Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          y9+VLa+OWBysmu510cguyxFoWaQCHbXH2pzDiId2hIc=
Subject key identifier:   EB:6B:35:4E:EB:6F:7B:AE:B8:B1:36:AF:9E:C2:9F:55:A3:38:11:49
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          0197
Signing time:             Fri 17 Apr 2026 04:04:43 +0000
Manifest this update:     Fri 17 Apr 2026 04:04:43 +0000
Manifest next update:     Fri 24 Apr 2026 04:04:43 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: NYI5uUv/Ixo2O/8Lv5tz5FgHKr8UW4u6PoUlr2R9jwo=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: zQuRWZynPjX+xVieuFFOjcx7urcSlA8n96bIrvyW0V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Apr 17 04:04:43 2026 GMT
            Not After : Apr 24 04:04:43 2026 GMT
        Subject: CN=69e1b15b-d1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:64:52:5d:34:e5:b5:7b:cd:f7:ba:bc:b7:
                    a3:97:c3:85:7f:f3:f9:20:dc:5d:ed:86:01:bb:fb:
                    cf:56:9d:de:e0:de:dc:5d:ab:3b:df:c4:c8:13:75:
                    3a:30:f0:89:6e:2a:cc:31:98:db:77:3f:ac:01:4e:
                    14:05:4e:0c:ea:1f:d3:59:7c:25:cb:0a:aa:7d:ff:
                    9c:fc:08:ec:5c:fb:70:be:82:a0:2d:51:15:f8:45:
                    16:fd:3b:0a:44:b0:d0:b3:d0:77:c0:f7:cc:56:90:
                    5c:0c:b2:da:63:9d:3b:9d:2e:ed:cf:c8:39:f7:c9:
                    5f:82:55:55:66:b8:c5:80:c3:5d:30:39:f3:13:c9:
                    ac:4d:48:4d:a7:eb:6c:c8:04:1b:49:36:4c:27:eb:
                    02:88:af:e2:72:c8:7c:23:4d:2d:60:f5:a9:47:81:
                    e6:c8:c2:35:6d:4f:e3:9d:9d:cf:8b:85:37:0d:e9:
                    27:b8:47:bd:bd:2d:47:83:3e:30:b6:13:8f:f2:cb:
                    ff:a1:34:8f:52:c2:d4:e5:b2:40:e4:5d:f7:97:8a:
                    bb:5d:e8:cc:0e:93:04:ff:7f:ef:6a:b2:e4:30:0c:
                    18:b4:f9:36:64:5a:98:02:c2:21:78:56:a8:ab:1d:
                    65:51:76:0b:50:72:87:69:b0:23:5b:01:3f:15:e9:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6B:35:4E:EB:6F:7B:AE:B8:B1:36:AF:9E:C2:9F:55:A3:38:11:49
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6c:ff:63:43:46:2e:b8:2b:ac:26:55:85:5f:fe:f9:ef:ea:
         a4:8e:ce:ea:99:08:c7:ef:84:14:a7:4c:83:5c:18:b8:62:fd:
         13:92:3c:7b:00:34:30:83:67:27:bc:8a:88:53:7e:9d:66:6c:
         70:84:06:60:32:09:80:6b:f1:85:42:5e:16:63:3f:dc:e1:ff:
         13:9b:c9:4b:7a:d1:c8:91:c1:41:6f:52:6f:26:1b:98:40:a2:
         c3:ff:cd:3c:60:3d:79:7b:d7:8b:8e:f1:ba:ee:ac:50:05:ee:
         59:89:c3:67:63:57:c7:60:dd:22:b9:b7:6e:ad:e6:a1:44:87:
         22:e2:76:6c:00:a0:2b:4c:90:e0:4d:b2:5a:57:31:0f:79:ab:
         82:2d:ce:f6:9f:22:ed:a4:2c:17:69:97:15:98:12:22:ba:21:
         95:88:bd:63:cc:be:c7:26:71:ad:b0:aa:1d:a9:88:f1:a7:6f:
         b0:24:14:a5:02:94:07:20:fb:64:48:01:1c:6f:39:05:e8:04:
         5a:b1:78:a1:d2:ab:2b:49:54:61:27:c0:26:f6:c3:ac:e9:89:
         db:72:73:61:74:21:d3:11:54:d8:ea:ee:f2:0e:62:1a:f9:79:
         7c:47:5f:ba:c2:f5:7e:7c:2b:c3:ab:ad:8e:b7:0a:42:c7:80:
         b9:27:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:27 2026 by rpki-client