Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
File:                     qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json)
Hash identifier:          7CwFiceD1b/5PDGhBgaHYdK7GmTWFjR8pPg8ZWkTTy4=
Subject key identifier:   CB:A1:F9:56:8B:3D:2B:9E:17:FF:4D:D1:3F:85:9F:6D:25:6E:06:D4
Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
Certificate issuer:       /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
Manifest number:          4A
Signing time:             Wed 15 Apr 2026 07:53:57 +0000
Manifest this update:     Wed 15 Apr 2026 07:53:57 +0000
Manifest next update:     Wed 22 Apr 2026 07:53:57 +0000
Files and hashes:         1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: ewVQTDzinGE3NXA9XzVUo/aRVPeOPjYA4yQpk3YoUqw=)
                          2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: rthVEOzl3I+Nrh1/x+VYyq3xjzoN6lgAA50smRMa7oE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
                          rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
        Validity
            Not Before: Apr 15 07:53:57 2026 GMT
            Not After : Apr 22 07:53:57 2026 GMT
        Subject: CN=69df4415-ca5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:47:5f:b3:98:a3:2f:ff:32:46:7e:c3:b3:
                    6e:75:c6:c2:cd:6d:f4:19:a2:f0:c0:77:73:fc:5f:
                    02:51:4a:d4:b3:8f:05:88:f0:10:0d:74:04:87:d2:
                    bb:52:ea:75:d3:8e:79:b0:35:a3:92:b9:1e:cf:a5:
                    e5:a0:f1:1d:f6:58:98:61:9b:41:41:39:52:73:be:
                    70:e6:03:48:d6:42:6d:8d:fe:1a:86:36:62:f8:6a:
                    47:5f:35:cf:65:b2:e1:08:b9:85:33:25:9b:3b:31:
                    1e:78:89:fb:2e:2f:16:20:79:12:7e:5b:14:19:8e:
                    24:b5:53:73:7c:32:e2:cc:73:90:52:f3:12:16:69:
                    22:44:df:dc:d0:36:cd:24:c4:d9:1a:29:bb:5a:f9:
                    20:93:5e:d2:61:ab:bc:b4:07:8c:61:73:a6:a0:4c:
                    25:4b:4a:67:a8:2a:b8:c3:f1:8b:34:d4:30:1d:aa:
                    57:4a:5a:fc:bc:de:60:1a:eb:f8:58:ea:3c:2b:a2:
                    50:c3:b5:29:a8:50:e1:ba:f4:28:ea:4d:da:7d:1e:
                    ff:1e:0a:6b:0f:c1:2c:7d:e3:e1:83:6d:cd:5d:b7:
                    62:fa:8f:ca:f0:5b:b0:ce:67:83:27:f2:12:3a:22:
                    2d:fd:ab:40:5f:01:5c:2c:4a:b0:cf:41:bd:44:78:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:F9:56:8B:3D:2B:9E:17:FF:4D:D1:3F:85:9F:6D:25:6E:06:D4
            X509v3 Authority Key Identifier:
                keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:1a:4b:45:4e:79:99:83:43:f9:0f:c3:cc:37:37:a8:90:
         37:e0:85:b0:b4:12:c2:f8:d1:84:c4:28:50:0c:b8:4d:f4:3a:
         a0:fb:7f:4e:cc:e9:07:0c:99:bc:a8:4d:ba:fa:77:f7:23:62:
         eb:44:3f:6a:1b:99:bc:bb:48:ae:b4:82:e3:c0:80:8d:ce:c8:
         a5:81:ec:c0:fc:1a:4d:a9:85:dc:46:35:e6:b9:ca:37:7c:1d:
         75:cd:53:6d:87:f7:5c:49:cf:36:df:25:7a:d6:8c:94:d3:09:
         18:e0:aa:0a:45:7f:30:58:9b:4e:1e:cc:e5:49:6c:ec:e4:a6:
         96:36:33:63:59:28:8c:95:cb:ad:65:d0:b0:91:97:15:3b:35:
         de:87:c7:bd:52:dc:fa:46:24:85:ff:c6:98:a0:ed:c1:93:81:
         44:3f:12:b0:94:c2:b0:fa:b8:ea:91:cb:21:15:97:d1:6e:41:
         c1:e1:98:34:07:80:c3:e0:c2:b9:a1:46:cb:5e:26:08:e0:da:
         44:88:a9:76:09:be:47:61:0d:e5:28:08:5e:ae:ed:25:48:a4:
         11:05:32:22:9f:86:0d:63:2e:3f:a4:8e:18:93:6f:3f:57:56:
         8c:30:da:07:0f:8f:76:87:9a:73:03:55:14:b1:b3:7d:ee:6d:
         cf:d7:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:07 2026 by rpki-client