Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
File:                     9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json)
Hash identifier:          vl/1waKwVC9QvKRW71B4LUk4a4hYgY7MwU6pTDPg9qI=
Subject key identifier:   4E:63:19:C9:16:37:EC:6E:26:A8:8B:FD:80:2B:5F:D2:F8:CF:0E:2D
Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
Certificate issuer:       /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
Manifest number:          0182
Signing time:             Fri 17 Apr 2026 04:25:19 +0000
Manifest this update:     Fri 17 Apr 2026 04:25:18 +0000
Manifest next update:     Fri 24 Apr 2026 04:25:18 +0000
Files and hashes:         1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: suLNNX6SB74LIIFhR8RLo70zAhS2Ceg9pJmcWu8auGI=)
                          2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: 3ZTRfxQhvuFdMMCMeOtUEE9gemCV8Xo1LJyuC+LNhgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
        Validity
            Not Before: Apr 17 04:25:18 2026 GMT
            Not After : Apr 24 04:25:18 2026 GMT
        Subject: CN=69e1b62f-6207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:48:a5:88:3e:78:4b:99:f0:73:0e:5d:db:
                    c0:b7:17:a7:9b:ff:07:f6:bb:1a:e4:d5:29:de:0b:
                    d3:43:10:6b:44:f7:d5:91:fc:b4:c9:f8:7b:b6:0b:
                    ae:cf:a4:73:da:d5:a6:85:6d:8d:40:f7:f6:77:f9:
                    57:95:d9:27:55:2e:0b:59:97:c0:46:a5:65:2f:40:
                    e7:3c:36:e1:8c:6e:65:6f:82:bd:f9:a4:9c:f6:de:
                    c8:33:f5:91:b2:fb:b5:e2:2c:2e:42:87:cd:5d:2e:
                    48:30:dd:4f:ff:cb:a1:12:73:7b:6d:56:0e:a3:1f:
                    44:55:67:bd:86:dc:60:b4:a0:1a:c0:cf:95:e2:7c:
                    b6:98:c6:5a:a7:76:a1:8b:ea:f6:38:9c:0b:d6:86:
                    42:0f:06:0e:50:d7:22:9e:e8:09:8e:ca:4b:ea:4b:
                    93:4e:5b:0d:83:b9:d2:56:9a:b8:75:14:bb:b0:f9:
                    c1:61:99:fc:a4:93:72:04:43:6b:c6:d1:54:14:61:
                    a3:d7:0d:b6:2c:a8:02:07:2b:49:5f:31:1f:bb:ea:
                    f5:bf:fa:fd:e0:bf:70:b4:8b:42:da:60:d0:e1:af:
                    98:49:d4:6d:c6:8a:5b:05:c9:57:74:12:a7:6e:aa:
                    50:ee:3b:6a:f1:f0:60:a8:1e:c4:d1:d3:76:ee:c4:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:63:19:C9:16:37:EC:6E:26:A8:8B:FD:80:2B:5F:D2:F8:CF:0E:2D
            X509v3 Authority Key Identifier:
                keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:c7:39:e6:73:dc:3d:0f:f8:5e:74:3f:4d:d0:30:d2:9b:
         ca:b1:0e:a7:cc:66:30:8b:94:cb:ce:0d:4e:19:2e:bd:51:49:
         3e:c6:62:56:52:8d:8f:cf:7d:4f:be:98:6b:85:3a:45:4c:36:
         24:9e:72:35:a0:c5:27:25:0c:20:7d:88:5b:ea:4c:d0:2d:a9:
         4a:ed:a8:37:f3:5f:20:43:11:a0:d1:96:ef:d1:6d:8b:26:0b:
         3d:c6:49:a2:7a:66:6a:f8:80:93:f4:93:da:42:64:b8:ae:1c:
         71:82:f7:f1:59:25:8b:4d:51:e2:06:6b:3c:c4:0f:dc:dd:44:
         c9:f0:97:b1:d5:ea:e3:cf:c6:b4:17:03:f9:ea:56:99:75:4d:
         1f:74:af:f3:c7:74:4f:55:39:dc:89:11:b4:52:e8:28:6a:26:
         33:29:8c:0b:21:a3:bb:7c:96:22:a4:75:2e:b0:ed:a2:a4:d6:
         42:db:b2:2a:8c:15:d7:17:cc:25:d6:22:b4:00:e9:18:cd:1b:
         5a:d5:8d:f5:f8:45:83:51:8b:3a:fe:cb:e5:45:db:27:fa:de:
         90:ca:b1:97:bd:cb:37:d1:ef:a1:df:aa:aa:b5:46:e0:df:f0:
         74:65:44:22:a2:5b:61:3b:46:09:23:cf:14:ee:7b:be:69:7a:
         f1:2f:6f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:49 2026 by rpki-client