Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
File:                     xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json)
Hash identifier:          Hl+nhG76AyRpZA7OgT/Iez4bKYGq66xId1P1OZ8d1jA=
Subject key identifier:   32:EC:89:E3:43:74:9C:3F:C3:C4:5B:29:38:A1:DC:97:93:94:24:02
Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E
Certificate issuer:       /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
Certificate serial:       0E4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
Manifest number:          0E36
Signing time:             Thu 16 Apr 2026 17:43:26 +0000
Manifest this update:     Thu 16 Apr 2026 17:43:25 +0000
Manifest next update:     Thu 23 Apr 2026 17:43:25 +0000
Files and hashes:         1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: rBWhnYu0gRrhldOAIR2+KrS39cPADwr4sqrhTNx0nDc=)
                          2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: CCUSyUc3/1XbRpoqecbzxIm1UblozgWFHip7YO0E3dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl
                          rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3659 (0xe4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
        Validity
            Not Before: Apr 16 17:43:25 2026 GMT
            Not After : Apr 23 17:43:25 2026 GMT
        Subject: CN=69e11fbd-92e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:f9:d5:a8:91:ad:9b:91:5c:02:73:f2:94:
                    4f:b9:ad:b8:a4:51:65:0d:65:19:35:b8:a7:2d:0f:
                    5f:35:b6:2d:9f:f0:84:67:5f:b0:e4:c4:53:04:b1:
                    44:36:80:6f:86:b4:57:dc:3d:03:18:c6:3d:f0:7d:
                    a5:3c:39:88:0b:d2:67:8d:78:67:51:b3:b2:b1:37:
                    eb:55:a2:3d:2e:0a:ff:47:58:5d:cb:72:09:93:26:
                    83:c5:de:09:91:19:bb:77:41:8b:7b:86:75:3b:40:
                    21:f9:15:3b:c2:72:96:b2:c0:4c:a0:bd:b6:d2:cb:
                    e3:57:8e:28:8d:0f:26:98:bf:16:0b:b7:67:29:9d:
                    1b:83:80:2b:a0:bb:af:73:41:eb:9a:52:27:7c:1e:
                    eb:91:31:6f:29:7f:60:32:0c:49:3e:50:0d:59:21:
                    cc:d3:5c:3d:38:d5:51:1e:bc:65:cf:d5:51:c9:0e:
                    95:f7:7a:8a:85:93:6b:68:80:ca:4d:73:72:ad:cd:
                    00:a0:94:eb:59:f6:68:52:d8:ab:6c:a6:f4:0e:b0:
                    70:85:7a:f5:56:9e:8b:44:1d:a2:5d:8f:28:fd:50:
                    27:6a:65:43:2e:45:4e:4a:db:07:7b:95:14:0c:52:
                    64:a8:aa:17:f9:98:6e:ca:e5:b2:01:dc:8f:75:f2:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EC:89:E3:43:74:9C:3F:C3:C4:5B:29:38:A1:DC:97:93:94:24:02
            X509v3 Authority Key Identifier:
                keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:de:56:f9:ed:10:28:ef:d2:96:b7:39:7a:0d:80:e2:16:d3:
         0b:1d:01:11:aa:56:2f:fe:e6:92:06:ac:e6:0a:4f:67:08:ee:
         8e:8d:3b:b9:e0:02:59:bc:73:8a:b2:67:52:1d:48:57:af:04:
         3c:09:c6:b0:6d:28:24:e6:d0:81:26:09:53:03:e5:58:b6:8d:
         07:16:05:b5:b8:5b:eb:3a:ec:52:cd:5d:71:dc:cd:7a:c0:a0:
         1a:03:72:88:e3:53:a7:5a:d2:da:36:fe:83:7e:9c:88:50:a3:
         48:53:b4:f6:c4:61:d8:89:11:93:58:b4:16:07:e4:55:58:9f:
         f1:a8:f7:3c:90:8a:ba:15:40:36:da:c3:98:fa:46:94:9e:07:
         c2:09:6b:9c:ad:66:60:45:56:f6:01:93:0b:3b:e8:4a:fb:b4:
         96:cd:36:5e:d4:07:ce:e8:15:94:2b:94:7e:9d:a5:8d:06:7d:
         d6:d4:d1:c6:45:eb:1b:07:46:76:b6:ac:8c:2a:3c:45:24:30:
         2b:e9:43:fe:b1:c3:81:17:08:44:fc:f3:cd:d6:d9:63:c2:42:
         8d:c9:f8:71:b2:46:38:eb:99:3a:a3:af:bf:3d:ed:82:b3:5a:
         dd:01:e2:47:af:e4:36:8c:32:fa:4e:97:43:47:f0:3a:49:b8:
         33:a7:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:48 2026 by rpki-client