Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File:                     MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier:          CjlCtsyBcPos12hZALAmTuZoWWEYG0Xxy9PEnmSVaoU=
Subject key identifier:   7A:85:59:32:30:84:9B:91:CE:DF:1D:4E:27:4E:07:A0:BE:6B:9F:2B
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer:       /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number:          01E7
Signing time:             Fri 17 Apr 2026 03:10:44 +0000
Manifest this update:     Fri 17 Apr 2026 03:10:44 +0000
Manifest next update:     Fri 24 Apr 2026 03:10:44 +0000
Files and hashes:         1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: tHDvwIdQVWJfWeWDaEpb9V/z/yhvn8B6orwHic1l9UA=)
                          2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: F1vpQpUV3bw/FrQH9h0dEOMw7zfdTnJwa9DPHf/lxCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
                          rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
        Validity
            Not Before: Apr 17 03:10:44 2026 GMT
            Not After : Apr 24 03:10:44 2026 GMT
        Subject: CN=69e1a4b4-f7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:98:1b:89:0e:f1:69:9d:5a:12:e8:26:27:70:
                    65:25:7d:f7:ea:21:e1:9e:bc:4c:e4:ab:8e:e9:2d:
                    a8:29:a2:5d:5e:ba:6f:cf:73:00:82:60:69:e5:64:
                    ed:30:f3:2d:bb:e6:f6:94:51:37:f8:1b:68:ed:83:
                    4b:58:76:68:89:f3:72:1e:03:0b:53:24:cf:4b:f5:
                    ad:e3:3e:b4:5d:fa:69:01:be:42:d7:d1:54:9c:0c:
                    be:57:c4:3b:88:f7:d4:b8:6c:db:48:38:3a:7c:a0:
                    4a:71:4c:1f:25:f6:c1:68:af:78:f4:98:9d:62:94:
                    9c:7f:94:e7:77:75:cf:62:49:8e:80:ef:f4:1f:88:
                    3b:fe:53:f1:46:8d:09:07:d5:60:4b:c2:bd:c2:f3:
                    41:da:cd:b7:ad:0d:bd:d3:10:1c:a5:6d:81:eb:9d:
                    d5:2f:16:7b:8b:0a:78:e8:89:06:ee:db:95:b3:f7:
                    e8:32:c5:1d:c6:ca:dd:c3:e0:bc:31:5f:fa:2f:df:
                    35:12:7a:cf:6f:1b:d0:0e:65:70:0d:bf:a8:f1:e4:
                    77:47:32:cb:0a:14:8d:c1:cf:39:09:47:96:ef:93:
                    e5:9b:80:5a:a1:b1:f2:80:f3:02:43:29:9a:2c:62:
                    59:ce:88:74:a7:13:66:3c:5d:01:06:9f:3c:e5:14:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:85:59:32:30:84:9B:91:CE:DF:1D:4E:27:4E:07:A0:BE:6B:9F:2B
            X509v3 Authority Key Identifier:
                keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:39:b0:f5:01:46:42:af:b8:8b:65:36:8a:d1:73:d8:02:
         a5:95:f5:5f:04:21:87:ab:c4:7a:bf:24:a1:e6:11:c0:66:5e:
         30:c0:66:a1:b5:49:9f:71:5e:53:57:d1:06:82:f7:5a:39:77:
         31:72:f6:29:34:d8:14:71:42:26:be:3b:bd:4b:b2:e4:23:40:
         7d:f5:18:af:d2:97:b6:01:70:60:7f:44:01:fe:12:4f:3a:49:
         4f:9f:6e:53:a2:00:cc:67:78:8f:5f:2a:83:86:f3:28:f7:27:
         46:70:b9:af:7e:68:12:ac:48:f9:ef:e4:85:a9:0c:3f:97:6a:
         16:92:e9:68:88:01:bb:ce:76:7b:f4:64:19:52:c2:da:fe:23:
         72:48:16:8f:be:9c:5c:c3:01:39:ad:5e:5c:05:03:b2:9d:fd:
         b6:1c:3e:b9:37:0a:45:8c:fb:36:33:2f:bd:a5:bc:4e:0a:50:
         f6:35:92:58:92:89:f6:fa:e4:82:fc:93:35:05:bf:5e:a2:45:
         dc:4b:37:a4:0c:74:61:e8:89:d2:f8:c8:3e:cb:f9:05:54:46:
         db:f4:05:33:0a:52:d4:0f:24:69:ea:79:5d:5a:b1:cf:6b:f0:
         c2:41:6d:06:4d:ae:5d:db:ee:3d:35:94:e7:49:42:75:78:d7:
         40:5d:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:31 2026 by rpki-client