Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File:                     sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier:          NDJWzWMMXbPHwrhMdmJw71EbB9+Gu1qiHUyRMmgKk88=
Subject key identifier:   8C:C7:55:6B:15:CE:72:58:DF:B7:E1:38:B3:0D:23:90:3F:18:00:99
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer:       /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number:          CE
Signing time:             Fri 17 Apr 2026 06:31:24 +0000
Manifest this update:     Fri 17 Apr 2026 06:31:23 +0000
Manifest next update:     Fri 24 Apr 2026 06:31:23 +0000
Files and hashes:         1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: RU2R5iCEJOlU1z1oQGEliWunGqykiOozJI7ubSiHdXI=)
                          2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
        Validity
            Not Before: Apr 17 06:31:23 2026 GMT
            Not After : Apr 24 06:31:23 2026 GMT
        Subject: CN=69e1d3bc-4b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:c5:66:c8:a0:ea:a7:d0:23:f8:43:07:ff:
                    8b:80:31:c5:61:e0:d3:82:2d:d7:2f:50:42:a2:da:
                    26:31:af:92:80:cf:f9:a4:89:c2:99:d1:f1:a4:81:
                    8a:3d:aa:46:6f:03:69:b1:81:83:d7:bf:e9:37:72:
                    01:5d:76:cf:72:b8:84:7c:ed:57:c4:ee:87:01:be:
                    47:6a:97:14:2d:5a:5d:35:75:57:3e:2b:29:07:2b:
                    d9:50:47:ed:15:32:40:a4:d3:df:c0:5b:1b:9f:c6:
                    d7:fd:92:77:f5:b3:e9:7d:b1:cb:45:92:b6:84:e8:
                    cc:c5:c5:89:68:4c:3c:ef:ec:5f:60:7c:4d:34:e9:
                    50:bc:e1:33:4c:aa:ef:e2:17:b9:36:6f:4e:a6:56:
                    27:ab:cf:3d:05:57:43:27:09:33:cb:03:14:70:04:
                    ce:38:44:16:f8:3a:2d:19:21:b6:d8:ab:b1:6b:fb:
                    45:bb:e1:a9:b5:9d:30:ec:f6:1d:a4:2b:70:0b:1a:
                    a8:6e:6e:d3:5b:f7:6b:8f:7c:01:15:e8:68:b0:60:
                    eb:95:e9:96:c3:09:5e:65:97:db:4f:66:a3:1c:55:
                    cd:c7:b7:07:a0:8f:6b:51:c4:7d:11:38:d9:73:d3:
                    a4:69:26:28:64:09:36:2b:46:4f:44:6c:90:74:8e:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C7:55:6B:15:CE:72:58:DF:B7:E1:38:B3:0D:23:90:3F:18:00:99
            X509v3 Authority Key Identifier:
                keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:08:0a:73:17:22:b3:41:ac:88:eb:ff:cf:15:3e:bb:bf:
         08:58:37:43:3e:4b:a4:2c:96:e4:1f:51:10:98:90:6c:2a:67:
         d9:ec:67:c0:bf:2e:f5:ba:2e:96:27:88:b1:d4:5f:ae:a5:38:
         43:5b:81:0d:01:a2:62:18:a4:d8:6b:d3:5f:21:e6:69:53:da:
         83:0b:a8:aa:27:1a:f1:77:cc:e9:2c:94:af:15:c9:86:36:06:
         99:fb:9e:28:11:65:6a:cc:99:26:7b:f7:3d:8d:51:62:dd:d5:
         6a:5c:8a:91:5e:a4:ea:78:e8:38:c7:08:d5:78:8b:07:4d:43:
         fb:21:bd:5e:c6:31:00:23:42:05:90:c7:37:cf:99:b1:7f:0d:
         6d:1e:0b:22:eb:ba:e8:25:bd:ce:c9:c5:ac:24:d1:d9:e8:4d:
         6a:0d:dc:a1:79:c8:98:5a:31:11:e8:fe:f0:ac:76:6a:f8:91:
         44:4a:1e:9f:0e:02:40:78:d4:ae:7e:90:8b:66:23:21:f1:a0:
         60:7b:76:d7:0d:c3:77:61:e4:b7:1d:a6:dc:c9:e0:63:41:d3:
         a5:25:06:09:04:c2:83:78:ce:b1:f9:19:25:56:c3:78:24:57:
         40:a7:b7:ff:10:04:55:f4:3e:a4:c3:6f:d3:11:3f:5f:38:8b:
         ac:e6:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:49 2026 by rpki-client