Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
File:                     RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json)
Hash identifier:          1GsnYioVGlv+GOELlRIkROAg/qdMZcU7H+mhnfd9uCk=
Subject key identifier:   9C:DC:9E:95:97:51:F8:F9:67:EE:55:BC:24:63:65:0D:86:7B:D9:76
Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
Certificate issuer:       /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Certificate serial:       03E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
Manifest number:          03D5
Signing time:             Sun 19 Apr 2026 00:28:08 +0000
Manifest this update:     Sun 19 Apr 2026 00:28:07 +0000
Manifest next update:     Sun 26 Apr 2026 00:28:07 +0000
Files and hashes:         1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: Q0me0n0X6aWH2HFu0ursDE5wcxC9rMF7qBeSkaE2uLU=)
                          2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: HbxNhJfwCG1ujU694+Ro5Mhy7fzReoL73klO5RKGIM0=)
                          3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: vd7/c73lLNTzKiOupkJvInFXPhKY9E+Gw/hTf0zKkVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
                          rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
        Validity
            Not Before: Apr 19 00:28:07 2026 GMT
            Not After : Apr 26 00:28:07 2026 GMT
        Subject: CN=69e42198-cccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:a1:83:4f:e5:65:9e:40:04:b6:26:4b:5e:
                    56:15:c3:59:64:67:0a:0d:97:28:a0:89:07:97:7e:
                    c0:9f:67:61:43:45:a3:ce:e6:bd:d6:b9:79:61:a5:
                    6e:b3:6a:3c:cc:7c:a9:63:95:fa:bb:8f:1e:29:83:
                    d8:50:01:aa:bd:5f:1f:14:be:90:3a:5e:19:4b:c9:
                    9c:95:0e:c9:30:f8:95:46:b4:0a:e4:9c:eb:40:df:
                    3c:ea:19:ee:b7:60:68:25:e7:5e:8e:7a:99:a5:15:
                    bb:3e:ad:84:30:7d:bd:7e:58:31:59:ab:df:24:8f:
                    13:4c:96:a2:22:ed:34:a2:4f:d5:1a:a3:7b:74:47:
                    e4:00:51:8f:e6:df:1e:3f:1a:b5:af:a2:21:aa:fa:
                    9a:cb:5d:35:0d:cc:46:46:20:7d:e2:14:26:9d:60:
                    7a:5c:e8:75:9d:28:ea:b6:bb:14:3d:5b:ab:6d:cd:
                    5c:a5:36:ce:3c:36:26:2c:cf:59:e4:c4:91:1b:89:
                    2c:37:34:c1:04:19:46:b3:41:4d:a2:f2:a2:af:1d:
                    14:b8:ce:c7:60:65:70:2d:1d:54:e5:01:4e:e8:cb:
                    52:dd:b4:b4:72:e9:3f:5e:d1:05:81:e0:6b:00:4f:
                    a0:d2:51:f4:d0:69:7d:1d:fd:4a:9b:c0:4a:98:a3:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DC:9E:95:97:51:F8:F9:67:EE:55:BC:24:63:65:0D:86:7B:D9:76
            X509v3 Authority Key Identifier:
                keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e3:aa:89:60:e3:87:90:52:03:35:e7:ef:fb:99:fe:0d:7f:
         89:91:74:70:ce:ab:84:9d:76:92:88:e8:7c:90:96:60:9b:ca:
         04:9b:af:62:d5:81:7d:c3:18:37:9a:60:28:59:f8:19:46:90:
         78:15:b6:40:8a:57:75:33:ac:ac:2a:05:28:37:25:43:6d:65:
         81:4b:29:f1:4a:e8:6e:ed:09:47:e1:a7:2a:09:98:cb:7f:19:
         28:84:67:01:00:de:64:77:8f:a1:d8:93:83:88:ce:aa:27:da:
         d9:16:ba:c5:d7:19:e2:48:35:a2:6e:29:a5:a9:69:ff:b1:e8:
         35:01:a6:10:02:23:33:d8:e7:a5:67:6f:9c:14:8a:81:6b:7c:
         4e:aa:54:ba:66:31:d6:7d:6e:85:4a:71:a2:3b:cb:71:c4:83:
         a2:44:21:d6:26:14:b5:24:90:0d:47:43:ef:f3:17:88:c3:d9:
         03:a7:46:ff:0d:f1:a8:91:b9:21:50:7e:a4:b1:79:ef:ff:50:
         06:bc:d5:0c:5a:5d:51:c2:6e:c9:28:52:95:6f:c4:ff:0b:6f:
         ba:67:2e:6d:da:b7:05:2e:2d:14:43:43:aa:33:0c:32:f4:7f:
         4d:85:6f:e6:b1:2c:b6:fc:c7:84:24:f8:cc:a2:1e:11:9b:91:
         9a:f2:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:34 2026 by rpki-client