Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
File:                     7wP9th1kvpTlo3YNxbxgjOSr0r4.mft (raw, json)
Hash identifier:          9pn4Ot5GwAcMpTZ6IcJduSVaT6u8ZPRHwUi9ky3bAI0=
Subject key identifier:   2E:E9:4A:D6:8A:2E:D5:F8:CD:77:8C:4C:CD:DB:D9:7F:25:42:53:37
Authority key identifier: EF:03:FD:B6:1D:64:BE:94:E5:A3:76:0D:C5:BC:60:8C:E4:AB:D2:BE
Certificate issuer:       /CN=A9189C03/serialNumber=EF03FDB61D64BE94E5A3760DC5BC608CE4ABD2BE
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
Manifest number:          2C
Signing time:             Sun 19 Apr 2026 08:18:59 +0000
Manifest this update:     Sun 19 Apr 2026 08:18:59 +0000
Manifest next update:     Sun 26 Apr 2026 08:18:59 +0000
Files and hashes:         1: 7wP9th1kvpTlo3YNxbxgjOSr0r4.crl (hash: gY7NmByUBxBYfQeQnExkXsq9ilOdIYgHTvihslTiS6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.crl
                          rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189C03, serialNumber=EF03FDB61D64BE94E5A3760DC5BC608CE4ABD2BE
        Validity
            Not Before: Apr 19 08:18:59 2026 GMT
            Not After : Apr 26 08:18:59 2026 GMT
        Subject: CN=69e48ff3-8f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:d3:a2:d9:d5:e8:27:26:5b:cd:a9:87:28:
                    28:6d:8b:2b:99:02:34:39:68:15:39:1b:d9:d8:57:
                    d8:b9:4a:be:9d:6f:89:49:96:33:c0:41:25:17:0f:
                    b7:9b:02:e1:fa:c9:f7:d4:16:26:ae:03:52:86:59:
                    86:82:d5:bb:d1:90:66:7b:85:b9:2e:f3:d6:c5:43:
                    34:e3:0a:df:28:f3:b8:77:fa:01:34:79:1f:f0:bb:
                    84:7e:53:56:7d:f0:e1:7b:77:93:14:88:78:9b:a3:
                    b8:d3:68:d3:e2:1d:a3:c5:36:06:fe:ed:d0:ef:b2:
                    04:a9:06:09:d5:2d:8d:38:65:5e:ac:b3:11:72:f1:
                    e1:b2:9c:57:f1:54:c6:36:e4:33:09:75:cd:b4:70:
                    fa:91:bb:46:1a:ae:34:cc:cb:aa:87:e0:ac:8d:24:
                    39:fb:35:33:99:ee:50:5f:5a:37:a0:ad:db:23:31:
                    d4:3e:39:6b:f1:d4:5a:5d:95:9e:c8:44:64:26:21:
                    a6:e3:da:d4:7a:14:8b:fe:4c:1c:fb:ea:3e:b9:22:
                    be:fc:6d:12:fd:67:05:dd:ce:86:11:b7:bf:23:62:
                    a3:10:39:db:26:14:f2:71:2d:29:20:11:bd:cf:57:
                    90:a5:3d:7f:05:66:0a:12:c8:68:45:df:66:0f:0a:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E9:4A:D6:8A:2E:D5:F8:CD:77:8C:4C:CD:DB:D9:7F:25:42:53:37
            X509v3 Authority Key Identifier:
                keyid:EF:03:FD:B6:1D:64:BE:94:E5:A3:76:0D:C5:BC:60:8C:E4:AB:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:94:f8:13:62:cb:48:c7:46:02:58:34:4b:36:b8:64:d5:67:
         7c:a3:6d:41:ed:8e:a8:02:f0:fe:88:89:fe:a3:7e:55:a7:0f:
         ed:9a:15:24:d6:54:8f:b2:21:70:25:21:e2:8f:c9:cc:cd:ae:
         f6:16:f9:0c:36:56:c5:9f:f9:da:ba:cd:6e:0e:58:82:a9:6f:
         c8:38:80:0e:45:37:38:94:0c:78:3c:68:79:93:d5:a8:4b:11:
         34:d6:9c:8d:f8:70:e9:ba:63:58:d7:ad:ca:37:ab:95:56:dd:
         67:10:e7:4f:e6:cf:f0:66:24:3b:a3:fc:ca:46:96:dc:0d:48:
         fd:90:3d:5a:b8:00:db:2a:ca:a5:7d:d7:b4:7a:1d:a1:3d:55:
         b2:fe:fc:22:a1:4a:1f:87:d9:d1:de:99:50:dc:d7:b6:a0:34:
         35:62:f6:24:4e:d6:b0:7b:a2:d6:94:13:54:d8:0e:1a:a0:a4:
         2a:a6:f4:cd:6a:6c:83:4b:ff:1a:b9:e2:0c:22:d0:b2:9e:a2:
         4a:8b:f2:cc:06:71:77:db:dc:fb:47:77:78:02:cc:11:2e:59:
         41:eb:38:87:86:f0:1d:36:74:25:49:75:0e:31:a2:75:19:35:
         68:f6:d8:b2:ab:e6:cb:34:30:df:37:e9:4f:5b:07:c6:0a:c1:
         c9:db:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:29 2026 by rpki-client