Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
File:                     1w6O-A81h--QKJbYsw3LC26zOa8.mft (raw, json)
Hash identifier:          jH0uW8Sr02tqEIM8c8ZYtEqfAha4p+0HKQo6CTr+2W8=
Subject key identifier:   B4:42:AA:88:F1:D6:26:06:98:9E:F4:BA:2E:F3:3D:F2:84:1E:01:A9
Authority key identifier: D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF
Certificate issuer:       /CN=A9180323/serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF
Certificate serial:       3538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
Manifest number:          3530
Signing time:             Thu 16 Apr 2026 14:45:17 +0000
Manifest this update:     Thu 16 Apr 2026 14:45:17 +0000
Manifest next update:     Thu 23 Apr 2026 14:45:17 +0000
Files and hashes:         1: 1w6O-A81h--QKJbYsw3LC26zOa8.crl (hash: JTX6cCXhVEgjoVZqWDCmYYqT/5JfLEC8B9h2YIdMQUY=)
                          2: A8306EA22D6911EC9F557316C4F9AE02.roa (hash: NW6acT7m8L/bVVZ3ua/PyTSR1cibHNywJ2Cdir/gkAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl
                          rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180323, serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF
        Validity
            Not Before: Apr 16 14:45:17 2026 GMT
            Not After : Apr 23 14:45:17 2026 GMT
        Subject: CN=69e0f5fd-def8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:1d:34:3a:82:7f:5f:8c:ef:0a:76:3b:d0:
                    3e:26:e6:ee:43:7f:92:5a:e8:c9:b3:d5:66:fa:cc:
                    04:23:d4:d4:bb:09:b2:1d:09:31:53:c4:b8:37:49:
                    7e:45:56:a5:aa:3f:2c:bb:ec:51:84:51:bc:7b:72:
                    22:06:f8:64:3c:bc:07:1a:a8:70:fe:c3:db:fb:14:
                    8f:bc:2d:9d:c3:bb:e0:9c:cd:7d:b2:db:76:bb:62:
                    0c:94:cf:88:63:e1:7e:ed:d5:a1:fc:fe:da:d1:c9:
                    0f:14:be:d3:99:57:3c:6a:9a:3f:2b:89:a7:93:7e:
                    db:b3:0e:21:bf:91:64:32:81:d1:12:4c:f2:d7:07:
                    6f:1a:62:a5:f9:bc:53:4c:9f:47:c6:6b:2c:e5:db:
                    61:e0:19:55:87:38:c7:21:2d:ed:5d:3d:7a:47:14:
                    9c:b8:3e:05:bd:66:d7:30:10:01:79:fc:ca:3f:52:
                    aa:f4:fe:15:75:46:e5:dc:12:de:26:1f:6f:5e:b0:
                    41:ba:af:11:85:0a:03:e9:64:67:64:b9:a1:a0:70:
                    c4:58:2c:0e:4a:83:f2:f4:49:b0:e8:64:01:1b:1a:
                    39:ee:d5:54:1a:43:0c:cf:d0:01:ed:3d:9d:de:ea:
                    37:45:37:45:a8:72:ee:54:a3:dd:d2:96:30:ab:0a:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:AA:88:F1:D6:26:06:98:9E:F4:BA:2E:F3:3D:F2:84:1E:01:A9
            X509v3 Authority Key Identifier:
                keyid:D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:72:4b:0c:b9:60:2b:81:f2:20:6a:4c:2f:7d:bb:f5:c7:
         b9:95:8c:cf:f1:d0:20:4b:41:d1:99:cb:76:b7:dc:83:98:c6:
         14:6e:93:ef:36:79:2d:8f:38:d4:21:60:ab:e5:5e:94:68:e3:
         07:b0:b3:84:8e:ad:91:e1:17:c5:ad:97:1f:65:49:2d:98:07:
         a5:52:f7:bc:bd:6a:93:3c:a0:7c:60:91:c4:64:ce:5a:6d:98:
         b2:be:b1:e7:d5:a9:37:bf:58:c7:2b:7d:30:12:2c:e5:68:a2:
         c9:24:5c:fb:cd:ff:bd:3d:bf:2f:c9:aa:da:f9:55:12:76:a3:
         7e:21:1c:ae:a7:09:83:3a:00:fc:6d:50:6b:0d:d5:85:b7:61:
         f7:61:42:19:15:f0:8d:b8:0c:75:5a:42:2d:93:d0:d0:c9:a9:
         60:fe:1f:3e:4d:a5:7a:e1:b8:68:7b:cd:50:42:3b:ee:fb:cd:
         6d:34:4c:7b:9b:f9:34:13:d6:01:d2:42:27:5b:8b:2e:60:e3:
         b6:a5:ea:41:da:42:f2:9c:3e:0a:4c:31:3a:7a:ac:73:c5:51:
         b8:72:72:e5:08:b2:81:cc:b2:58:af:de:16:eb:6a:73:38:31:
         40:84:7e:fe:b9:29:ba:cf:8d:2c:d1:96:ff:a7:11:14:35:41:
         d0:e2:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:13 2026 by rpki-client