Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
File:                     n82PZ2ktvYIee95qb7vWfHgHV_k.mft (raw, json)
Hash identifier:          5YIocH0tMsKbOoDEldG7HLvk9+zlQHh38lF5uUxA8TY=
Subject key identifier:   1E:3B:D9:CE:8F:38:19:42:A1:98:55:65:3A:5B:C4:5D:9B:1E:8D:D9
Authority key identifier: 9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9
Certificate issuer:       /CN=A9196780/serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
Manifest number:          9A
Signing time:             Fri 17 Apr 2026 07:05:52 +0000
Manifest this update:     Fri 17 Apr 2026 07:05:52 +0000
Manifest next update:     Fri 24 Apr 2026 07:05:52 +0000
Files and hashes:         1: n82PZ2ktvYIee95qb7vWfHgHV_k.crl (hash: U0WSLeOL2pEfzSSNxR/KMrrQaziXXtVyqxxzJOrX+r0=)
                          2: 8CB6031052AB11F0BFD3D952C4F9AE02.roa (hash: wfT6L50IJJ1HQiWFUXD5dfPtDNu1dKe1T4vh9B1U844=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl
                          rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196780, serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
        Validity
            Not Before: Apr 17 07:05:52 2026 GMT
            Not After : Apr 24 07:05:52 2026 GMT
        Subject: CN=69e1dbd0-9651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:bc:5c:e3:9b:46:3d:3d:30:18:1a:9c:0b:
                    25:84:24:1b:06:19:71:93:bd:d1:0d:b9:f2:15:0d:
                    00:a0:63:22:40:af:7f:06:e8:df:cf:ae:9d:e7:24:
                    6d:33:8e:44:a5:ec:2a:93:2d:c8:e4:12:25:ba:cd:
                    1d:e1:9a:cf:6a:01:c9:38:95:a7:c3:fa:ed:df:2a:
                    2f:82:a6:13:57:07:ce:61:fa:25:0b:5b:50:de:ae:
                    06:8b:6b:1e:b9:33:43:88:ad:eb:d7:0a:37:b5:ba:
                    e6:19:8f:50:d4:b8:2f:9d:3f:86:6d:6a:01:d2:12:
                    d7:0f:69:7a:97:f0:eb:34:80:15:70:53:ee:88:6c:
                    ab:51:78:ea:ad:fc:5d:26:c2:6f:3b:5f:66:5b:5f:
                    4b:9d:41:2d:cd:d8:2a:13:b7:c7:ac:f1:16:b8:c3:
                    48:dd:ca:64:ad:b6:c0:77:df:85:d2:1c:41:93:24:
                    a0:e2:b3:d0:ba:89:20:ab:8f:82:0b:cc:f4:81:b6:
                    7a:1a:86:5d:3f:b1:18:01:e6:ff:68:69:c1:95:89:
                    50:a7:a2:b9:20:28:bf:96:35:32:ae:d3:56:b3:fb:
                    a9:60:43:bf:8d:53:38:26:dd:98:eb:13:ec:e5:60:
                    6a:93:62:20:43:fe:f5:da:a0:96:1f:b2:b4:e4:76:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:D9:CE:8F:38:19:42:A1:98:55:65:3A:5B:C4:5D:9B:1E:8D:D9
            X509v3 Authority Key Identifier:
                keyid:9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:23:54:b8:1c:c2:f2:13:2b:fa:3c:b9:72:34:9b:24:5d:9b:
         8c:45:b1:ba:24:e7:42:19:52:63:12:90:60:9f:7d:cc:e1:26:
         e5:27:a0:3b:9d:04:20:31:23:ea:80:9f:5d:71:9d:9c:1e:6b:
         b6:ad:2c:7d:7d:0f:6c:a4:83:c5:a7:5c:a2:ec:3d:a3:40:9b:
         aa:6f:04:5e:be:b6:19:da:18:34:d1:1a:7b:72:59:e8:92:96:
         0a:14:41:e4:bf:9b:61:16:4f:17:23:98:21:0a:7b:f0:ea:c2:
         91:29:bd:aa:b6:9c:c7:c8:a8:79:99:94:7a:8e:9b:c9:b2:dc:
         3a:ad:e0:97:47:4e:17:75:c2:5a:f4:10:71:d8:3b:f5:c7:04:
         14:60:97:01:7e:1f:85:c2:35:8b:cb:0c:81:a2:cc:56:be:8e:
         3b:69:05:7f:7d:09:ad:0c:f4:ad:8c:52:20:41:d9:6c:97:fb:
         79:57:f3:53:f5:bc:8e:b5:2b:03:b3:90:4f:ad:e0:84:98:04:
         bd:ba:af:f0:04:8d:f3:a2:d2:9b:e9:59:07:a2:24:2e:28:13:
         5b:01:49:40:49:00:ec:38:ed:da:d3:db:1f:ec:74:96:8c:a2:
         a6:12:d3:09:0d:49:a3:10:2a:fa:df:de:29:41:73:08:24:6c:
         bb:6a:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:01 2026 by rpki-client