Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
File:                     7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json)
Hash identifier:          1J+8JOsN9ABj0dAQ/2FnyJiSj/g4pslYoHyXMqTUpVQ=
Subject key identifier:   FE:9A:01:05:4E:3C:53:F3:1F:A4:47:36:29:9C:F1:8C:8D:29:8D:4A
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       03E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
Manifest number:          03D6
Signing time:             Fri 17 Apr 2026 00:29:01 +0000
Manifest this update:     Fri 17 Apr 2026 00:29:00 +0000
Manifest next update:     Fri 24 Apr 2026 00:29:00 +0000
Files and hashes:         1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: 1tPCRX2w+Zousn3raZlGa6QXwQXT1klJA12OF0xs3rY=)
                          2: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: xMR/9VLxhNzTjgVdcqeCpKtEJ++jbZKm5f1wzo+8kac=)
                          3: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 7LRK+KcwEOnWS3ymmi8vjxn0ffhWtnXXLkl7lUy8srI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Apr 17 00:29:00 2026 GMT
            Not After : Apr 24 00:29:00 2026 GMT
        Subject: CN=69e17ecd-8c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:04:6a:46:32:95:a6:6c:99:35:65:ac:a8:
                    71:d1:2b:3f:99:df:33:3d:98:6c:ee:82:b5:d2:1f:
                    00:79:33:64:e3:d9:01:c3:31:b4:31:d7:89:32:3d:
                    bf:0d:7e:a0:8b:a5:43:6e:fe:22:41:cb:6d:b8:e4:
                    69:28:74:a6:0d:a1:33:85:3e:b2:98:19:bd:98:6b:
                    a4:ed:cc:5e:03:ab:30:ae:eb:42:b2:d4:e3:e7:76:
                    cb:f5:93:b5:2f:df:7a:57:52:52:1a:8a:dd:01:a1:
                    92:36:be:a8:f7:91:e2:71:d6:a4:d9:59:28:51:3d:
                    fd:36:d8:dd:2e:47:b4:e7:50:0a:d5:8c:a4:62:e9:
                    e3:b5:2a:eb:ec:2b:13:c8:ff:ea:ce:c0:11:f4:1b:
                    d3:6d:0d:db:6b:06:f6:51:9c:ce:e4:1a:96:e0:81:
                    22:6a:fe:55:bb:c1:28:4d:98:a6:8e:6a:be:27:87:
                    43:c7:e4:43:21:a0:ce:eb:4f:fa:b0:81:41:8a:6e:
                    66:c5:79:6a:3e:29:7a:65:1b:db:cf:fe:fa:81:0c:
                    aa:d7:54:19:ff:68:d2:cb:b2:df:21:82:38:ae:2d:
                    97:9d:da:7a:e4:89:88:aa:63:52:19:5e:a5:25:67:
                    fe:db:41:8c:b3:ea:81:66:13:bb:65:89:4a:4e:bb:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9A:01:05:4E:3C:53:F3:1F:A4:47:36:29:9C:F1:8C:8D:29:8D:4A
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f5:3e:77:bd:88:cb:24:fb:fe:5d:27:56:42:d4:e5:d0:77:
         5d:54:53:24:90:5e:57:1d:fb:88:0f:a0:b4:3c:e8:8f:1c:f6:
         40:ab:5b:2e:1f:47:ff:0b:48:87:81:9d:a0:3a:44:25:9a:db:
         a2:6d:77:e6:df:d3:dc:da:01:eb:12:70:63:68:51:d0:82:0d:
         43:a7:31:9e:8b:fe:0b:6b:c0:98:09:d2:a0:20:84:80:fc:63:
         b8:07:1c:51:bc:2c:25:e3:a4:b0:fc:05:12:1b:b2:c0:15:ee:
         28:84:9e:d1:84:da:3f:d4:67:a8:b8:bd:39:b9:af:8b:eb:03:
         31:b2:2e:c9:41:3d:e7:4c:85:2a:7b:5f:1c:3f:91:e8:03:29:
         67:5a:05:c4:fb:dd:20:41:cc:e4:ac:1f:7f:15:66:15:6d:e4:
         9d:41:cb:00:c8:b9:09:a6:16:1b:a1:f0:ff:8c:25:c6:52:af:
         e0:8f:12:27:fa:67:64:fa:8d:c1:e5:75:dd:be:63:7b:2f:57:
         ff:ba:2d:5e:a4:30:77:10:9e:b0:cb:53:2c:04:b9:a8:e7:cb:
         b7:a6:fe:0e:cd:71:4a:b0:e4:3d:5f:59:3f:ff:30:2a:f7:48:
         6d:8b:6d:7e:e7:f2:eb:d2:0f:fa:c1:e9:fb:55:0c:d9:56:16:
         76:c5:09:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:09 2026 by rpki-client