Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
File:                     badIHjljLTOANmkPe0OixINj22g.mft (raw, json)
Hash identifier:          HsmDMfBucyJ5H6TYHDgCmntb4Q9eXIeQsVP+O+X8x5E=
Subject key identifier:   22:68:BC:99:C4:78:A7:F2:47:62:9D:DA:F3:EE:94:04:E2:8E:0B:40
Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
Certificate issuer:       /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
Manifest number:          F3
Signing time:             Fri 17 Apr 2026 06:00:20 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:20 +0000
Manifest next update:     Fri 24 Apr 2026 06:00:20 +0000
Files and hashes:         1: badIHjljLTOANmkPe0OixINj22g.crl (hash: sMPPQSgtglcVUCDrok7kO7nP5jT1ZFz6SCPAuvYfZtk=)
                          2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: kVyhvgjxUwUSm0wPasDIxMkRKwNbqO3guIkhR0YMhkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
                          rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
        Validity
            Not Before: Apr 17 06:00:20 2026 GMT
            Not After : Apr 24 06:00:20 2026 GMT
        Subject: CN=69e1cc74-1b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:6b:51:b3:a5:27:85:e6:e2:20:b4:55:82:
                    24:65:e1:c1:77:ae:99:f7:ca:23:0f:43:ed:c6:16:
                    35:6f:ed:44:0e:7f:71:1b:e1:73:28:d6:e9:55:83:
                    15:b7:c6:49:79:0c:ac:a2:37:12:f1:e6:e4:d6:4a:
                    12:02:5d:38:1d:1c:a9:38:69:ac:81:8c:36:c8:4e:
                    db:9c:dc:33:47:70:c5:26:66:c3:67:c0:79:ea:0e:
                    35:59:c9:50:86:96:b5:84:e2:5e:91:3c:ad:e7:44:
                    bc:62:9e:a7:c2:e5:27:33:73:1a:48:2d:00:98:32:
                    17:f9:25:dd:ee:a2:00:fc:64:0f:b0:79:98:82:6e:
                    88:02:0e:f1:35:f3:97:a4:bd:4e:e3:89:74:43:a5:
                    3b:7e:4f:b4:7d:34:7f:4d:2d:27:80:49:e8:12:fd:
                    ec:c7:02:6a:62:29:fd:1f:c3:55:5a:ca:f4:a9:a8:
                    b7:23:cb:51:e2:e4:a4:e2:b9:ae:03:ec:ac:3f:90:
                    fd:ae:ee:7c:a6:d5:fc:2d:fb:21:a8:cd:6c:93:47:
                    1a:a2:a6:1d:a2:a5:37:a7:bd:2e:92:bb:d9:ec:67:
                    05:79:25:f4:eb:24:c6:52:c0:30:1d:16:81:28:a7:
                    1a:94:c2:01:b6:8f:39:01:db:75:81:f7:45:fe:1a:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:68:BC:99:C4:78:A7:F2:47:62:9D:DA:F3:EE:94:04:E2:8E:0B:40
            X509v3 Authority Key Identifier:
                keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:82:1c:e0:6a:b3:31:d3:d1:0a:59:c1:a5:60:e1:aa:ec:
         1d:41:7f:97:ea:d3:50:a5:3b:98:74:13:66:a5:20:8b:2f:50:
         06:ca:f4:e3:44:24:07:9f:d4:fc:8b:c9:8e:46:0f:76:11:36:
         82:ff:89:8e:a8:8f:1c:dd:80:c1:b1:8a:3a:ce:5a:a9:6f:bc:
         99:d8:c7:7e:dc:e5:8f:66:54:78:25:c3:d2:0f:23:cb:d1:ed:
         05:4c:62:e7:14:a4:41:a7:3d:27:df:04:02:e4:d1:6d:09:9c:
         11:df:c7:05:de:02:cd:ae:fd:23:da:5e:69:b9:1c:dd:0b:c4:
         23:db:8d:fb:58:12:e0:d0:1c:e3:c0:de:62:83:2c:0d:15:86:
         dd:97:00:15:8e:75:3c:6e:42:60:d6:03:cf:8f:ce:3b:2a:9e:
         ea:77:d0:09:0a:f2:80:69:9a:f7:69:a8:7a:70:c0:7e:00:20:
         a5:22:58:20:4f:63:f2:8b:53:8c:39:d7:62:59:13:da:3f:4c:
         f7:21:80:40:39:fd:de:99:93:c5:91:ee:8e:f0:a1:17:98:d5:
         46:d8:64:f7:e9:b4:1e:21:c1:bc:45:1d:f6:9c:69:87:d9:1d:
         8a:f1:1b:95:25:3c:cd:24:77:ff:da:4a:c7:87:9f:f0:e7:39:
         17:27:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:53 2026 by rpki-client