Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
File:                     rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json)
Hash identifier:          wIgnYmC3HKzbmAGEaam5TCz2rveolEl/sLLBfLD/7Dc=
Subject key identifier:   85:5B:5E:0A:9F:F8:2B:F5:B2:AE:7E:40:51:FB:32:72:04:44:6B:84
Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
Certificate issuer:       /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
Manifest number:          0198
Signing time:             Fri 17 Apr 2026 04:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:37 +0000
Manifest next update:     Fri 24 Apr 2026 04:00:37 +0000
Files and hashes:         1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: JMcNmwXPlxe3XBsE4ppg5aktOwZA9IXu+A7z8S53QjQ=)
                          2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: Z1cqE+byBhamVYt8m6TD+SMQZ7V+S/UmeqhVRsfA3MA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
                          rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
        Validity
            Not Before: Apr 17 04:00:37 2026 GMT
            Not After : Apr 24 04:00:37 2026 GMT
        Subject: CN=69e1b065-b101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:9f:f2:54:85:15:9f:da:13:9f:1a:ea:1d:
                    a9:5e:45:e1:f4:d8:34:b6:28:80:c5:a9:0e:c7:82:
                    be:af:d8:8c:47:92:6c:41:8b:13:7a:9d:3c:af:5a:
                    e7:8f:03:ba:3e:fc:3f:7e:ea:b9:f8:8a:de:e8:08:
                    ee:0b:cd:6f:51:9c:20:64:b7:4c:e7:f5:54:49:dd:
                    f4:64:82:78:85:77:24:4d:eb:ff:3b:40:3e:9c:04:
                    ee:3f:8a:86:b3:d8:58:fb:92:a2:8e:57:2a:5b:e7:
                    7f:4f:a6:a1:d8:4e:1e:38:fd:ca:eb:a8:e2:0c:6b:
                    24:00:49:16:ae:d8:c8:b2:ef:4e:32:33:6a:4f:97:
                    f8:45:ba:be:17:f3:b2:53:0a:1c:f3:0c:3c:83:3a:
                    af:16:cc:b0:07:9a:74:2c:fd:12:d4:cd:fe:ba:a4:
                    ed:96:84:20:70:80:bf:f5:15:88:00:43:7a:ad:32:
                    b9:8b:50:06:35:18:14:38:d2:9b:a9:7b:aa:6c:6c:
                    16:04:c3:63:2d:11:f9:bc:46:64:96:0a:f1:c9:12:
                    43:e3:ec:ca:29:72:bc:c1:9d:c3:a7:e2:d2:ab:36:
                    85:a8:e2:4b:aa:71:d1:ba:1d:4f:d8:be:63:81:01:
                    55:94:fe:38:ed:9d:38:32:98:2e:10:94:9b:f5:2e:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5B:5E:0A:9F:F8:2B:F5:B2:AE:7E:40:51:FB:32:72:04:44:6B:84
            X509v3 Authority Key Identifier:
                keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:ba:b8:1b:42:d5:a3:5d:79:38:2c:f0:64:f5:8f:22:4a:
         91:4d:31:85:c1:10:ef:4a:0f:c7:27:1a:9d:d9:c1:93:74:a9:
         ff:0f:99:3e:7f:13:ac:02:0e:ac:ba:d3:67:1c:bf:5a:d7:5d:
         f8:9d:91:de:26:0c:6b:86:32:ff:96:1f:d2:cf:ec:c3:df:c6:
         55:31:2c:5f:79:20:e6:86:26:e4:45:1d:fc:3f:01:56:c7:45:
         db:65:d7:d4:a9:e0:c4:5b:8e:ba:4f:f7:ab:1c:fe:13:c4:42:
         31:31:52:fc:69:d0:05:39:e1:cd:f6:74:f5:73:1f:f4:24:a3:
         de:06:e7:b2:95:d7:70:d7:cb:c3:fa:35:e4:b8:40:f2:a6:a8:
         86:dd:04:e6:64:1c:59:0b:4d:99:31:77:e5:41:28:58:e9:28:
         6c:52:34:20:56:db:23:d4:22:64:c8:52:d7:a4:cd:00:f0:c6:
         5f:05:77:a5:7c:e3:59:d9:0d:89:95:ce:64:2b:33:d6:87:04:
         83:73:86:91:1e:fa:52:51:5b:0d:f1:8c:b2:0c:99:9b:30:5e:
         0a:ef:d1:c5:35:cc:7d:5a:2a:54:36:97:fe:35:7e:8c:d5:e0:
         a8:e9:d7:17:88:35:64:87:5e:5c:ab:4e:87:12:06:f0:66:4b:
         c1:5f:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:59 2026 by rpki-client