Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File:                     g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier:          hbPoeKyx+4RP+W/TTHNu2Ja5j1nNNVPkqPzryBYrYeU=
Subject key identifier:   B1:1C:39:53:2D:E8:A7:1A:2B:0D:22:8E:60:1F:AB:26:14:88:45:77
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer:       /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number:          FA
Signing time:             Fri 17 Apr 2026 06:04:13 +0000
Manifest this update:     Fri 17 Apr 2026 06:04:12 +0000
Manifest next update:     Fri 24 Apr 2026 06:04:12 +0000
Files and hashes:         1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: 0idaBCIgsQopHfTKTsygsmZADS0STrBOMq8Aqj8ysjQ=)
                          2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: HUtXLhQ2zyP4LJGfZauEnR2MPzei0tQ4qoL8B66B5TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
        Validity
            Not Before: Apr 17 06:04:12 2026 GMT
            Not After : Apr 24 06:04:12 2026 GMT
        Subject: CN=69e1cd5c-abe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:36:29:02:f2:5d:9e:80:ab:eb:4a:a1:cf:
                    f7:06:65:b9:72:55:c3:c4:94:3b:d2:7e:0d:1a:40:
                    9b:a0:ae:2b:77:9c:64:d1:fd:f6:86:9a:67:6e:7d:
                    db:68:81:ce:fc:46:28:30:b7:28:bd:04:8c:21:11:
                    14:ac:8d:dc:93:36:1c:5d:44:7b:98:c1:15:13:0e:
                    06:d9:f4:be:75:47:51:45:14:1c:fa:3b:c5:35:20:
                    55:0c:24:01:0c:24:f4:2f:c0:de:9f:b4:80:32:e9:
                    d4:fb:62:31:a5:c1:32:bb:47:73:ef:a0:49:11:30:
                    97:72:8c:23:a6:61:f5:95:41:d1:46:01:95:c2:47:
                    26:1a:bf:22:dc:c5:6e:03:14:e2:9a:e0:29:e4:f0:
                    61:7f:ba:6e:73:56:0e:83:93:12:63:fd:7b:c1:9c:
                    ca:72:30:d2:6a:85:cd:48:12:9e:cc:eb:ef:a5:9d:
                    f6:76:f7:a2:1e:e4:df:b3:62:39:c4:79:85:4e:0d:
                    97:a3:63:06:80:1f:79:34:7c:ed:1a:05:05:ee:38:
                    a1:f9:02:ac:07:ab:67:d2:c1:36:4b:87:58:f8:09:
                    51:f0:93:32:fb:29:4e:40:ba:be:dc:8d:a3:49:71:
                    85:59:99:3b:a0:8c:65:aa:60:7e:89:55:3a:a4:81:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1C:39:53:2D:E8:A7:1A:2B:0D:22:8E:60:1F:AB:26:14:88:45:77
            X509v3 Authority Key Identifier:
                keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:39:3a:74:27:06:92:e4:d1:9a:1b:48:ad:9c:7e:0d:91:
         b2:89:7b:b3:b5:9d:50:a0:42:9c:be:8a:19:ce:12:60:d9:4c:
         fc:4f:b0:65:1b:98:bf:e9:08:28:20:06:68:4c:89:cd:9f:31:
         b0:96:52:70:b7:62:2d:c5:c9:e9:6a:59:c6:07:8f:0c:32:d9:
         40:00:68:c1:04:cc:b3:72:c9:48:b0:a0:ed:54:8b:d1:d0:53:
         99:bc:12:31:26:7a:14:3e:22:fb:14:e0:f2:7a:42:d6:0a:ce:
         d4:89:b8:71:1b:b0:1b:82:1b:65:6a:8f:6d:71:6d:a9:15:60:
         42:58:20:70:a0:aa:d5:55:74:65:7d:90:af:54:61:a8:59:03:
         86:9a:a1:1e:e3:2f:23:d0:47:6d:ad:1b:07:d7:84:b6:3e:8c:
         79:8a:8a:2b:10:2d:eb:19:f6:f6:bb:75:40:c8:8a:ea:c9:44:
         7f:ce:9e:aa:62:0a:28:7e:b0:af:a1:0c:d4:fb:1f:ce:21:4a:
         33:da:56:19:45:b3:cb:d6:c1:d3:6a:69:3d:55:f8:a9:b7:50:
         3c:a4:92:3d:22:08:48:65:78:b3:c6:33:9c:a3:5c:5f:b8:54:
         5f:7e:06:f8:05:01:62:21:07:2c:d9:70:b6:90:d9:05:ad:65:
         9f:a4:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:06 2026 by rpki-client