Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File:                     zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier:          R2Ibvq93QfneV3dhDtec8yseQPweLOi18YCSu0DFhWk=
Subject key identifier:   3B:AD:38:BE:AB:F8:56:B7:13:CA:7C:9C:CF:41:E8:2C:DF:A2:9B:3A
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer:       /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number:          7B
Signing time:             Fri 17 Apr 2026 07:40:13 +0000
Manifest this update:     Fri 17 Apr 2026 07:40:12 +0000
Manifest next update:     Fri 24 Apr 2026 07:40:12 +0000
Files and hashes:         1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: 7wqkY64OzRIEML474EZcHwEnnU6RKw2v6nHWZGUkwik=)
                          2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
        Validity
            Not Before: Apr 17 07:40:12 2026 GMT
            Not After : Apr 24 07:40:12 2026 GMT
        Subject: CN=69e1e3dd-43fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:7c:d5:e8:41:f9:bf:ac:f1:c5:31:e4:94:
                    70:f0:8d:5e:1a:ad:58:5e:29:ce:e8:ca:9d:67:0d:
                    1c:6d:07:1c:2e:65:d3:a6:9c:24:e3:77:3a:6e:dc:
                    58:0c:e4:40:7c:48:71:f3:aa:2e:41:0e:67:07:5e:
                    b5:93:c5:a1:60:aa:76:9a:50:d7:c4:63:7e:17:a1:
                    16:de:84:0c:81:b2:d2:45:84:5e:d9:da:1f:2d:51:
                    ad:eb:32:70:1d:08:97:26:e1:19:d8:05:0e:00:d9:
                    9a:8c:66:7f:86:f9:c2:be:48:ec:f6:bb:e9:99:d7:
                    83:10:4a:e3:55:a0:06:cc:d4:b5:c0:9f:c1:a1:4e:
                    bd:eb:27:3c:14:c0:80:94:32:e4:46:21:65:57:c2:
                    8c:e3:8c:99:c0:ed:99:e4:63:32:02:75:7d:82:f3:
                    7f:52:a1:7e:f4:67:26:fe:4a:52:07:c8:9c:eb:35:
                    d0:a4:bd:bf:d1:4b:e1:cf:20:af:40:1a:0f:ee:89:
                    28:92:10:06:16:8d:0f:8a:51:a8:18:b6:6c:63:c5:
                    13:79:eb:4e:a9:99:2a:a9:68:01:57:cc:7f:a5:35:
                    63:57:2c:72:bc:a9:53:a4:3d:d3:c7:e5:e2:ae:6e:
                    65:5c:b8:9f:a6:b1:7f:80:34:2f:96:bc:2c:7f:40:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AD:38:BE:AB:F8:56:B7:13:CA:7C:9C:CF:41:E8:2C:DF:A2:9B:3A
            X509v3 Authority Key Identifier:
                keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:ce:44:00:93:07:81:04:4f:6d:25:6d:f0:c8:ca:b8:e9:
         b1:9a:9e:78:ba:99:ec:5b:35:32:2f:0e:5d:db:ef:81:9d:0b:
         f9:a8:82:92:72:bf:34:1a:c7:9a:64:fe:da:86:6f:ad:a5:08:
         23:de:ff:71:a0:71:75:c1:6c:29:7b:a8:08:eb:ad:93:1e:78:
         ad:37:98:1d:d1:7f:9d:9e:c7:22:ec:92:21:78:d4:e5:b5:89:
         e1:91:4b:d8:0b:c9:33:ed:5a:23:16:f5:49:8d:4d:81:6e:0b:
         94:2b:d6:66:db:04:18:73:21:f2:0f:f4:d7:38:28:d8:cc:36:
         bf:af:a0:57:b4:ac:46:13:22:df:60:ef:39:f5:d1:a6:cc:f0:
         79:d4:cd:b2:4f:a4:bd:ef:39:5f:c7:d8:01:fe:1d:eb:db:72:
         fb:91:b9:de:a2:60:ca:f5:6e:5e:2b:23:cf:c1:a0:cc:66:9b:
         b3:97:29:b5:22:73:84:3c:ce:3e:92:f5:3c:79:9c:68:62:06:
         3f:b7:dd:cb:20:5b:17:f9:fc:57:9b:60:ad:b7:f0:52:ed:02:
         54:71:b5:95:8a:87:4e:1a:37:62:67:34:b7:91:08:d4:48:2c:
         b0:ed:2d:ff:89:8d:c5:59:9c:11:1b:97:ce:c4:04:f5:1e:78:
         2e:dc:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:33 2026 by rpki-client