Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
File:                     bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json)
Hash identifier:          A/zGdTX7RgUbG7hBEd5lpV4+EJPLicbq846mUIeK8JI=
Subject key identifier:   5E:B9:E3:6F:16:8B:49:EA:3F:08:A1:EF:20:1E:3D:A6:1C:0C:FE:8C
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Certificate issuer:       /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
Manifest number:          023B
Signing time:             Fri 17 Apr 2026 02:20:16 +0000
Manifest this update:     Fri 17 Apr 2026 02:20:16 +0000
Manifest next update:     Fri 24 Apr 2026 02:20:16 +0000
Files and hashes:         1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: xtY4f3W1Vsu2XYTV6mFVgBhrdGVrl2d1IfTkuOkT0Po=)
                          2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: k3L9ab3H7uJFNdeYK351f5Lnmo8/ODL7JzSCj0/h8ho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
                          rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
        Validity
            Not Before: Apr 17 02:20:16 2026 GMT
            Not After : Apr 24 02:20:16 2026 GMT
        Subject: CN=69e198e0-e1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:5c:23:dd:fd:d2:4e:fb:c7:e2:f7:c3:9b:
                    a9:bf:46:be:85:ee:c4:9f:80:3d:09:54:51:62:26:
                    1e:66:bb:a0:b6:cb:30:df:fa:32:68:3a:74:66:8e:
                    28:11:6f:db:76:44:17:0b:f2:ee:a0:3a:86:09:e0:
                    bd:02:86:4b:2f:e8:38:5c:f4:93:66:64:9f:96:6d:
                    2b:3a:a1:75:f0:17:8e:6d:b5:09:cf:55:62:24:60:
                    9b:bb:10:f7:41:13:ce:23:3d:45:fe:80:b3:0a:11:
                    70:3e:ab:fe:5a:88:47:43:5e:4b:70:65:7f:c6:ef:
                    91:78:53:f8:2e:70:aa:ef:ef:db:90:c1:de:fc:c5:
                    f5:8b:e4:f4:47:3d:11:4e:88:2e:7d:ae:6f:c6:f5:
                    17:31:33:0d:bd:3b:83:24:aa:f1:a1:1c:f8:1e:1d:
                    ad:78:1d:06:f0:67:bd:37:5d:f5:57:3c:e2:ad:a8:
                    fa:09:8d:85:d7:3e:3e:f8:9b:02:b3:7c:92:cb:cf:
                    15:f1:a7:cf:76:ca:c6:43:4f:71:19:3b:dd:8a:c9:
                    93:c7:85:9a:f0:5a:e6:ca:5f:ec:99:d8:45:95:43:
                    b7:57:09:51:08:16:3c:09:27:8c:b2:c2:a9:e0:92:
                    7e:99:d8:4b:ce:ea:ef:67:16:86:32:98:5b:03:f3:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B9:E3:6F:16:8B:49:EA:3F:08:A1:EF:20:1E:3D:A6:1C:0C:FE:8C
            X509v3 Authority Key Identifier:
                keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:55:b5:ad:ce:e7:c4:8c:e0:62:52:77:16:20:80:a2:d0:
         5e:04:93:ae:39:45:dd:97:17:8d:c2:f2:25:f7:f2:54:d2:b1:
         94:a8:af:b5:75:67:08:3f:f3:d7:b0:61:f0:36:35:6b:7e:c5:
         33:89:32:07:c9:34:44:53:ba:d2:bf:b3:63:74:19:c1:6d:3d:
         1b:04:13:e6:0b:c4:4a:85:bf:33:ab:bc:1d:6a:8a:b7:9e:3e:
         e8:e4:52:b4:7d:43:d9:d6:ec:6a:20:91:e8:3c:ea:40:5c:49:
         64:c5:4a:8a:12:8f:09:ab:9e:b0:8c:32:d8:56:dc:69:b3:8e:
         9e:0c:30:63:2b:cf:af:38:0c:27:ce:f6:7d:be:7b:c9:54:93:
         8f:eb:c9:e8:02:57:ff:98:a8:73:36:77:77:9c:f9:32:1e:89:
         fb:ec:9e:e1:c5:69:03:d0:50:de:3f:ef:38:dc:91:3a:63:04:
         9b:b4:63:64:77:50:0c:c9:44:cf:5f:81:68:22:a1:0e:8e:e7:
         ac:87:cb:93:64:61:b1:ca:07:88:54:14:bb:42:b5:42:59:ae:
         94:1f:6e:66:67:4b:38:0e:6a:a6:3d:5a:72:39:fa:94:22:e0:
         0e:e8:03:bb:d6:cc:a9:b4:c6:16:fd:e0:bc:8f:42:4f:31:5b:
         d4:bb:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:24 2026 by rpki-client