Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
File:                     hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json)
Hash identifier:          K7+s7lsC5DzQiDJKPJAp3J+Qz/SMHVm9sN/DJ+aS2S4=
Subject key identifier:   F4:F8:BA:A2:3E:49:D6:CA:DA:7D:7B:DB:07:E1:50:90:FB:42:13:4F
Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
Certificate issuer:       /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
Manifest number:          F3
Signing time:             Sun 19 Apr 2026 05:55:24 +0000
Manifest this update:     Sun 19 Apr 2026 05:55:23 +0000
Manifest next update:     Sun 26 Apr 2026 05:55:23 +0000
Files and hashes:         1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: ZwL9jtV9564mwu9pNOmOI5sXJxbgPSGq4Wk8cQlaU7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
                          rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
        Validity
            Not Before: Apr 19 05:55:23 2026 GMT
            Not After : Apr 26 05:55:23 2026 GMT
        Subject: CN=69e46e4c-9cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:5a:f5:c1:f9:26:f1:b1:09:b9:19:e2:20:
                    db:5d:dc:5b:de:50:92:2c:49:64:08:09:bf:6c:93:
                    1b:f0:0f:19:11:82:7f:e3:41:a8:3a:bc:44:03:1c:
                    3a:e2:8a:1b:e8:cd:35:7d:9e:bf:b1:cc:c0:51:74:
                    94:25:8c:eb:c0:16:41:59:6e:8e:dc:ea:e1:f6:70:
                    80:fa:71:11:c0:13:5d:b8:a6:3c:5e:e6:f2:40:93:
                    80:75:b5:6f:d6:7e:0a:b8:a2:75:23:0c:9b:ea:b5:
                    cd:d4:07:b5:ee:61:25:12:26:b7:e4:5a:23:07:42:
                    d8:b5:fc:65:23:44:bb:f1:6c:86:05:71:61:55:7e:
                    c5:bb:91:ce:d5:ba:4c:58:a0:df:d3:79:b0:42:76:
                    be:95:ff:48:d2:04:4d:74:d3:a0:fc:a6:2b:61:3f:
                    49:4d:34:a5:a2:3b:69:0c:2a:a1:bf:62:6a:b5:48:
                    fb:72:62:08:9f:60:bc:7d:fd:c2:ea:e8:b0:c5:28:
                    cc:36:e7:7d:db:e7:87:bf:e0:92:00:6d:76:d1:31:
                    ec:26:01:08:b0:af:62:97:22:64:e0:e5:43:05:af:
                    1d:0f:f9:45:87:c5:a4:5b:fe:31:5f:72:4c:c6:c3:
                    0a:21:40:77:9c:73:58:06:09:44:01:f6:e4:7b:50:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:BA:A2:3E:49:D6:CA:DA:7D:7B:DB:07:E1:50:90:FB:42:13:4F
            X509v3 Authority Key Identifier:
                keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:3b:b2:5c:2e:a3:03:b6:51:41:c3:b2:ca:4d:73:6d:ea:
         44:15:c0:a7:dd:74:97:26:f5:b3:e5:57:a3:7f:2c:b9:a6:20:
         12:80:b7:37:69:08:86:a7:68:aa:21:a1:b0:ef:4a:ff:a0:1d:
         dd:d3:08:ac:d5:01:cd:58:3b:7d:6d:e3:05:5a:99:1e:b1:11:
         63:f7:a5:04:d2:f6:39:c4:f0:5f:65:a9:b2:2c:6b:a0:bf:e9:
         9b:1f:9b:ab:52:ba:18:e5:fa:bf:b5:4b:3b:64:db:9f:95:12:
         33:41:37:61:c4:0f:8a:cc:49:f5:aa:a1:ad:a1:36:cf:28:56:
         21:21:7c:1a:2e:a5:46:f2:79:50:37:80:28:cc:76:a8:fb:11:
         0d:ad:76:55:6a:72:89:c5:a8:4c:d6:f8:7f:24:22:16:3b:8a:
         aa:aa:8f:b5:12:76:71:9b:df:d7:d4:61:2b:9c:31:5d:e5:a4:
         6c:28:fd:ff:43:0a:a5:8d:83:05:8a:32:3d:d5:38:6e:a5:13:
         dc:24:aa:94:a5:54:8e:9f:ec:7e:58:e5:c3:a6:ef:ba:15:51:
         cd:27:13:60:09:d3:e9:97:61:ff:36:f2:cb:ea:92:52:20:d8:
         72:b0:c5:8f:0d:18:0d:d5:62:43:42:f1:01:4d:97:a1:7f:58:
         ab:bf:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:24 2026 by rpki-client