Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File:                     tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier:          vTxM791YQw6sXcYKlG45fyvoyYQsdvNN00EP3ic/r1o=
Subject key identifier:   1B:79:FA:7C:EC:8F:E2:6C:CA:64:26:5A:30:79:2B:E7:F2:C1:50:97
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer:       /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number:          EF
Signing time:             Fri 17 Apr 2026 06:10:27 +0000
Manifest this update:     Fri 17 Apr 2026 06:10:27 +0000
Manifest next update:     Fri 24 Apr 2026 06:10:27 +0000
Files and hashes:         1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: lJShkdlOWJ+O6zjDrCBpxnjgPNG1CyRK1ypH30Dp5Zo=)
                          2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
        Validity
            Not Before: Apr 17 06:10:27 2026 GMT
            Not After : Apr 24 06:10:27 2026 GMT
        Subject: CN=69e1ced3-2a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:1f:fd:71:e0:bf:ae:1c:1d:bb:b4:0e:04:
                    46:fc:dd:4a:fa:a2:81:d9:c6:cb:11:aa:f0:f6:47:
                    b0:5d:44:2a:5f:4b:2d:96:d6:4f:dd:81:e4:02:e7:
                    a1:92:66:02:96:c9:27:9d:0c:32:bf:63:e8:11:35:
                    9d:3a:48:a2:c1:8e:4f:d3:18:fc:6d:58:91:ab:d9:
                    a3:c0:ab:db:ac:f0:17:b6:78:14:41:2a:20:62:84:
                    a0:b4:cf:83:f3:04:59:5c:02:5b:27:74:ad:96:90:
                    78:90:91:9f:0d:c4:26:27:31:04:47:9d:f4:80:24:
                    b5:48:dc:c5:f0:25:a3:52:a3:55:56:cb:72:75:1c:
                    7a:2f:32:47:f3:50:43:ad:98:ba:7a:06:09:d4:06:
                    60:b4:09:9e:4f:73:49:d1:db:03:1a:fe:16:d8:eb:
                    14:86:d9:bf:d2:9b:ff:ec:cf:a6:89:4e:92:c2:58:
                    bf:e5:c1:2c:4c:c4:27:f9:9e:e3:1b:f8:8e:ca:08:
                    1c:50:c5:a1:ee:4c:c2:e7:72:c7:30:04:b8:54:5e:
                    f3:b3:e5:00:78:a2:b9:f1:c1:e0:14:3d:4b:23:d0:
                    cd:06:1e:d8:e2:b1:e0:5b:c6:45:9d:9c:05:21:44:
                    f7:c3:99:a6:43:8a:a8:89:cf:9c:4e:71:5d:5a:88:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:79:FA:7C:EC:8F:E2:6C:CA:64:26:5A:30:79:2B:E7:F2:C1:50:97
            X509v3 Authority Key Identifier:
                keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:db:4b:38:fc:75:7c:f9:e0:1d:c1:d3:94:15:2f:a4:d0:
         64:1d:4e:d6:92:01:1b:4e:f0:c5:45:b5:82:9e:09:bf:4c:fb:
         0a:fc:37:53:bd:4e:4b:63:1e:c9:1a:72:cf:8a:74:ee:8e:ec:
         68:c4:07:18:ae:a9:8b:00:35:af:c5:56:9a:ca:b4:fb:e3:d4:
         82:5b:cd:d6:b6:f9:a6:bc:67:62:1b:e3:66:a4:bd:2f:d8:44:
         2e:cb:a7:68:9c:c3:8a:86:e6:cd:fa:0c:f7:6e:f9:15:b3:f0:
         f2:21:61:ae:3c:f6:f0:92:d2:8f:f5:28:1e:97:6d:cf:8a:a2:
         33:e1:d0:ff:e4:dc:48:33:e9:65:26:37:1e:fb:64:26:13:59:
         39:84:7e:42:5d:66:fc:ef:53:a7:73:5c:14:d8:16:dd:61:69:
         95:aa:6d:d7:4b:a4:94:58:05:c3:56:9c:dd:14:4d:66:c9:7b:
         af:d0:4f:35:d9:ad:78:37:f7:65:ae:ce:bb:5c:a0:21:08:11:
         a6:36:b4:e6:01:68:c3:74:e7:c0:c5:63:67:ef:14:fa:34:50:
         75:c7:8d:de:e7:42:b9:b6:10:6e:25:77:f3:c4:33:48:1b:73:
         a6:3f:5a:65:58:e3:e9:b0:ac:f4:69:18:51:b3:ce:d3:13:2d:
         4f:fb:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:02 2026 by rpki-client