Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File:                     mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier:          0KEy2/R+mNpaEvGUQYeBaMZ4XRn4u5PNGWyJQ20a40I=
Subject key identifier:   B8:0E:9C:80:F0:C1:94:80:82:7D:C0:75:AD:60:8D:C1:5B:03:29:B8
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer:       /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number:          01C3
Signing time:             Fri 17 Apr 2026 03:31:21 +0000
Manifest this update:     Fri 17 Apr 2026 03:31:20 +0000
Manifest next update:     Fri 24 Apr 2026 03:31:20 +0000
Files and hashes:         1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: lazXhlHiLMpaymeL04yZ5b7hYTrmSmgjSqHmO+NVw48=)
                          2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: ebXBmrMowh/BzcI13cagAANQL2xXB2uTMEpfoJ7XUcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
        Validity
            Not Before: Apr 17 03:31:20 2026 GMT
            Not After : Apr 24 03:31:20 2026 GMT
        Subject: CN=69e1a988-6b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:9e:ef:99:13:c8:47:1e:9d:d6:ae:37:89:
                    56:b0:78:5d:6e:11:27:37:55:ad:f4:7d:b4:2e:87:
                    8e:df:2b:6f:22:43:45:5c:32:0e:79:bc:af:16:a9:
                    c4:ca:72:31:35:db:85:52:4d:ee:f1:76:a4:e4:08:
                    12:a6:69:9e:e4:53:88:74:34:2e:55:78:04:d2:e5:
                    cf:85:29:e1:ef:63:01:6f:45:73:15:14:06:c8:57:
                    3a:39:d0:d9:14:56:7a:18:9e:cd:39:eb:96:21:2a:
                    bd:51:cd:04:f9:bb:a8:17:fa:59:13:1d:3f:34:db:
                    48:c2:11:6c:f9:49:06:3b:1c:01:f0:3a:cd:54:4e:
                    d7:30:f3:b3:12:09:f4:8c:7a:78:eb:88:fc:1a:82:
                    b9:a9:c3:26:a7:8e:eb:41:d4:3f:ab:d8:bf:71:c1:
                    01:33:c5:25:fa:9d:8f:2b:d1:9a:a7:ce:7e:ac:0d:
                    59:ac:ae:b9:86:22:e4:60:99:07:01:c1:ac:42:1b:
                    67:7f:31:33:8f:4f:d2:36:e6:b3:b6:0b:76:c5:d6:
                    71:cd:5d:cb:a7:4b:61:f2:4f:bf:99:b5:30:9c:71:
                    00:52:c9:bf:8e:8c:25:c4:5d:44:f6:3b:2c:db:73:
                    2c:41:38:40:5e:ab:d3:63:d9:17:f2:60:e1:57:07:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:9C:80:F0:C1:94:80:82:7D:C0:75:AD:60:8D:C1:5B:03:29:B8
            X509v3 Authority Key Identifier:
                keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:eb:60:3e:fb:b0:d2:d1:1f:ff:a0:fd:60:f8:ce:d2:0d:77:
         bf:52:3d:6d:5a:f7:f4:86:04:fd:c5:25:b5:0b:cc:b1:f0:4a:
         39:56:c3:28:bb:62:b8:f5:1d:bb:8f:c8:4e:82:23:65:e0:db:
         13:27:83:8c:5a:2f:1e:2a:f5:fe:2a:ed:21:80:5b:fa:8d:c9:
         de:49:3b:25:04:cc:7a:2a:7d:94:15:31:6a:03:5a:32:78:c9:
         c0:4e:dc:42:0d:72:b6:31:1c:69:1b:45:d5:2e:2e:c5:44:e1:
         3b:be:48:cc:f6:39:8e:6b:82:9f:23:30:62:4d:de:09:dd:3a:
         23:ba:12:ff:ba:e8:fa:83:84:6b:13:b2:97:e5:1a:d9:d9:c8:
         b7:50:76:4c:84:71:de:23:47:cf:09:6d:50:cb:0e:d9:5e:df:
         8b:2d:e7:5a:ea:3a:60:53:5c:7d:e6:2a:d3:e7:33:4b:dc:9d:
         fc:5e:8b:2f:ea:c8:fb:c5:d3:45:51:17:5a:a0:9d:aa:df:62:
         f6:b6:a4:2c:cf:72:ac:3b:cf:10:fa:ce:8c:cc:6f:78:3b:e6:
         04:62:9e:13:67:15:a5:4d:4c:f2:c9:2d:68:e4:7b:53:5f:e1:
         e4:bf:38:c5:f7:f2:80:41:31:79:8c:99:fc:7b:c5:75:c5:e2:
         3d:81:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:48 2026 by rpki-client