Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File:                     P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier:          h6FllZIAfbzNEbtOtGeXng3wQWhycZHyeZlENvJ28OU=
Subject key identifier:   2E:20:F0:F8:5D:69:CB:04:39:24:08:6E:53:1A:08:02:23:87:EC:0A
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer:       /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial:       0308
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number:          02D1
Signing time:             Fri 17 Apr 2026 01:31:08 +0000
Manifest this update:     Fri 17 Apr 2026 01:31:08 +0000
Manifest next update:     Fri 24 Apr 2026 01:31:08 +0000
Files and hashes:         1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: OJoO3ibi4eNACfF1YWDZG3cQY0wmqugFUyGdRwyn0gA=)
                          2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: E6jRmVhR8Wb8IiIIspZxX6LgF3mhurpDSKUcMeN6BpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
                          rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
        Validity
            Not Before: Apr 17 01:31:08 2026 GMT
            Not After : Apr 24 01:31:08 2026 GMT
        Subject: CN=69e18d5c-7c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:44:06:2d:41:bb:04:74:4a:a5:86:16:65:
                    8c:99:f0:76:aa:e8:3a:f4:77:a0:69:81:ee:be:07:
                    02:a4:23:55:80:10:4f:d7:07:7d:8e:18:f1:f6:a1:
                    19:ed:e9:50:93:aa:ee:5f:f6:1a:ae:61:c3:97:00:
                    80:a0:25:25:da:04:3a:02:33:c1:f1:60:73:45:d9:
                    e7:34:39:0f:f2:fc:3e:87:76:64:07:2b:8a:80:b1:
                    f8:02:9f:53:9c:30:db:f5:bf:db:10:b3:2d:d9:f1:
                    d1:c3:53:f5:42:19:3c:b1:f7:c7:4a:a2:b9:43:5b:
                    38:b0:53:91:5f:13:57:98:13:77:b8:17:fe:63:51:
                    b5:cd:a1:eb:8b:b7:b5:a7:97:ab:a0:c9:f0:16:fe:
                    2d:49:f2:95:8a:05:07:92:f7:62:03:1b:01:d8:4f:
                    d6:9e:fa:73:6d:6a:83:60:0f:16:a5:49:90:f0:e9:
                    fe:4f:52:ff:5a:13:cb:81:23:f9:8a:f2:8e:76:20:
                    7a:12:d3:05:ce:2e:40:29:b1:f6:f4:67:e6:af:30:
                    29:0b:50:6e:75:62:3c:8d:44:44:90:0b:bf:25:40:
                    6e:21:63:11:12:84:4d:1a:bb:33:f0:c0:bf:81:9c:
                    5b:09:63:63:de:20:ff:dc:cd:bb:7a:ca:cd:a2:00:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:20:F0:F8:5D:69:CB:04:39:24:08:6E:53:1A:08:02:23:87:EC:0A
            X509v3 Authority Key Identifier:
                keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:78:d0:0f:5b:e6:bc:fe:81:1b:97:2a:2c:91:e4:19:84:ce:
         84:eb:f3:a1:75:63:08:e8:4b:f2:34:6e:59:31:d7:44:7a:32:
         1a:4f:41:b6:d6:72:ce:1a:ee:8a:9a:0d:c7:86:ef:40:64:cb:
         46:b0:54:e5:85:17:d9:97:17:67:47:c1:d3:91:14:97:0a:e2:
         5f:22:50:12:18:94:0b:d6:fd:3b:d0:d7:ee:be:0d:9f:77:84:
         1e:e6:14:24:21:be:c9:d3:27:a0:bf:1b:2f:2f:b3:ae:16:ac:
         12:34:4b:e4:85:31:e8:53:57:b3:04:65:ad:62:fb:d1:1e:c2:
         7a:49:2e:45:da:64:63:88:c7:be:31:43:bd:a6:37:d1:c8:85:
         f0:a4:ce:8f:fb:77:44:d4:b6:a6:07:97:9c:0e:57:0d:85:d2:
         b9:70:4a:21:b4:7d:0d:65:1b:37:22:52:9d:cc:02:51:31:0c:
         ac:44:30:32:45:26:9c:55:6e:d8:18:d8:2c:32:1c:ce:b8:91:
         86:60:7e:24:7d:c9:b8:68:6a:0b:2a:a1:fa:51:9c:46:03:e6:
         f8:ac:b3:25:30:80:26:ab:99:ea:90:66:d8:88:bd:ba:a5:8f:
         51:62:3c:aa:39:0d:0f:53:88:dc:12:61:fe:a1:22:e2:c3:d3:
         4c:2f:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:44 2026 by rpki-client