Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
File:                     C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json)
Hash identifier:          1wz65VyXNb4Zmb4dE5oZ1QQuJfi17gpAz+HZ3MEVvx8=
Subject key identifier:   26:FB:F8:67:07:8D:9C:D5:8B:8E:49:4D:E9:FE:B0:B1:E4:80:8A:6E
Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Certificate issuer:       /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Certificate serial:       08AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
Manifest number:          089E
Signing time:             Thu 16 Apr 2026 20:28:56 +0000
Manifest this update:     Thu 16 Apr 2026 20:28:56 +0000
Manifest next update:     Thu 23 Apr 2026 20:28:56 +0000
Files and hashes:         1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: neRy3IGiVef5+1yHXA+3na0zCw3CoyZtRgx926ahIJo=)
                          2: E382826C4AF611EFB245AE59C4F9AE02.roa (hash: zOV7yFGbs0pfqUQajI5z0XYeqwWi+v4bPf0Ma7OIoeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
                          rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155DEB, serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
        Validity
            Not Before: Apr 16 20:28:56 2026 GMT
            Not After : Apr 23 20:28:56 2026 GMT
        Subject: CN=69e14688-8c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:b9:e1:62:e2:7a:a7:59:a5:0c:d5:50:b5:
                    6d:03:55:3a:17:03:f5:26:fa:a3:fe:36:2f:a8:30:
                    03:de:8c:77:f8:d5:ca:82:cc:11:8d:1d:ef:70:b9:
                    f9:80:24:d8:3f:db:47:64:ab:0b:12:16:28:2e:cf:
                    fc:3d:7b:8f:44:d2:9f:9f:16:16:6e:5f:d8:ac:fc:
                    e2:eb:04:d3:31:30:d9:0b:e6:cc:e6:8d:14:28:71:
                    3c:7b:8b:b2:a4:52:a9:db:23:77:3f:33:07:a2:c5:
                    f7:a3:67:6a:b2:75:c7:0a:be:6a:0a:e9:9e:bc:0e:
                    ec:fb:f0:cc:36:78:08:dc:2b:45:0b:77:87:bb:d8:
                    a4:a0:19:50:bb:b2:fc:21:40:f0:d2:a4:8e:32:87:
                    cd:4b:58:36:d1:e0:48:9a:d1:a5:a5:dd:db:b0:5f:
                    bf:f3:49:fd:8c:70:c7:6e:6a:a0:c8:f7:9e:bf:66:
                    ca:b1:9b:5d:fb:cc:5f:f7:39:50:55:17:bb:fc:19:
                    3b:22:51:bb:e5:3b:20:96:c1:80:c3:96:af:23:51:
                    de:26:a7:7b:fa:ef:70:25:aa:e8:bf:e2:4f:af:c4:
                    ff:ef:e1:19:bb:56:39:c5:a2:1b:f8:1b:4c:33:2b:
                    79:af:fa:17:e1:2e:f3:65:64:7a:f8:06:01:ce:6d:
                    60:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FB:F8:67:07:8D:9C:D5:8B:8E:49:4D:E9:FE:B0:B1:E4:80:8A:6E
            X509v3 Authority Key Identifier:
                keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e9:ad:e6:56:f0:c8:7c:cc:88:85:1c:3d:fb:9d:69:32:e2:
         83:2c:d4:2a:49:87:32:2f:78:13:c8:85:58:c4:f6:d8:53:9a:
         87:e0:5e:89:f8:0a:ec:b6:32:e5:cf:c0:22:c8:32:1f:a5:75:
         29:9f:f3:66:f4:76:ee:6c:c9:4d:bc:41:68:37:bb:00:f2:d5:
         ab:02:9f:3f:14:83:71:4f:26:84:64:ff:13:5c:d0:9e:bd:d0:
         1c:43:ef:f7:9a:24:11:a2:99:7e:33:63:1f:77:84:c8:b0:13:
         4a:d8:cb:5a:cc:31:28:9e:43:9f:0b:84:6f:02:33:2a:0d:62:
         e4:94:7a:57:0e:dd:2c:fc:58:27:f3:16:d7:aa:12:6c:83:7c:
         d3:53:e7:16:58:a4:92:8c:70:75:6c:19:6e:a5:9b:d8:99:fa:
         1c:76:22:7f:03:1e:cc:97:0b:55:79:47:91:48:1c:05:23:17:
         75:31:be:8a:56:5e:c3:57:c2:90:3a:0f:69:92:f7:ac:06:83:
         e3:c0:a9:5d:02:26:7c:65:11:58:6c:49:c7:4f:18:10:ba:28:
         29:f5:6d:08:7b:99:19:d1:6a:d4:7d:b2:fd:1f:14:67:dc:09:
         ea:5e:eb:43:98:77:a1:ae:65:fa:14:e5:24:6d:df:3f:7f:a5:
         22:a9:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:23 2026 by rpki-client