                    2d:02:fc:fe:86:6e:b2:75:02:b1:02:88:ea:0f:f7:
                    17:81:ff:73:17:e4:bb:72:c1:28:aa:14:1f:c2:5f:
                    57:f8:01:4f:2b:3d:52:4a:02:99:38:bc:d2:5c:2b:
                    8b:df:49:6c:dc:d7:c8:f8:dc:c3:b6:0c:85:98:ab:
                    71:b1:f4:48:8f:5a:e9:e6:fb:0c:c6:aa:b8:f7:c9:
                    26:19:89:d9:04:a0:7f:c5:1c:ba:cd:2f:bc:df:70:
                    45:25:7e:50:9c:51:a9:0c:47:01:78:d1:eb:54:c0:
                    1c:d7:ee:13:58:1f:dc:d0:5d:6b:6c:e3:4e:41:db:
                    dc:ff:95:d0:e8:38:82:f2:9f:5f:f1:0f:be:12:6d:
                    c3:ab:36:cb:4c:86:92:83:61:98:bd:12:39:9e:30:
                    b5:76:02:10:87:3b:4f:ab:aa:1a:81:f0:b7:fd:ab:
                    53:8b:78:b8:1f:43:5b:79:07:a6:4e:68:13:d4:42:
                    9a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1F:19:E3:D4:D0:5D:C1:8F:02:46:7A:67:16:9E:31:81:66:8E:78
            X509v3 Authority Key Identifier:
                keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:4c:16:bc:df:0f:20:65:a8:c5:68:12:88:28:89:5a:e7:9e:
         56:8b:4b:d9:f5:be:ac:0c:ce:d2:70:44:7d:03:35:c8:91:2d:
         1e:2c:ec:3a:1f:16:1b:68:05:04:d6:5d:2e:fb:e0:7f:7e:f8:
         95:b1:83:a6:5e:8f:b5:36:63:ab:4f:d8:ac:8c:9c:59:28:74:
         ae:15:b8:d1:e9:e5:e1:42:d5:55:ed:cb:a8:0a:be:d9:5b:13:
         bb:44:9f:61:1d:3e:00:47:ad:af:39:cd:12:88:98:a3:48:a1:
         b6:96:fd:9a:60:b8:f9:4d:f9:d0:46:6f:dd:83:71:69:81:8e:
         b1:d0:d0:15:44:00:07:55:8d:9b:fa:6a:40:75:cd:17:b0:b8:
         d4:fa:8a:8c:78:77:54:51:e5:c4:e2:43:60:ba:f6:23:56:a4:
         9a:6a:61:3b:ff:c0:12:fe:de:69:a7:26:6b:24:99:59:d2:08:
         08:db:63:5b:f9:43:50:7a:7e:22:54:9e:84:c5:67:86:86:cf:
         71:ed:fa:35:ca:87:70:b0:38:bc:c0:c5:b2:40:35:a7:b5:94:
         96:51:9c:d2:52:99:bc:a7:be:7a:13:7f:b0:51:78:d7:2e:e8:
         a0:fa:e2:cd:a9:c5:5e:25:a6:d8:4b:2d:8b:75:dc:04:b3:5b:
         cf:b4:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:35 2026 by rpki-client