Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
File:                     7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json)
Hash identifier:          OoKrQKwh+EDZ12Bm42v3DUMDptUun/owE+zPET3RqLU=
Subject key identifier:   CF:9C:A0:3F:6B:ED:D5:F5:98:D2:30:83:43:38:DF:24:96:27:2E:2E
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
Manifest number:          016F
Signing time:             Fri 17 Apr 2026 04:30:16 +0000
Manifest this update:     Fri 17 Apr 2026 04:30:16 +0000
Manifest next update:     Fri 24 Apr 2026 04:30:16 +0000
Files and hashes:         1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: k+vy2fVMU4vEUaSld8s/rjoRO8jQorpiZtY3BU4Z8Ug=)
                          2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: orF+fCZHbfbY4ughfyxj36yRT872IPKzGFkv9K8j5SA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Apr 17 04:30:16 2026 GMT
            Not After : Apr 24 04:30:16 2026 GMT
        Subject: CN=69e1b758-29a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:78:b5:80:0c:c7:4f:be:bd:ba:ca:45:19:
                    c7:35:fa:f8:79:47:1c:14:1d:e8:89:13:3d:62:b9:
                    d7:88:76:17:c4:9b:0e:0b:b1:13:f4:4d:88:49:60:
                    f1:ac:c8:78:ec:4c:7d:44:78:d2:97:47:99:7e:a6:
                    58:bc:13:a5:f0:17:c9:30:69:bd:4c:97:d0:1f:ba:
                    c3:fb:55:74:97:fa:43:bc:14:e9:ec:b0:92:da:d7:
                    f8:c0:a7:15:e4:45:1e:e5:c8:9d:f5:0c:0e:86:0a:
                    8e:ec:4e:03:d6:2d:6a:aa:00:72:ee:e2:90:0d:33:
                    de:5c:2c:eb:96:4d:bf:41:32:df:e2:53:ee:83:3d:
                    93:e2:96:51:6b:f7:fc:1d:cb:f5:da:36:27:d1:4c:
                    f7:67:82:8e:23:d4:a5:5a:42:22:56:29:0f:24:ca:
                    bd:d0:cf:6d:a6:a5:06:47:f3:28:c1:66:8c:48:92:
                    f8:1d:a9:ca:59:a9:d7:86:5b:a1:b5:8b:43:fc:8f:
                    88:49:5b:00:f0:ef:e8:e3:fa:e0:f5:ca:af:14:2f:
                    7f:9b:9d:ed:60:cb:84:2a:ad:53:b9:8b:a5:72:c2:
                    69:4d:5f:4f:d9:fe:93:12:37:83:30:88:82:c7:14:
                    18:ad:e3:db:a8:4e:55:78:ba:ec:89:ee:44:6e:f2:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:A0:3F:6B:ED:D5:F5:98:D2:30:83:43:38:DF:24:96:27:2E:2E
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:a6:0b:77:7d:7e:bc:7b:83:76:b4:62:70:05:7d:9c:d7:
         03:7b:74:67:24:14:6d:18:2b:ec:64:53:8a:6c:29:0e:2d:25:
         3d:2b:8b:ff:28:ff:9a:d3:64:7f:4a:02:71:50:b4:01:b2:bd:
         59:5d:f4:b2:79:c9:2b:6e:53:19:48:43:2e:89:c8:88:32:1f:
         84:e3:5b:e1:95:95:a5:59:f1:60:f5:af:00:7f:07:af:98:8e:
         8b:69:fe:3d:a5:a3:bc:7a:92:52:61:d1:34:36:44:54:08:5a:
         b8:87:7f:7f:1b:ee:74:46:44:e8:6e:d4:50:f5:90:2f:72:f0:
         e3:35:69:68:1b:e2:58:99:83:c2:f1:84:31:27:e2:ef:02:12:
         e3:8e:82:61:6d:da:68:ab:00:1f:72:41:35:22:7c:7e:81:af:
         c9:8c:6f:df:ef:ac:0c:8c:5d:cf:17:f4:f1:ec:8f:63:70:aa:
         d0:f4:7e:dd:85:dc:cc:b5:74:f5:64:04:e9:b6:d7:9e:2b:49:
         2d:28:8e:bd:8a:95:d1:78:c8:50:42:5f:a8:72:38:4e:10:c9:
         9b:b8:98:7a:13:1a:f2:6b:22:50:88:46:96:26:9b:a9:ee:7b:
         ba:33:cb:fa:45:34:2f:43:88:f1:81:ea:0e:a5:12:79:19:1a:
         29:95:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:32 2026 by rpki-client