Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File:                     xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier:          UmCDw4WI5Oir4RRKcoI3Vdb+mwhdmvqJf/xAVJR9kyI=
Subject key identifier:   04:82:03:F8:77:FF:2F:DB:10:CA:D6:8C:BF:09:F8:52:DD:25:DF:F0
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0F00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number:          0ED9
Signing time:             Sat 18 Apr 2026 17:34:37 +0000
Manifest this update:     Sat 18 Apr 2026 17:34:37 +0000
Manifest next update:     Sat 25 Apr 2026 17:34:37 +0000
Files and hashes:         1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: XwI/jSGyhnNl3HPoG/D/whDteiicA8ClNP9XzfpwTgA=)
                          2: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=)
                          3: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=)
                          4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3840 (0xf00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: Apr 18 17:34:37 2026 GMT
            Not After : Apr 25 17:34:37 2026 GMT
        Subject: CN=69e3c0ad-c3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:ef:0c:b0:29:64:7d:3d:6e:70:28:42:10:
                    e6:7e:d3:88:ce:ce:9e:9a:26:8e:62:14:5a:8b:21:
                    5c:db:8f:1d:ca:cf:23:93:54:b8:df:41:da:9e:cf:
                    02:28:e3:e5:b5:f3:98:e2:0b:f5:40:b8:d5:34:07:
                    23:ee:54:a9:8f:bf:fe:1e:57:d9:2b:b1:89:0e:de:
                    da:3c:e7:27:ef:ba:50:e5:0f:8e:d1:e1:09:37:23:
                    b4:92:64:cd:33:e9:03:65:0d:5a:2e:1d:33:0f:60:
                    c2:48:f3:91:35:e7:b1:94:0f:42:b6:2f:d3:6e:de:
                    07:cb:62:35:fc:70:c8:65:20:b9:94:4e:8f:c4:e4:
                    44:33:21:4c:b0:18:db:4f:e9:84:52:a9:73:fe:63:
                    d4:c1:8c:b3:2b:39:71:57:d3:13:86:56:40:b8:4f:
                    ba:2c:e5:4a:3c:2a:f9:75:77:ca:8b:e9:28:a1:5e:
                    31:7a:d2:46:e4:2e:82:0d:94:0e:36:d4:98:8c:8a:
                    4e:b2:f4:82:11:d5:d1:a9:22:bd:3c:31:d6:fa:a7:
                    03:54:73:96:79:05:67:ba:fe:d3:f0:84:b6:8b:b1:
                    94:d6:ac:55:82:b8:a1:cf:88:f4:9f:2d:9d:76:77:
                    4b:5e:32:d8:46:8b:cb:cd:22:a5:d9:0b:a6:a9:24:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:82:03:F8:77:FF:2F:DB:10:CA:D6:8C:BF:09:F8:52:DD:25:DF:F0
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:ef:27:af:1e:69:25:78:c1:20:63:0a:e7:78:c9:d1:2a:
         2e:b1:96:30:f0:86:4a:9b:69:0a:97:23:cb:8f:c8:b4:0f:85:
         d8:ea:10:1d:ba:6d:80:91:14:41:17:d3:13:b2:90:c4:56:d2:
         6a:33:72:40:7e:3d:a3:9d:14:42:7f:e1:63:45:fe:19:db:3b:
         ef:41:26:4b:fd:ac:1e:c1:7d:c9:06:50:04:a2:45:1a:a7:39:
         b6:43:80:ae:f2:0a:a3:88:00:7f:20:e8:72:c1:a2:76:7d:1e:
         8d:c2:c4:73:fd:8f:df:cd:96:23:48:80:28:ff:48:92:29:68:
         e8:ad:d8:62:cc:d1:c9:71:8c:50:3c:98:e2:14:82:94:fb:b8:
         37:16:90:ff:ee:55:c1:73:65:d6:ab:a0:f1:56:5a:6d:38:15:
         70:f1:02:e8:b9:5b:89:bc:3b:ed:5e:67:65:7c:97:e8:f5:f5:
         97:5a:10:11:be:48:a9:06:7d:86:be:79:a3:49:73:b8:92:76:
         3b:ab:73:c8:41:97:d3:50:50:70:92:0e:88:fe:d3:54:ee:a8:
         68:42:88:10:83:7b:24:3a:7c:b5:92:d3:6a:eb:27:85:3d:9a:
         88:4c:56:79:4b:f1:76:65:ed:48:b9:fa:e0:41:89:86:a8:61:
         d9:a5:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:22 2026 by rpki-client