Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier:          jIQ4ladZ0EwGI47gOgDv3TXsZdtNfrm1RMJbAPJ6YfY=
Subject key identifier:   57:B3:17:EE:00:C4:BD:A1:36:48:0E:ED:A0:CD:43:22:E0:C1:82:98
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer:       /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial:       0CEF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number:          0CDF
Signing time:             Thu 16 Apr 2026 18:16:56 +0000
Manifest this update:     Thu 16 Apr 2026 18:16:55 +0000
Manifest next update:     Thu 23 Apr 2026 18:16:55 +0000
Files and hashes:         1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: Vknl4ApkcwTF0iac2Dg8E6oQW3EGxkycww84UYBleb4=)
                          2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: 2fjs3YMIAVa6BF/a2VEcOFGf36xSPqP+aDoUX8wEwvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Validity
            Not Before: Apr 16 18:16:55 2026 GMT
            Not After : Apr 23 18:16:55 2026 GMT
        Subject: CN=69e12797-dba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:2b:5b:b2:ee:70:99:a8:a6:28:81:1c:ed:
                    2f:fe:1f:c4:97:0a:1f:ec:7b:67:f5:1c:15:b8:0b:
                    bf:02:77:33:d4:5b:04:b6:e5:56:42:70:3d:d5:ae:
                    aa:b4:b1:b2:ee:1c:11:96:78:42:39:9b:25:dc:75:
                    ab:f3:a1:a5:e9:dd:8c:b0:79:8b:ca:35:62:30:98:
                    ca:2e:49:10:f9:87:6c:79:2d:9a:42:22:36:67:b7:
                    bb:49:58:26:83:00:07:8d:97:36:2c:95:62:42:da:
                    7f:ef:bc:30:75:a6:aa:3a:58:f3:fe:81:34:5c:6d:
                    4c:a9:b2:95:ef:8d:2b:06:b9:62:1a:56:d1:0f:28:
                    cd:4e:ae:78:52:9a:a4:f5:35:25:b1:65:65:22:9c:
                    a5:53:3e:e4:48:6e:d4:62:19:93:e8:34:39:0f:48:
                    51:7c:2b:76:d9:bc:e8:38:2e:65:26:e0:d6:47:31:
                    cd:97:cb:35:6a:39:7a:94:3e:6d:76:d7:5f:8c:64:
                    aa:1c:fc:34:ef:4b:d8:6b:f2:c9:4f:69:38:8f:36:
                    31:63:0e:c1:70:de:0b:d7:24:91:47:75:3d:55:28:
                    fe:e7:54:35:00:14:7c:cd:54:81:c8:d0:4c:fe:e7:
                    74:70:65:51:af:18:66:8c:96:5e:b5:9a:d5:1a:84:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:17:EE:00:C4:BD:A1:36:48:0E:ED:A0:CD:43:22:E0:C1:82:98
            X509v3 Authority Key Identifier:
                keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a7:94:89:38:9d:70:8a:cb:96:86:6a:c8:9a:de:bb:bc:f7:
         d0:0a:47:e2:b3:9b:07:b1:0d:90:13:63:96:03:70:00:c8:8e:
         68:d5:9a:b4:1b:07:1b:79:4d:12:3e:83:2a:d4:a0:8d:40:65:
         e2:19:0f:f9:b3:f7:ad:b4:e5:88:22:32:05:b3:00:f2:0a:d1:
         af:46:fe:cd:6c:0e:22:31:59:82:e7:57:b7:a9:37:e8:6b:33:
         04:ae:d7:9d:96:bf:e7:1f:6d:cc:d7:7e:7d:74:eb:e6:fb:37:
         ec:e9:f7:79:98:8f:a0:05:04:da:50:e8:93:54:33:99:2e:0d:
         16:34:c9:10:81:47:87:13:ba:09:9e:7a:bd:04:fe:47:82:3f:
         c3:e0:33:49:bd:57:c9:da:1b:a9:f0:87:ef:20:4f:03:ac:29:
         2f:23:bf:a7:97:cf:65:7f:83:9e:df:98:ce:89:17:e8:ec:24:
         af:84:0b:89:02:90:96:05:c5:1a:5e:b5:87:ce:a5:18:71:d3:
         a0:a5:16:51:f2:12:8d:bd:fd:1c:ca:76:f0:ab:ce:88:30:c7:
         25:ac:07:40:e7:16:63:6c:a3:4a:0c:06:d1:ae:36:f0:e9:4c:
         c0:07:29:2e:07:4c:3d:a1:3a:43:07:ba:0a:3a:60:96:28:22:
         b2:02:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:21 2026 by rpki-client