Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
File:                     4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json)
Hash identifier:          ndqZz3E1ewYTWmsWxQpA2aATBDvRflyfA3Gj/nNkmiI=
Subject key identifier:   F0:09:68:64:00:07:5D:FB:1F:B7:4B:E1:50:4B:00:14:CC:54:90:2F
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Certificate issuer:       /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
Manifest number:          01F9
Signing time:             Sun 19 Apr 2026 02:58:24 +0000
Manifest this update:     Sun 19 Apr 2026 02:58:23 +0000
Manifest next update:     Sun 26 Apr 2026 02:58:23 +0000
Files and hashes:         1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: 0iddKQTZCVFDAtf987EdUJGc4vu16Ml9YxGlIVPll+g=)
                          2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: hyI/PoaRKntL7XpUGJIJnV0DfJsuOHooYB61GtF+kzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
                          rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
        Validity
            Not Before: Apr 19 02:58:23 2026 GMT
            Not After : Apr 26 02:58:23 2026 GMT
        Subject: CN=69e444d0-2ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:55:dc:e7:40:af:03:39:ba:f2:0b:5c:52:
                    35:be:10:f9:23:65:10:e3:b0:80:f7:30:2f:b1:b8:
                    ac:0d:42:02:1c:90:96:1a:c0:80:fc:2e:c8:1e:2a:
                    ae:b7:64:22:ca:60:31:f0:c6:c2:c5:83:77:ab:b3:
                    03:60:1e:8b:cc:5f:41:2b:05:c0:cf:62:64:a4:95:
                    02:07:1f:94:ef:b1:90:8f:38:00:f2:67:a7:8f:0f:
                    18:3d:3e:33:25:4e:9e:1d:cc:d6:d7:4f:d8:c7:76:
                    77:e2:b6:08:a3:58:aa:ff:b5:4f:e9:34:02:86:02:
                    85:50:4a:7c:2c:a2:35:03:b7:fb:9c:a8:9e:53:87:
                    62:89:17:1a:be:47:c2:9c:21:fd:fa:ef:39:98:91:
                    c4:a5:2e:0e:1a:a4:23:58:69:c9:f8:60:3a:1a:8a:
                    92:f1:44:b7:4b:d6:2c:cb:47:eb:71:7a:38:16:4e:
                    b3:74:0b:15:0b:00:28:36:31:10:c5:d7:d3:08:01:
                    b6:6c:71:b0:51:4f:b1:57:7b:8e:59:2b:f5:03:34:
                    80:89:94:f9:0b:8f:0a:c8:ff:b6:d1:9d:f0:3f:aa:
                    62:6b:0f:61:9a:4e:f1:9d:1c:a0:5f:c3:8b:cb:09:
                    9f:07:99:d3:ac:a6:67:07:86:63:6b:22:6c:8f:39:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:09:68:64:00:07:5D:FB:1F:B7:4B:E1:50:4B:00:14:CC:54:90:2F
            X509v3 Authority Key Identifier:
                keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:67:ee:bb:a5:c8:a4:81:00:bd:e4:ff:bf:a7:79:6d:52:b7:
         ea:0d:41:51:83:5b:f4:e9:a5:ae:43:f8:27:7a:d8:10:c4:74:
         c2:55:41:c6:76:cb:53:88:2e:0f:7a:f2:12:b6:67:ce:ea:0b:
         2e:1f:7c:ed:4d:4f:af:39:8d:05:4c:9f:b9:1e:a4:af:8f:0f:
         25:e4:c4:17:dd:fe:5d:83:53:35:22:53:c7:37:5f:4f:41:4d:
         eb:5f:20:ef:85:98:3e:c2:44:0d:c4:f4:a0:bd:ce:85:ce:d0:
         b7:53:46:49:74:51:84:53:ec:90:05:bd:25:0c:cf:ac:6c:55:
         f0:eb:f7:2e:46:05:ab:3b:94:07:14:60:f5:3d:ed:c6:a3:90:
         69:05:78:3f:d4:9a:aa:b1:8e:9d:24:a0:61:31:4d:91:57:50:
         48:31:79:ac:15:fd:f4:36:d3:a6:a8:6e:6f:7e:4a:a8:53:03:
         ee:8d:94:ce:17:a7:59:44:bb:f3:5a:97:7c:c1:5e:a4:16:8b:
         c5:27:84:0a:5f:98:ba:f8:ab:32:48:bc:01:d0:9e:51:34:8c:
         a2:ef:ec:fd:5c:bb:51:e8:01:04:e8:78:29:55:0d:eb:0e:7b:
         91:70:5e:50:e6:79:64:88:95:28:1d:4d:f0:f2:8c:83:a2:07:
         88:e8:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:33 2026 by rpki-client