Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File:                     Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier:          PNxD60hlETnGOz4W8O66sBSa1Dde82kz2YL+D250AKo=
Subject key identifier:   12:21:0F:07:0E:D7:F4:F3:F4:4B:8C:52:58:2F:67:4D:04:AC:C8:69
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number:          010C
Signing time:             Fri 17 Apr 2026 05:43:08 +0000
Manifest this update:     Fri 17 Apr 2026 05:43:07 +0000
Manifest next update:     Fri 24 Apr 2026 05:43:07 +0000
Files and hashes:         1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: ZxGE2nk5a+6qetdRPw2XzTEYECdDqLEJZTzS8olr26I=)
                          2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Apr 17 05:43:07 2026 GMT
            Not After : Apr 24 05:43:07 2026 GMT
        Subject: CN=69e1c86b-e100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:f5:5d:3b:e4:0f:0b:24:62:d2:9a:bd:9b:
                    5b:5f:cd:f7:f8:94:8a:b7:49:e4:f8:32:9d:f0:24:
                    a4:d3:66:d1:b0:f6:70:be:67:18:98:c3:75:5a:d9:
                    6a:8f:d2:88:87:87:97:38:fa:ae:b9:b1:54:51:68:
                    ec:72:50:7d:83:45:1b:33:6c:57:ed:65:e4:9e:5f:
                    73:4f:a1:c9:4a:3c:4e:8a:0f:f9:59:91:6a:cf:1b:
                    e5:72:47:c5:97:5e:d1:df:3d:bb:b0:68:d1:ad:9d:
                    2d:00:47:d1:57:48:1d:91:76:42:ae:59:d9:a1:b5:
                    03:0d:73:3b:c6:d6:8b:da:9b:a8:e2:70:c1:74:ee:
                    93:e3:07:5a:db:45:1d:11:25:ee:5a:da:20:ab:f0:
                    2f:15:63:59:86:dc:b6:c4:11:d2:4e:70:22:cb:4a:
                    61:4a:7c:ed:6c:4b:61:31:79:8b:db:8e:70:f3:ba:
                    30:c3:58:f0:57:78:8f:53:c5:ce:8f:97:13:c7:3a:
                    9e:18:68:c1:c4:a7:e1:fd:31:45:07:a7:33:f0:dc:
                    9f:78:cc:42:40:03:a5:21:19:b0:b4:4e:2c:a3:44:
                    d2:ca:ed:54:65:d2:a5:87:c4:d9:a7:60:43:cd:9f:
                    1e:24:38:6e:b4:df:a6:fc:ee:74:b9:e6:af:f5:13:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:0F:07:0E:D7:F4:F3:F4:4B:8C:52:58:2F:67:4D:04:AC:C8:69
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:36:81:14:72:59:bc:65:4d:43:ed:e5:86:1f:e7:dd:3c:a1:
         33:2c:da:2f:f4:bd:7b:f2:83:22:e9:eb:b7:41:f4:f9:8e:28:
         42:54:ea:57:0c:37:6e:55:d1:8a:63:21:8a:0d:79:8d:ba:0d:
         89:58:18:1b:cb:a0:c1:6d:d9:4c:ae:99:f8:ba:fd:45:bd:2c:
         31:d8:a9:60:0f:e4:48:b4:ef:a3:37:f8:01:85:e5:3a:71:3e:
         e2:c5:c8:e7:4a:a8:69:df:55:8a:fa:b0:56:80:60:a2:a5:9e:
         86:52:cb:c5:0d:1c:13:3c:ea:08:13:b1:f2:2c:6e:05:45:26:
         7c:ff:00:a6:56:15:03:f9:3d:49:d3:14:02:1c:50:cf:51:74:
         27:f3:90:51:70:b0:9f:83:46:9d:53:04:fe:6c:94:9d:5a:be:
         15:c6:b5:06:4a:17:27:0c:15:57:20:1a:4b:c6:32:52:50:8c:
         6f:08:8e:65:00:59:29:2f:1b:c7:b5:7a:6d:4f:10:8f:ca:c0:
         20:f7:27:39:6b:c9:99:01:6a:a6:f7:eb:d5:42:6d:bb:08:9d:
         bb:07:0c:11:6a:c6:2a:c2:66:69:70:32:7f:f0:8d:38:ae:21:
         49:1d:70:40:4f:8f:60:d7:fd:3a:21:d3:18:66:f4:4d:63:fe:
         40:af:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:04 2026 by rpki-client