Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
File:                     ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json)
Hash identifier:          2dfEGCm4gQ66UmPhO7gDHxdFhPRAXrUdDoP3GrcjE0E=
Subject key identifier:   88:0A:8B:5B:53:71:D0:D8:C5:3F:FC:C3:4F:48:6C:C5:F9:4C:44:E9
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Certificate issuer:       /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial:       0CED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
Manifest number:          0CE3
Signing time:             Thu 16 Apr 2026 18:13:20 +0000
Manifest this update:     Thu 16 Apr 2026 18:13:19 +0000
Manifest next update:     Thu 23 Apr 2026 18:13:19 +0000
Files and hashes:         1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: KAZprCQXJl6MwJPvJ4wNfgZ74gB3345+tYPQuYVofKY=)
                          2: F0208B2012BC11EBB3294950C4F9AE02.roa (hash: GoD97528jtePCu2xsNtV1pmBZnT8NxMWHUx8lRVvZMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
                          rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3309 (0xced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
        Validity
            Not Before: Apr 16 18:13:19 2026 GMT
            Not After : Apr 23 18:13:19 2026 GMT
        Subject: CN=69e126c0-1da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:5b:42:1d:78:41:aa:6f:5d:bb:9d:a0:b0:
                    a0:b0:9c:b9:ad:4c:0f:12:7e:21:c7:2b:01:00:80:
                    38:63:18:46:3a:6c:52:cd:b9:54:c8:06:df:53:8b:
                    e1:09:c9:f2:74:58:4a:6f:27:aa:ce:a6:49:52:05:
                    b8:21:51:87:21:70:02:c8:a9:e1:42:8a:88:9a:42:
                    c6:45:5c:14:b1:c1:c9:74:4d:52:42:f0:0d:ed:77:
                    27:06:90:fc:1d:53:31:ec:8d:c8:b6:8a:b3:b5:7b:
                    94:46:63:91:d1:a3:8a:b6:d0:7f:63:3b:d5:4c:e5:
                    cf:06:05:81:90:22:03:8a:b6:b0:74:ba:6b:83:e0:
                    8d:43:80:dc:09:27:12:03:e1:c5:8d:b9:e7:b7:23:
                    5b:0d:04:6e:8d:ca:dc:e0:b0:c1:e4:fd:96:38:07:
                    ce:ef:87:8a:d0:1a:14:93:d7:f0:51:d2:84:05:38:
                    3c:2f:9d:74:d3:8b:26:ff:8e:76:68:4d:0a:4d:44:
                    8b:67:0e:76:70:fd:b3:bf:f6:e5:9d:a8:c4:4f:c5:
                    18:57:25:a9:8c:ba:d9:b6:bf:ca:46:70:4d:28:bf:
                    6d:d7:d4:1a:7d:dc:0a:b1:f8:0b:ab:ff:85:ea:8d:
                    7f:36:e4:2a:06:f2:5f:cc:67:b5:49:66:b3:8a:6b:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0A:8B:5B:53:71:D0:D8:C5:3F:FC:C3:4F:48:6C:C5:F9:4C:44:E9
            X509v3 Authority Key Identifier:
                keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:43:ba:35:18:79:dc:09:79:82:31:f1:73:8b:c3:99:8a:
         00:ed:43:51:be:d5:9f:11:ce:39:51:54:78:0a:ef:88:63:e7:
         d3:c5:8c:c1:d8:f1:78:42:2e:01:70:fb:39:fa:5e:1c:6a:63:
         48:81:5f:d2:73:3d:49:a8:e1:da:3b:66:1c:cd:f4:64:66:61:
         de:b7:2b:ed:89:1d:93:21:3e:86:b2:a8:d6:47:b6:df:dd:da:
         e9:e4:6f:e3:81:28:e6:b0:de:62:d4:1a:0e:74:29:20:54:9a:
         af:5b:3e:8d:6f:a5:ff:04:48:c2:43:1b:cf:04:08:6c:6d:93:
         9c:f5:23:9e:94:78:ae:f0:55:bb:08:bf:63:6b:a9:57:a7:97:
         7e:e4:b6:9d:01:44:91:2c:13:24:07:0f:42:1b:ef:05:a0:ad:
         31:7b:b9:51:f4:53:00:89:68:60:1e:09:60:a7:3d:a0:19:1c:
         db:b8:17:2f:17:5a:c2:ee:09:3a:b2:7f:0b:cb:27:77:8d:3e:
         4b:1a:af:83:af:4b:d6:29:fc:2d:24:e6:98:c0:94:ab:04:ca:
         82:7f:c4:a8:fd:04:49:fe:f4:f3:33:81:11:f4:69:44:26:6e:
         68:1c:20:fd:bf:4b:9a:89:b8:4f:22:00:4a:63:c0:bc:e3:59:
         34:18:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:32 2026 by rpki-client