Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          NdpD0gR6sKy++w8MfN7gsM/m6vHvMMtZ8KoH60AwwTo=
Subject key identifier:   16:1B:9D:C9:DD:85:5D:43:47:F0:5E:3B:12:30:30:64:9A:04:7C:46
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          01C3
Signing time:             Fri 17 Apr 2026 03:59:09 +0000
Manifest this update:     Fri 17 Apr 2026 03:59:08 +0000
Manifest next update:     Fri 24 Apr 2026 03:59:08 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 0gR0SpHZP/xtDia+gkrRbT9yywIb4wlfpr6DK5FJvYg=)
                          2: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: sVGpNa8k/xVKsIanvda8jGJL2nHzx0rMDFKMvF7hssA=)
                          3: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 9WvOYEKrWLRFlgDH3zQFRXn/DZmOYwHZaJMDQfO7n/g=)
                          4: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: w5rmWZZVBxC2/bAO599UhQgXvs8hWsiDzRokDXUEGU4=)
                          5: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VvZ1QMS2eLQmDgXa34u3h0OjHEC9RVEvgUYgcW//Cxk=)
                          6: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: 5lDSpzmwVyIgUi4h17dQR5e2pFC4svpJ9hXm3aYNHDw=)
                          7: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: JW1ClKNrVsnlpg/5abZXtZdRfLQRkQCfIYnNrzyJDlk=)
                          8: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: SBh7/ucfyQHiZDQqOYlLERzU0mOVNQDSYZbvPKFmV+k=)
                          9: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: vve+SNs5Y00q7s7j0iECqDMKhK39FhN+snt799G9ovQ=)
                          10: BB17221E211611F08D31C34DC4F9AE02.roa (hash: zi4/aUqGR718bniuf1jQK9sOH3knTVcJf3T+VbBiSok=)
                          11: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: u8tryEt8wfaKIyYRGhYJY4HgZ/+NDx5NswoCB2TbM44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Apr 17 03:59:08 2026 GMT
            Not After : Apr 24 03:59:08 2026 GMT
        Subject: CN=69e1b00d-e096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:4a:28:9a:9b:a5:60:c5:6a:04:7c:7c:60:
                    fa:0a:6b:16:aa:f4:a2:68:b8:76:27:b7:c0:b6:e3:
                    c1:22:61:2c:6e:a1:71:cd:03:c5:f2:b1:b5:f1:18:
                    d0:0e:b3:00:04:3d:cd:96:0f:be:20:6a:9b:33:8e:
                    6e:de:3c:2a:42:51:0e:2b:34:dd:bf:44:92:9e:c9:
                    41:cc:68:09:9d:6d:2c:e1:33:e3:92:52:c0:54:bc:
                    3f:9c:b8:58:ad:43:a9:fb:60:56:1e:a6:d4:1b:3e:
                    bd:cd:9f:1f:29:d6:1b:1c:39:29:de:83:50:0e:4e:
                    0e:46:58:60:41:b1:5a:1b:5f:b8:c4:4a:96:2d:f7:
                    c8:3e:08:25:0e:44:25:a3:3b:1e:6a:d8:22:2d:8d:
                    e4:c5:03:c3:44:11:1f:ac:04:4e:2a:29:26:10:9b:
                    11:f6:8d:be:db:ea:a4:6a:db:bf:3e:36:aa:58:16:
                    55:ae:a3:73:61:94:3a:0b:18:3c:65:29:ba:00:c9:
                    9f:37:14:b1:c2:f5:29:41:8f:4c:64:a5:e6:fe:18:
                    a7:3a:c0:2b:6f:10:0a:bf:08:c1:e8:13:50:59:b5:
                    53:5b:32:20:d3:5c:ac:57:a7:e0:1d:dd:56:e9:85:
                    8d:a8:31:45:87:9d:ab:a2:ae:ee:c3:e3:04:e9:2b:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1B:9D:C9:DD:85:5D:43:47:F0:5E:3B:12:30:30:64:9A:04:7C:46
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:90:63:43:b6:64:e2:56:3b:cf:52:9e:2c:0c:f5:eb:5f:17:
         71:17:7f:6a:31:2e:3a:a6:0f:fc:8a:38:b6:9e:59:5a:e6:e9:
         f0:6e:a2:e8:8a:27:8f:cb:29:d2:93:27:d2:a1:cc:49:51:66:
         36:57:c9:80:ec:55:29:12:62:7c:c7:e1:79:9d:5a:d8:81:5a:
         ae:ff:3f:71:58:1e:25:3e:b9:31:79:9e:74:d4:1c:ac:9a:49:
         e5:32:ee:95:7f:d3:b4:87:31:6a:17:58:9c:c3:21:a1:78:bd:
         a0:6c:98:53:8a:0f:e6:82:b9:ff:85:d9:a4:2e:85:c3:0f:ba:
         05:a6:97:dd:57:90:fb:9f:6f:3c:aa:d2:ed:a9:39:b6:c2:86:
         2d:64:0f:a4:b7:cd:1b:e7:8d:9e:d8:10:00:ba:73:85:91:85:
         47:e8:30:94:b7:d2:51:a0:8b:fd:8b:69:ea:39:85:b8:55:55:
         9b:3c:4d:6d:ae:8b:24:68:15:b3:27:00:9b:75:b1:bb:b3:a1:
         c5:d6:12:ef:d5:56:6c:6e:c4:da:b5:01:49:dd:80:e4:1c:8b:
         d8:58:ea:56:65:da:ea:3c:70:0d:a9:c3:16:c6:32:02:36:75:
         d8:36:a2:2f:50:70:f5:f4:01:d4:97:d4:38:27:9d:fd:d0:80:
         83:81:b1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:39 2026 by rpki-client