Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File:                     2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier:          7zLSP/4WH+GR96VMb5Wt9RlZd4XRqIjkfijE4lzgwrM=
Subject key identifier:   01:75:AA:AD:60:A6:67:58:36:2B:EA:1E:D2:3F:1A:0C:0F:4D:B8:A4
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer:       /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number:          06
Signing time:             Sun 05 Apr 2026 08:32:18 +0000
Manifest this update:     Sun 05 Apr 2026 08:32:18 +0000
Manifest next update:     Sun 12 Apr 2026 08:32:18 +0000
Files and hashes:         1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: 2hlixs3O9CNtbu4YXdd849oYJTGbORxO+rSoq6jYtbY=)
                          2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
                          rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
        Validity
            Not Before: Apr  5 08:32:18 2026 GMT
            Not After : Apr 12 08:32:18 2026 GMT
        Subject: CN=69d21e12-f6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:1a:e7:72:22:86:c9:ad:4f:07:4a:ec:3d:
                    7b:c1:6f:cc:93:03:d3:6c:0d:fe:51:10:5d:16:92:
                    39:78:42:30:1e:78:41:80:70:88:43:9d:7f:de:1c:
                    48:35:7f:71:f3:8b:b4:da:f8:6c:cd:69:1c:f6:15:
                    cf:bd:de:6a:03:9e:53:dc:0e:54:e4:f1:fe:5f:60:
                    22:b4:b5:d1:92:1d:73:94:9b:d8:df:83:a2:f0:3e:
                    5d:e0:61:5c:5e:78:8e:f3:9f:1c:28:1f:d5:a4:75:
                    35:65:d5:f1:1c:06:ef:55:c2:df:e6:e8:d6:6d:6a:
                    bc:a6:fc:ed:b4:dc:7d:51:02:01:bf:9c:71:f0:98:
                    fb:42:c2:53:f0:6d:83:92:b3:4b:e7:b5:22:25:89:
                    0d:fa:45:85:d0:7a:20:de:ba:bc:9b:94:2e:18:b0:
                    9a:a1:e9:fa:7d:93:83:1c:69:80:75:5e:a4:cb:a7:
                    dc:07:1c:6a:35:94:5c:20:a2:04:cd:17:e9:c4:e3:
                    0a:1a:87:84:df:92:ea:77:5a:d4:45:53:17:8f:24:
                    30:9d:40:8d:4c:fb:2f:6f:0a:a2:a6:de:2f:b5:37:
                    79:0e:9b:ae:fd:59:b4:85:2e:26:62:8b:1f:7e:4d:
                    53:34:30:d7:02:90:84:b9:24:e4:2f:81:2c:a3:9b:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:AA:AD:60:A6:67:58:36:2B:EA:1E:D2:3F:1A:0C:0F:4D:B8:A4
            X509v3 Authority Key Identifier:
                keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:20:91:cc:f2:ca:12:fd:06:3c:10:e5:f2:69:1a:e8:b3:32:
         f2:8e:25:90:2a:38:2f:60:bc:a6:1f:ad:28:02:fd:86:79:af:
         51:17:fe:aa:c1:72:e4:c5:5a:71:d8:42:40:12:2f:2a:d0:77:
         56:39:c5:d7:b0:ae:06:30:c2:61:4e:69:41:0b:39:22:5e:bc:
         b1:ff:89:a3:34:9b:1e:30:16:84:df:0a:bc:0a:2b:92:24:2b:
         ff:19:2a:5e:52:d6:d6:a1:5d:fc:8f:92:c5:89:30:1a:6a:da:
         3c:ee:43:5d:f6:18:07:f1:99:18:50:36:06:3b:9b:34:ed:46:
         ca:c3:eb:39:21:78:98:b1:5c:43:f4:cd:a9:f3:cf:b1:b5:e2:
         d4:18:bd:f6:e9:55:25:c4:9b:30:36:ec:9c:5b:5d:58:7c:84:
         24:a8:27:ab:8e:9e:69:96:b6:65:d8:f6:9c:b9:cf:59:d9:8f:
         c9:2f:53:bc:76:3e:06:ec:e0:7d:86:5c:4d:85:bc:3b:5d:44:
         2e:92:e7:2c:81:86:76:b4:3e:3a:ae:08:ae:8a:e9:f6:db:19:
         33:d2:66:cd:78:c4:ec:d6:76:74:4a:48:c1:76:95:95:05:08:
         48:52:e1:7d:66:4f:32:93:48:68:7c:e4:8f:c8:44:87:30:a6:
         b1:54:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:49 2026 by rpki-client