Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File:                     sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier:          uYQBQ12bpyAAsmjj+Q7+XZv4Fa/FsVEhjz0c6Bg4ES8=
Subject key identifier:   17:EA:0E:B4:96:6F:68:E0:C3:BC:B8:17:B5:75:FC:26:E3:A9:32:19
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       0214
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number:          0209
Signing time:             Fri 17 Apr 2026 02:47:12 +0000
Manifest this update:     Fri 17 Apr 2026 02:47:12 +0000
Manifest next update:     Fri 24 Apr 2026 02:47:12 +0000
Files and hashes:         1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: LGxaCxkrXAjjLSl1ITCoyimN3ShTeohbMZhWjxfa9JY=)
                          2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=)
                          3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: Apr 17 02:47:12 2026 GMT
            Not After : Apr 24 02:47:12 2026 GMT
        Subject: CN=69e19f30-fd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:12:f6:c5:86:d5:83:75:b2:6f:00:0c:59:
                    bf:69:e4:6e:ce:03:54:4e:0a:af:54:72:f6:48:66:
                    4a:02:f5:31:bf:02:b5:86:c2:6f:a9:25:41:b9:f5:
                    94:86:7a:be:52:60:7d:7e:0c:67:e9:a0:18:52:6e:
                    34:f6:08:aa:0c:fd:69:97:96:e5:c2:6f:36:06:ae:
                    15:37:cd:61:3f:a3:db:c7:f5:03:53:94:bb:05:52:
                    75:2c:ac:99:42:6d:19:69:7d:eb:95:60:fb:aa:4d:
                    22:9d:44:69:83:14:b2:e8:18:46:f1:d5:35:b1:c3:
                    89:be:38:0b:0b:94:9d:b7:bb:c8:b1:c0:43:67:c3:
                    cb:40:ac:85:ae:b6:70:37:c7:cd:56:64:47:72:40:
                    e9:46:65:b2:5d:61:af:ac:5f:c5:ed:10:dd:71:39:
                    47:a1:df:77:66:39:29:ed:60:c2:ef:25:ec:16:46:
                    22:24:90:70:38:07:c3:48:c8:6e:0f:69:7f:5c:55:
                    35:08:c6:a9:ce:00:b5:d6:43:d0:7d:9a:59:71:e9:
                    c7:8c:41:17:90:85:7b:c0:33:12:f2:47:f5:dc:8b:
                    d2:ee:d5:b2:a6:7c:0d:c1:b8:b0:17:a4:a5:09:50:
                    b5:6b:5e:78:20:7f:97:36:4f:f2:2a:b8:be:54:82:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EA:0E:B4:96:6F:68:E0:C3:BC:B8:17:B5:75:FC:26:E3:A9:32:19
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d9:f6:2a:ad:ae:6a:57:40:7c:23:b4:16:1d:d2:29:ce:ad:
         fb:c3:d8:92:dd:ce:a1:a1:ed:c8:18:8b:2c:23:cf:e9:3f:34:
         72:82:5d:f5:17:f4:c4:00:a6:1d:1b:9d:c2:e4:55:ab:7e:91:
         0f:bf:a1:c5:df:72:07:2d:aa:16:c4:13:d9:d1:3e:c2:65:9b:
         7e:04:b5:49:86:ba:09:e7:fd:17:fb:b5:d8:9e:8e:85:c8:db:
         4d:5b:0c:65:fb:13:29:8b:1f:2b:6c:8b:d0:8c:fe:17:45:f4:
         81:09:79:11:83:5d:96:25:a8:34:b6:e9:75:d0:95:01:d0:88:
         c6:33:83:49:31:c7:ec:c6:c5:80:b0:c2:77:3a:3e:5f:f0:58:
         94:cc:b1:4b:9f:ba:40:62:1f:5e:68:dd:13:6f:5c:0a:79:e0:
         80:72:92:e4:5b:e3:d8:4c:0e:a7:57:98:47:c3:ae:f5:f3:5d:
         b6:13:e9:04:00:ea:59:a2:05:c0:e6:a6:35:9c:d9:8b:a9:d2:
         ab:7e:d7:b1:a5:1d:8c:61:2b:07:42:5c:fc:a9:69:1b:4c:db:
         73:d7:ae:1d:d8:7f:05:3c:5c:03:d2:7e:57:08:3b:97:2e:a3:
         5b:04:72:aa:a1:2a:78:93:5c:e6:b1:30:0c:c7:ec:12:b7:81:
         b1:87:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:51 2026 by rpki-client