Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File:                     05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier:          zgN4jaZBxmU4580VwrDTrpQ3nrLSOVyHsW2OCjosnb4=
Subject key identifier:   43:89:AB:09:69:0D:A3:91:47:58:59:78:A5:07:60:19:18:51:E7:03
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer:       /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number:          013D
Signing time:             Fri 17 Apr 2026 05:06:01 +0000
Manifest this update:     Fri 17 Apr 2026 05:06:01 +0000
Manifest next update:     Fri 24 Apr 2026 05:06:01 +0000
Files and hashes:         1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: WSK9yAeJQ+4ojrY7+IFPRexzzx/UGaHWWxHFnlNDOdQ=)
                          2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: HIQTkqxEUw6fkREKneLxMJQ3JqOr/SLWIHkepYGIh7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
        Validity
            Not Before: Apr 17 05:06:01 2026 GMT
            Not After : Apr 24 05:06:01 2026 GMT
        Subject: CN=69e1bfb9-6a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:af:0d:50:8f:1c:2e:ab:b0:c7:c6:0e:fc:
                    0c:6d:d3:9e:e6:60:77:7e:6f:97:d6:28:15:6f:e5:
                    72:4d:bc:70:82:28:66:07:e3:30:bf:e7:54:1b:19:
                    5e:56:43:b8:16:52:8f:09:92:e4:77:ac:8e:06:ae:
                    14:23:3c:6e:98:26:0d:ed:45:33:cf:95:64:e4:ef:
                    0a:c6:48:8c:52:7e:43:e3:e9:78:b8:59:dc:a0:64:
                    64:26:06:58:55:a4:3b:f2:41:80:d6:55:5d:41:7a:
                    c7:90:f1:56:51:b8:49:55:df:97:40:8b:69:8c:24:
                    e7:d7:a1:19:83:68:a5:81:d8:bd:29:a0:90:2b:b0:
                    44:36:2d:f4:33:3f:89:f9:0c:55:bd:45:b7:ae:5d:
                    51:53:8e:f8:b0:df:c8:15:ce:57:8d:f7:19:a9:57:
                    84:e3:51:c6:81:a5:63:6a:dc:04:df:f2:40:81:7e:
                    fe:98:34:e2:e4:6b:9b:f4:0d:a5:ec:a2:c7:3d:c2:
                    83:b7:52:35:8a:a8:90:1d:fd:e2:0b:5b:ba:bc:fc:
                    35:4e:09:70:e9:4a:e7:9b:32:aa:87:fa:f5:66:2f:
                    27:a8:56:6b:02:59:c3:1b:c6:0c:bd:3c:39:eb:03:
                    d2:23:f0:10:c3:95:4e:a7:c9:ed:c6:03:d1:bf:d3:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:AB:09:69:0D:A3:91:47:58:59:78:A5:07:60:19:18:51:E7:03
            X509v3 Authority Key Identifier:
                keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:fe:0b:dc:31:01:49:0d:b7:76:d9:20:7f:86:81:40:70:
         1f:fe:d5:e6:59:85:b9:cf:a5:b7:cb:d7:fe:fc:6f:da:49:09:
         80:f0:47:68:43:7f:67:db:bd:b9:cf:d0:4e:31:ba:08:95:3e:
         e3:26:1f:71:fb:bc:a8:57:f7:1f:e6:74:8e:07:a3:42:d1:23:
         8f:e4:40:aa:7b:01:20:51:3d:1b:23:f6:54:16:16:da:d4:bc:
         d3:ae:7f:5d:fb:42:55:62:7e:36:0f:e6:4b:da:c7:9a:61:a1:
         09:9b:b4:22:df:cf:8b:43:1b:1a:bc:14:d0:07:9d:ef:15:5f:
         ce:47:ed:86:fa:c1:ef:3f:8c:05:6a:bd:ad:d9:89:72:7e:50:
         09:e7:d0:2d:a0:0e:50:3d:23:da:5a:56:18:19:12:13:cf:80:
         df:80:51:db:72:ae:16:75:9e:7f:56:c6:32:55:8b:a5:c9:a0:
         a6:2c:1e:84:f4:ab:20:43:47:c5:9d:e0:48:f1:bf:2e:ea:ea:
         dd:39:ed:c0:67:2b:ed:db:c4:f2:3c:bb:f9:5f:09:28:41:70:
         51:4b:97:84:f9:43:b6:88:01:54:24:3c:c7:c1:45:dd:38:13:
         8e:29:0d:2c:8c:9f:4a:e1:b3:a7:93:82:0d:8e:af:e2:cd:61:
         83:38:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:58 2026 by rpki-client