Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
File:                     sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json)
Hash identifier:          z1magdTuLOnhDT+UvpNNmCtusCuXHWXm5DpAml254Sc=
Subject key identifier:   9C:34:1A:11:52:F9:F5:73:AE:71:5A:F3:2F:92:F6:AA:81:BD:6A:A7
Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
Certificate issuer:       /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
Manifest number:          34
Signing time:             Fri 17 Apr 2026 08:20:01 +0000
Manifest this update:     Fri 17 Apr 2026 08:20:01 +0000
Manifest next update:     Fri 24 Apr 2026 08:20:01 +0000
Files and hashes:         1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: XZhZLMZM0ks1/vJAAvhuEBXdt23k+il5jR5ErC2GhMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl
                          rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
        Validity
            Not Before: Apr 17 08:20:01 2026 GMT
            Not After : Apr 24 08:20:01 2026 GMT
        Subject: CN=69e1ed31-9692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:c0:66:7e:39:83:17:b8:01:5d:c8:26:be:
                    56:e2:63:09:82:fb:ca:2e:13:62:92:aa:71:c3:22:
                    e4:d0:8c:e4:85:19:7f:9b:b0:ef:ac:d4:87:aa:81:
                    cc:f7:44:97:94:39:6a:da:2f:27:30:15:ba:91:16:
                    76:6e:c8:3c:72:86:51:92:32:9e:a5:c9:6f:47:90:
                    5f:ac:f9:d6:e4:9b:a3:22:2b:d3:b0:cf:94:aa:1d:
                    55:15:63:5b:35:d3:2b:87:ff:d3:3c:32:dd:87:b0:
                    31:ce:a7:97:95:85:6e:7a:f7:0a:07:b1:20:f8:91:
                    96:f5:d7:5d:2a:c5:a4:67:58:5c:1e:36:f9:70:e5:
                    34:ab:17:7c:4e:98:5c:7e:d4:11:fd:20:c3:86:41:
                    ed:c7:ba:76:bb:30:3c:9d:f9:ff:24:dc:29:69:df:
                    23:5a:d0:84:90:da:11:5a:21:99:20:fc:c1:26:0c:
                    3e:58:ea:07:f6:7d:58:06:b7:20:b2:71:e4:e0:82:
                    bf:1f:d4:b4:4a:4a:38:92:0b:79:2b:4b:ee:18:56:
                    2f:ed:cf:d5:d2:3b:3d:11:87:df:b2:c8:6a:50:04:
                    b0:7b:c4:ad:ec:94:0c:48:39:30:36:87:e2:80:c0:
                    3d:0d:9c:17:0c:36:d3:83:d6:16:46:5c:2b:52:ea:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:1A:11:52:F9:F5:73:AE:71:5A:F3:2F:92:F6:AA:81:BD:6A:A7
            X509v3 Authority Key Identifier:
                keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:11:71:e8:8d:73:e5:de:f0:5a:bf:3c:18:86:80:0e:19:74:
         bc:3d:63:cf:54:91:d5:0c:d6:6e:69:ac:ff:c8:71:26:68:f7:
         b6:ba:65:9b:05:e8:31:3e:b1:c1:11:c6:67:f3:c9:29:5d:4d:
         02:8a:82:f4:06:71:b3:d0:0c:c2:7e:01:0d:3b:55:f4:10:54:
         2f:47:44:a5:e7:70:13:d7:46:52:fc:95:bf:7a:38:59:f4:e8:
         43:3d:71:c0:4f:67:c3:55:c8:a9:88:4a:a5:02:cc:64:8d:72:
         36:36:f2:02:1d:df:24:f0:4e:3e:6f:4d:72:df:29:fc:e9:00:
         8d:b1:38:ee:33:4b:d5:f1:ef:cf:20:0d:7c:a1:4d:22:35:7e:
         95:33:57:aa:13:5d:63:98:c7:5c:64:56:91:7f:c7:41:87:cc:
         4c:28:91:68:2d:7c:24:be:2a:da:a8:fb:25:2f:9d:40:eb:23:
         5f:a6:cc:57:a1:ab:ff:dd:ac:04:9e:95:0d:f5:9c:36:49:8c:
         eb:fb:ba:a4:f7:48:78:8d:24:53:c3:4f:7b:41:82:bd:04:21:
         6e:6e:d5:d2:e5:97:ad:d9:9a:d2:f9:25:20:28:ba:5b:b8:76:
         2d:cc:5c:8b:34:82:65:f3:f1:f5:78:6b:29:32:c5:28:85:34:
         36:6c:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:36 2026 by rpki-client