Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
File:                     2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json)
Hash identifier:          1BXeyNV97pqW0NEtQb7YUXKrSzNV2btOWjiGIgKh8Lc=
Subject key identifier:   66:4D:69:FE:5F:05:F8:62:6F:52:F7:F3:D7:36:ED:FA:01:D3:1E:59
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Certificate issuer:       /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
Manifest number:          0172
Signing time:             Fri 17 Apr 2026 04:27:36 +0000
Manifest this update:     Fri 17 Apr 2026 04:27:35 +0000
Manifest next update:     Fri 24 Apr 2026 04:27:35 +0000
Files and hashes:         1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: xZLxIkRCe0PcSAB2vtJ3qftkZfbQPXoCf72xs4tta8Y=)
                          2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: LYriHLSpUhMr55UlNlgp7shUCvecZ8GUsEOVzeACv2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
        Validity
            Not Before: Apr 17 04:27:35 2026 GMT
            Not After : Apr 24 04:27:35 2026 GMT
        Subject: CN=69e1b6b8-353d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:7a:07:be:63:07:1f:2f:f8:29:97:70:e1:
                    a0:25:18:61:d4:77:3e:6a:d1:c6:35:2d:33:39:4c:
                    91:e9:b3:4f:59:d7:7a:b4:04:7b:4f:1e:bc:36:c1:
                    b8:11:57:f2:e7:76:88:6f:54:e3:69:e5:10:d9:56:
                    68:0f:8b:f4:ee:f4:ea:bf:da:92:12:72:d1:58:d3:
                    f6:4f:14:9f:cf:a7:42:89:07:f9:14:fb:26:b2:a3:
                    8e:d8:92:c4:75:34:02:c3:fc:5d:1a:12:49:19:c8:
                    0e:0e:94:4b:0a:74:8a:ea:05:17:d4:9a:bc:cf:c4:
                    61:c5:43:ef:00:58:80:2d:e0:95:50:54:8d:3f:24:
                    e9:08:0b:5c:f7:ad:a7:3d:8c:92:76:54:ac:d3:71:
                    a2:ca:a8:b7:d8:32:84:e3:4e:8e:4c:f3:ae:3c:22:
                    6e:52:73:a1:88:77:d4:2e:80:54:90:b6:c5:d1:43:
                    c6:a1:98:5e:ba:fc:e3:09:72:55:88:04:6c:e6:5b:
                    34:4b:b8:29:e5:f8:2f:e9:bc:b1:16:2b:2a:de:b1:
                    d6:d9:a9:87:c7:1e:bd:69:64:71:47:31:a7:33:d2:
                    1f:4d:df:59:22:39:8b:3c:fb:a2:97:38:bd:8a:d1:
                    09:be:99:b6:9a:88:48:3c:fa:3f:22:19:f5:4e:a4:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:69:FE:5F:05:F8:62:6F:52:F7:F3:D7:36:ED:FA:01:D3:1E:59
            X509v3 Authority Key Identifier:
                keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fb:fc:48:74:5e:4a:ef:ed:fa:1f:30:96:7d:ce:21:d8:c8:
         26:10:6c:9d:2d:58:ab:59:1f:4c:ca:d6:e6:4d:64:45:54:cc:
         4c:98:0f:6e:01:fe:60:56:08:ff:0f:38:88:cf:8c:02:a1:3c:
         48:40:08:40:a8:57:65:29:f6:1f:6d:88:c2:72:c3:27:cb:42:
         cc:43:b2:8e:80:4c:9c:6c:f2:fc:66:ed:c3:95:3e:c0:1b:26:
         7b:1f:ee:9e:1e:34:38:59:9f:d8:5e:f4:53:d4:0a:3d:82:d5:
         3a:46:30:07:5f:48:3c:0d:ab:e9:f5:0e:d9:bc:84:c9:5c:5d:
         20:36:18:ac:ba:ed:33:da:c9:2b:6b:71:c3:0d:42:fa:98:6c:
         88:43:9c:f3:0c:03:28:b0:df:04:8d:80:43:09:02:f4:71:af:
         e2:1c:5b:b8:e6:ef:29:d9:d3:fc:e2:cc:bf:d9:12:a2:d1:0d:
         4b:5f:35:3f:b6:31:a7:cf:5f:ae:6a:0c:22:23:02:15:0e:72:
         ed:db:df:f6:9d:c3:66:5c:a9:e1:53:8f:7f:e6:00:6e:92:ec:
         2b:e0:c8:2f:81:1a:f9:fd:6b:f1:03:de:3e:90:71:13:dc:a3:
         62:74:15:a4:57:23:e5:e7:ce:7a:ae:76:2b:62:7e:84:5e:59:
         3c:a5:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:31 2026 by rpki-client