Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
File:                     tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json)
Hash identifier:          eBq9ow+aFl616Qbl3qFWt1CWb2itIJRZIXVbKmyUWdc=
Subject key identifier:   30:E9:29:28:75:CE:F8:BB:AC:FA:BD:0E:B7:A1:CA:C1:AB:B3:D1:CC
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Certificate issuer:       /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
Manifest number:          0150
Signing time:             Fri 17 Apr 2026 04:50:07 +0000
Manifest this update:     Fri 17 Apr 2026 04:50:06 +0000
Manifest next update:     Fri 24 Apr 2026 04:50:06 +0000
Files and hashes:         1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: bM8GbUVY3eha29vjIx6dbvsd0+Eiw+MFYHnJ3eEj3LQ=)
                          2: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: e7uP2Q15Y7+PdXnvPFnRHiamG3196fJe6Q0lPV/VwQQ=)
                          3: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: nUPXQLFgYxbwvoUneYWVygADhQDRKvtWC/3dO1oUTC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
                          rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
        Validity
            Not Before: Apr 17 04:50:06 2026 GMT
            Not After : Apr 24 04:50:06 2026 GMT
        Subject: CN=69e1bbff-1f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:b8:96:99:05:c4:9f:11:3b:00:5b:8e:ab:
                    7f:1c:91:21:7c:8d:59:4f:d8:f2:40:1a:ec:c8:9d:
                    8c:fa:0f:c1:9f:42:a5:c7:59:33:3c:44:14:5b:8f:
                    d7:08:cc:82:94:1d:05:d8:40:f1:27:ed:29:e1:90:
                    ca:4b:0e:23:16:e9:a5:04:03:1f:9c:4d:79:d3:7c:
                    16:00:f6:86:a8:c6:17:7a:de:98:ff:c5:44:0c:ec:
                    f4:42:ce:03:16:05:cc:3b:50:eb:a7:9b:06:20:54:
                    69:ab:05:d2:3a:91:81:51:61:5f:b8:a6:38:bb:b5:
                    a4:fd:eb:fa:e8:5d:f5:ad:17:5a:07:5a:b2:97:af:
                    a6:09:e1:52:5f:94:64:6f:17:e1:73:ee:52:73:51:
                    ed:6e:d9:78:64:2e:f4:72:68:a2:d7:b1:3f:fe:93:
                    7b:81:29:0a:65:13:f8:fa:92:69:e7:6d:ba:0b:69:
                    29:41:7b:b5:a6:91:4f:7b:a9:25:ce:bb:f3:f7:6e:
                    f3:54:0c:5e:f4:e6:90:d7:85:45:b1:8d:e9:e8:de:
                    46:c7:9f:14:b6:2f:20:a9:42:1a:98:83:c4:4b:00:
                    01:d8:20:92:4c:87:ff:43:b1:fd:46:d5:62:c2:08:
                    e4:16:b4:f7:51:28:e0:42:c6:e5:ea:6c:bc:71:43:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E9:29:28:75:CE:F8:BB:AC:FA:BD:0E:B7:A1:CA:C1:AB:B3:D1:CC
            X509v3 Authority Key Identifier:
                keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:ec:06:35:c8:4f:33:bf:6b:6f:50:ae:43:88:13:07:5c:
         f6:7b:d9:b6:83:51:9f:26:5e:e7:eb:64:e7:75:3b:cc:79:ff:
         21:5d:aa:26:32:29:5d:6e:ab:40:d4:09:12:ee:ad:7f:64:2a:
         7a:d1:9e:c1:ce:e0:de:db:db:23:a7:4b:72:13:ba:d5:f8:0f:
         66:da:20:2e:04:04:76:30:03:65:4d:71:09:75:c7:1c:10:9a:
         fb:2a:72:3a:82:76:6c:56:d1:75:c9:9e:78:da:c5:87:69:91:
         fd:3d:9a:3f:85:78:1e:87:79:0a:52:fe:20:52:b4:ad:d2:e0:
         92:e6:54:1b:e0:fa:52:7d:19:9b:b8:25:9f:43:f7:72:57:d2:
         21:3b:f1:88:85:95:bf:67:a9:9e:7f:ef:da:8b:17:95:1d:9c:
         3e:f1:6a:9d:54:c4:1d:36:d1:c3:53:71:f8:f3:11:68:1e:96:
         41:b5:32:3d:28:b2:ee:89:b8:0d:8e:a9:4f:b5:5d:bd:aa:49:
         fc:0a:3e:64:26:56:3a:89:78:38:14:77:51:dd:d6:2f:5d:69:
         aa:6a:db:5e:6d:bd:7d:12:34:4c:b8:7e:d6:4a:07:e4:77:fe:
         40:fe:4d:f7:c1:59:db:e5:46:62:b1:4a:59:6b:33:4c:a4:53:
         a9:42:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:30 2026 by rpki-client