Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File:                     KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier:          E96CTlUDWLeS0jg3AFRzU8J0xD04IQOwgQqws0nxs9s=
Subject key identifier:   E1:9E:4B:59:47:0E:0E:5A:EE:35:8B:80:C1:E1:D5:8F:48:F6:54:E6
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer:       /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number:          0233
Signing time:             Fri 17 Apr 2026 02:22:24 +0000
Manifest this update:     Fri 17 Apr 2026 02:22:23 +0000
Manifest next update:     Fri 24 Apr 2026 02:22:23 +0000
Files and hashes:         1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: Y4ENupTT+Gx5JwH8xvL+wZ23w7rzbpz4Vh4bHStceRU=)
                          2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: 72/bCWar4kI1SS9FjdRKOsQjDQzMinFfK2s3pr0xemY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
        Validity
            Not Before: Apr 17 02:22:23 2026 GMT
            Not After : Apr 24 02:22:23 2026 GMT
        Subject: CN=69e1995f-2ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:35:97:f1:92:a8:d6:8f:60:9e:c6:29:22:
                    95:14:e3:07:d7:c9:59:09:d3:6f:49:7b:9c:54:28:
                    5d:27:ae:0a:d7:a1:2a:8d:a4:42:cc:2c:cc:0d:db:
                    e1:24:3a:c7:ec:ba:93:22:ee:64:04:f7:6d:75:e9:
                    c1:4c:9a:1d:24:8a:f3:fb:7d:a8:54:82:c9:83:47:
                    21:ca:ec:5e:77:d5:5f:51:b6:47:66:af:5c:77:2c:
                    19:c8:11:e7:7b:6a:c2:c6:8c:dc:9e:60:cb:56:30:
                    c9:3b:fe:56:61:de:2d:8e:11:d5:d2:33:4a:77:9a:
                    44:70:dd:b5:79:46:7d:84:85:df:fb:96:b6:7c:29:
                    c9:a5:42:1b:eb:e3:3a:42:3e:72:ec:19:a9:ff:7f:
                    87:66:01:6c:2d:95:d3:ec:57:ac:2f:4b:5b:9f:41:
                    7b:1b:52:f1:4d:ea:7d:01:cc:5d:92:39:fd:18:99:
                    1e:ea:51:2a:04:48:4b:81:14:c1:5d:89:08:00:0a:
                    08:dc:f1:c1:13:8f:f4:fd:ad:c9:b6:9b:90:7e:3a:
                    4c:2d:94:02:e3:21:dd:76:37:c1:dd:2a:f4:c2:01:
                    26:69:01:f2:02:11:80:b9:b1:5c:8e:f1:c8:ac:c9:
                    24:2b:42:bb:0b:9d:b6:13:ec:d2:a9:6e:94:29:5f:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9E:4B:59:47:0E:0E:5A:EE:35:8B:80:C1:E1:D5:8F:48:F6:54:E6
            X509v3 Authority Key Identifier:
                keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:de:10:a4:51:14:a4:18:55:31:c7:c7:25:bb:d3:c2:20:
         d2:59:0d:c0:34:14:13:2d:ae:19:99:43:67:f0:b4:30:76:3c:
         fc:36:d4:2e:dc:73:36:5c:66:8d:ee:31:8c:39:26:2f:f7:77:
         1c:fc:a0:99:f9:11:47:d5:aa:65:e7:bd:4f:3c:bc:50:7c:dd:
         ff:ac:4c:f0:c5:5f:db:28:4f:4b:72:82:06:91:62:e9:e3:85:
         13:b9:d0:85:ef:af:eb:4d:f6:35:4a:50:c1:73:3c:30:28:d2:
         5f:aa:03:55:55:7f:57:84:3d:ad:42:69:5b:3c:8e:db:a7:3a:
         c8:f2:d3:e7:f2:50:ed:17:f7:e9:a2:a7:d9:ca:00:10:3e:90:
         a7:ba:99:d7:aa:91:b4:00:f1:62:8a:ac:e7:97:61:f5:c7:0f:
         45:2c:b1:6e:72:75:0d:2b:91:06:5d:5a:4b:b6:33:cb:b9:8c:
         1b:3b:db:14:0e:b0:7b:a8:6a:9c:06:3b:15:cb:03:80:a1:ce:
         28:d1:09:d8:ef:f2:bb:19:7a:d2:c4:9d:67:f8:6c:a6:55:dd:
         61:b2:fa:45:91:67:2a:f3:f2:4a:48:b2:1a:c2:e6:dd:1b:90:
         d2:7e:b6:5f:12:f2:69:c6:3a:e2:9d:6d:08:52:56:2f:58:4e:
         74:ca:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:23 2026 by rpki-client