Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
File:                     aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json)
Hash identifier:          nCTEhdti4uJF0vqPDy0JK6qrZY6HjVURxxXWFDuJ3bs=
Subject key identifier:   3D:F3:6D:54:58:26:B9:0B:CB:20:D2:BE:2B:40:51:C5:BD:A0:A3:A8
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Certificate issuer:       /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial:       3536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
Manifest number:          352C
Signing time:             Thu 16 Apr 2026 15:05:51 +0000
Manifest this update:     Thu 16 Apr 2026 15:05:51 +0000
Manifest next update:     Thu 23 Apr 2026 15:05:51 +0000
Files and hashes:         1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: cyCChq1xkY9/QAVP+1eVso+SNXxkfmUO3u7ZW9mQX0M=)
                          2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 7GSQDTT9lMYmgzXavnFlTfzMx9O0vxKB1jx7qYaBTfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
                          rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
        Validity
            Not Before: Apr 16 15:05:51 2026 GMT
            Not After : Apr 23 15:05:51 2026 GMT
        Subject: CN=69e0facf-21eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:29:11:91:0c:a0:1c:45:ce:1c:d1:13:7b:
                    f1:d4:44:0c:77:f2:dd:19:1b:f7:68:aa:e8:7d:00:
                    bf:b2:99:47:77:c0:42:4c:0c:09:7b:f4:66:43:1d:
                    b3:3d:0e:e7:00:e4:81:2e:55:6a:09:ed:4e:e3:f1:
                    3b:0c:83:ad:34:10:b7:c8:98:9d:06:5e:05:09:c2:
                    31:2d:88:bb:28:32:f9:57:cc:21:a8:75:0c:42:5c:
                    ad:48:51:1e:15:32:b8:d6:67:ee:71:a4:75:2c:96:
                    db:12:37:15:1d:f8:c8:6f:7d:db:25:76:0f:6e:5b:
                    d2:4e:d1:80:f1:ac:2a:4a:55:93:b8:34:69:1f:08:
                    51:9a:0d:d1:fa:1f:61:6e:dc:84:eb:60:35:67:98:
                    1e:05:81:49:b2:b9:43:5d:54:43:45:50:06:00:1e:
                    09:85:cd:e6:7b:f5:4a:b1:43:84:f7:8f:a9:5f:1c:
                    48:2f:9f:3a:88:09:b7:6c:db:ce:32:88:a6:6c:90:
                    56:a1:76:50:2e:6f:d6:64:41:d0:50:35:13:e5:07:
                    63:74:13:c1:46:8e:f2:c4:1f:11:41:d8:75:37:ee:
                    99:1d:35:5e:8d:5c:d1:04:e6:4a:c4:63:c3:d7:eb:
                    85:90:ea:6b:f1:07:0b:aa:ab:ba:f2:4f:4f:e5:c6:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F3:6D:54:58:26:B9:0B:CB:20:D2:BE:2B:40:51:C5:BD:A0:A3:A8
            X509v3 Authority Key Identifier:
                keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:74:ef:d5:ae:df:ee:21:5d:b6:15:2f:c4:e0:d1:7a:a9:a0:
         41:53:3b:d0:8c:ca:94:1d:08:c4:a1:01:a1:db:53:27:dc:a6:
         5d:da:4a:7f:11:63:f9:70:cf:f0:15:a8:3e:24:7b:c8:13:e0:
         b0:dc:dd:96:9a:94:bd:76:cc:87:24:e1:d5:15:91:27:9f:23:
         ee:43:6a:41:16:78:cd:d8:b7:d6:a7:0b:82:3c:23:68:35:0b:
         b3:53:c0:a1:0e:12:9f:af:ad:32:24:1b:c6:8c:88:31:71:2e:
         d7:22:1d:f4:b1:02:64:5d:8b:ff:a9:f5:60:ae:ef:a5:36:bc:
         70:9f:59:c7:e8:01:28:44:2d:a1:75:a4:3d:b3:ff:59:12:e8:
         a7:69:5d:a0:d7:82:19:dc:8c:9f:dc:78:24:fc:80:76:cf:e0:
         90:bc:31:db:2a:1a:86:25:8e:fa:c6:ff:ee:ae:88:24:f5:e5:
         18:97:80:f0:f1:05:df:af:bc:21:93:e5:fd:7d:4d:ea:37:da:
         9e:3c:d8:c1:7d:e5:87:83:4e:57:3d:f5:18:b9:0e:f2:07:2e:
         0e:57:e7:df:88:9d:57:3f:cd:68:a7:31:38:7e:d3:d8:70:48:
         15:53:4e:ac:8b:94:17:47:02:ee:d8:1d:f6:3b:4d:9c:84:25:
         51:6b:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:06 2026 by rpki-client