Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
File:                     e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json)
Hash identifier:          ViwecDdUBya8ltY1eKKEkylniURVoMU556AFvHL0Ja8=
Subject key identifier:   B9:D4:B1:33:BB:47:7E:23:C3:C3:AD:6D:46:2B:83:F7:C9:C9:1E:ED
Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14
Certificate issuer:       /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
Manifest number:          0240
Signing time:             Fri 17 Apr 2026 02:15:47 +0000
Manifest this update:     Fri 17 Apr 2026 02:15:46 +0000
Manifest next update:     Fri 24 Apr 2026 02:15:46 +0000
Files and hashes:         1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: 9I7fpXq8myuZhQckm46K88QyxwH6a/tWv38gQef5fjc=)
                          2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: xTVPZTGVFcQ941n2VG9Gi5wdER1nTq4jaX59NbOs0yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl
                          rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
        Validity
            Not Before: Apr 17 02:15:46 2026 GMT
            Not After : Apr 24 02:15:46 2026 GMT
        Subject: CN=69e197d2-4b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:47:57:30:19:4a:f5:c8:8d:b1:ad:52:95:
                    81:f4:42:c7:ac:6f:2b:ca:51:08:40:be:b4:cd:e7:
                    a8:8d:89:5a:14:5d:ac:8e:40:53:fb:92:98:60:67:
                    a6:e5:ef:26:25:86:70:32:9d:e2:c3:40:04:96:70:
                    87:9c:47:53:06:bf:18:a8:de:ed:12:33:df:3f:9a:
                    38:80:68:ea:89:d6:f9:be:61:36:66:55:89:9e:9c:
                    ba:21:51:70:46:0f:19:6b:e3:9c:81:0a:85:12:03:
                    2e:4e:1a:e0:e6:cd:4f:46:4d:e3:f4:93:a1:85:e0:
                    8b:59:71:72:87:c7:08:32:7c:7c:90:37:ac:c9:9f:
                    6e:9f:6c:8a:91:de:4c:1d:b5:3f:2f:06:9c:f2:ea:
                    c1:e9:86:c1:be:6c:23:cf:23:0e:a2:b3:32:b6:8e:
                    34:ad:82:76:5f:8f:87:09:ba:00:84:bb:93:dd:4f:
                    85:2e:de:17:90:c0:39:20:02:a9:9f:f4:0a:66:51:
                    cc:85:b6:01:57:24:1b:23:25:2a:28:95:65:08:6e:
                    f1:57:4a:54:9b:44:33:ef:43:f9:42:ee:8e:23:c4:
                    71:cc:fd:00:9e:cb:87:de:cd:9f:a6:fe:cb:63:89:
                    1c:54:23:8d:6b:f9:1a:bc:7d:36:79:2a:07:96:60:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:B1:33:BB:47:7E:23:C3:C3:AD:6D:46:2B:83:F7:C9:C9:1E:ED
            X509v3 Authority Key Identifier:
                keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:6e:3f:a1:7a:a5:4d:4b:10:22:57:05:5a:32:66:17:7e:
         bb:32:46:e8:2b:eb:90:40:49:66:45:27:a4:8d:06:f0:8d:c3:
         4a:e2:0e:11:bb:34:42:72:34:df:e6:04:a0:76:a1:fa:c3:8e:
         34:02:42:cd:4a:52:a8:c1:e7:7b:33:e4:57:81:47:7c:77:40:
         c1:de:a0:60:fb:f5:52:a8:9e:a1:11:c7:9c:84:b7:17:53:56:
         bf:a2:58:a0:bf:e7:88:a0:01:d3:f4:98:c2:c2:c9:57:b7:f7:
         83:ad:cc:55:de:86:2e:19:ea:5a:73:59:7c:e1:35:0d:72:13:
         fc:39:74:9d:93:9c:35:da:97:56:3b:36:65:ea:f0:f6:0e:22:
         a7:40:15:13:a6:1c:a3:f9:3a:3b:10:68:52:a4:a9:3d:15:bc:
         f9:8c:5f:a7:8e:f4:93:9f:a3:4c:31:eb:e6:37:64:e6:85:69:
         b4:fa:20:20:2d:7d:bc:b0:e2:22:49:09:68:8f:63:22:df:96:
         db:70:74:9e:fd:58:f9:6a:a0:64:81:8a:89:08:2d:19:7f:39:
         0a:c3:0d:06:29:96:be:96:70:33:60:3c:54:0b:d9:41:e1:58:
         37:bd:23:7f:da:ae:56:9a:7e:c6:02:1d:3e:ab:6d:0b:ef:39:
         8e:b0:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:26:47 2026 by rpki-client