Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File:                     _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier:          iH6uwRwijqOsS8XthSrE5u3q4HbaSm6/vxCzoITDJS8=
Subject key identifier:   67:24:B5:50:C9:1C:77:4E:55:9E:E5:BB:6C:E0:03:ED:63:9E:91:C2
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer:       /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial:       08FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number:          08FC
Signing time:             Thu 16 Apr 2026 20:13:08 +0000
Manifest this update:     Thu 16 Apr 2026 20:13:07 +0000
Manifest next update:     Thu 23 Apr 2026 20:13:07 +0000
Files and hashes:         1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: ztldlqzg77XD4+Kd8yI5cYvQpWuw/TmnHkG5bhIQpwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
                          rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
        Validity
            Not Before: Apr 16 20:13:07 2026 GMT
            Not After : Apr 23 20:13:07 2026 GMT
        Subject: CN=69e142d3-3f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:ac:57:c0:57:a3:f9:25:a3:a8:ff:b0:2d:
                    c2:2d:b5:92:3c:92:a2:06:ab:63:17:6e:15:46:63:
                    a0:6f:be:6f:fe:0f:78:4f:f1:ba:15:65:ab:e0:17:
                    3d:de:8a:f8:7b:47:13:71:6b:fb:2f:be:9f:0a:20:
                    03:25:f9:bf:76:68:69:e5:79:0b:af:68:1f:f7:01:
                    b8:f7:78:c0:63:e8:b5:5f:c7:6d:ae:31:77:e7:42:
                    eb:92:8a:cf:b4:36:e7:a8:46:31:06:9f:b3:9c:6e:
                    f7:79:3b:8b:4c:8c:0d:12:36:ed:d0:e0:80:9c:fc:
                    6c:38:f4:ce:18:ad:2c:97:45:b7:d8:83:76:c9:03:
                    6e:c1:20:5e:59:bb:9f:fe:d6:03:38:88:0e:db:01:
                    37:ef:2c:08:4c:d9:e5:45:88:c0:e8:46:90:c9:94:
                    fa:47:13:df:f3:d0:35:ef:9c:17:30:51:b4:65:8f:
                    6a:0d:82:78:fc:9d:90:f1:b5:44:c0:d9:1d:b5:89:
                    64:91:46:a6:f4:b2:51:08:10:2d:6a:15:04:b4:65:
                    fa:9e:47:1f:d2:4f:c7:64:17:af:7e:fd:ef:85:db:
                    f5:e9:ff:7c:85:d7:5e:a2:4c:b8:4d:20:bd:6b:55:
                    17:be:f8:b5:3d:7c:11:fa:fc:c0:23:7d:78:51:94:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:B5:50:C9:1C:77:4E:55:9E:E5:BB:6C:E0:03:ED:63:9E:91:C2
            X509v3 Authority Key Identifier:
                keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:42:b1:0f:b5:5e:7c:c6:f7:c3:ad:83:b2:f0:34:be:91:e3:
         4c:b5:92:bf:6a:4a:92:cc:a5:18:e8:d7:c0:7b:75:4f:5f:0e:
         f4:f8:11:cf:11:38:bf:50:67:bb:f1:eb:a5:e5:e8:2c:34:6d:
         7d:00:d1:4a:cb:53:5e:54:03:7f:df:33:92:8c:97:a3:04:81:
         ab:14:a1:83:4d:8d:7d:bf:97:7e:fd:b2:0e:4a:c9:48:d1:16:
         cb:78:c0:91:c2:bf:a2:fc:9d:2c:42:13:52:6c:c1:8a:2c:d5:
         8d:af:dd:ed:30:75:2c:18:d3:19:6d:31:53:d0:3d:54:6d:68:
         0b:7e:f2:f5:99:57:6a:8a:64:e8:90:9b:8d:be:ae:ae:eb:23:
         b9:30:ac:cd:80:e2:78:82:20:64:81:5d:1c:0b:2f:84:74:d8:
         26:0f:39:3a:0c:cc:5a:9f:8c:21:d3:a0:90:67:f3:8d:e4:85:
         b5:f5:3a:27:be:6b:f7:d9:2a:f6:76:5d:f7:9e:f0:c7:77:41:
         c3:9b:28:12:56:a9:b5:b2:a0:ce:88:5e:12:99:b8:51:7f:84:
         65:fb:14:23:b9:6d:36:1b:c5:93:f8:bc:60:5d:13:c5:d5:b9:
         80:a5:27:c3:ee:9e:79:d0:1b:f0:b6:38:74:ca:66:92:19:9e:
         3f:77:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:19 2026 by rpki-client