Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
File:                     _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json)
Hash identifier:          Ji8DFglqvVYY8S3s0/O5xGE56Iz7HcpJwB+iKhyS8U8=
Subject key identifier:   59:79:1D:89:50:19:C1:35:DE:E8:85:3E:F1:AC:35:48:02:49:3F:1E
Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
Certificate issuer:       /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
Manifest number:          C8
Signing time:             Sun 05 Apr 2026 06:15:32 +0000
Manifest this update:     Sun 05 Apr 2026 06:15:32 +0000
Manifest next update:     Sun 12 Apr 2026 06:15:32 +0000
Files and hashes:         1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: MpNsXJn8/vLYk037c+W5NurqBWjVAR+KHq1GCNNJv5Q=)
                          2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: WeS4tdLinZT9Yay+VY4z3vysrkv1mxqxKTqlxqMfwp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
        Validity
            Not Before: Apr  5 06:15:32 2026 GMT
            Not After : Apr 12 06:15:32 2026 GMT
        Subject: CN=69d1fe04-5f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:46:31:85:8f:5a:4a:25:67:6b:7c:8f:96:31:
                    2b:19:7f:b4:ae:29:54:1d:46:a8:59:21:26:46:1a:
                    55:cd:e0:68:49:cb:a4:52:f0:99:4e:90:e5:ee:8d:
                    a7:92:a0:95:8c:74:9b:7a:9d:85:ca:f1:97:db:f8:
                    b5:0f:43:ff:fd:ca:96:b0:d2:17:b7:7c:2f:d9:b1:
                    3b:30:cc:b2:07:2f:e1:71:3e:5a:59:dc:f1:84:52:
                    b7:b6:3b:db:21:64:47:13:94:85:4e:0c:5b:20:20:
                    31:21:30:ef:ad:d2:8e:c1:30:d0:31:8b:51:6d:cd:
                    b0:15:4b:57:8e:70:db:84:1a:c1:42:77:cd:93:00:
                    d0:1c:be:79:76:bd:2d:4d:78:ac:74:24:b4:d7:7a:
                    8a:f5:78:90:3a:51:59:6e:e7:de:4c:7a:b2:ec:83:
                    b7:dc:40:be:df:b1:fc:cc:0a:4c:68:cf:db:b8:5a:
                    22:39:4e:5d:df:0d:17:1a:fb:de:0d:1c:17:eb:e1:
                    18:56:5f:4a:53:e2:12:67:9a:01:58:f3:3b:f7:31:
                    7f:75:9e:86:10:47:06:9d:35:ed:41:a4:cc:36:59:
                    85:f2:7a:b0:45:a0:b4:b4:7d:39:04:7c:68:30:dc:
                    bd:3f:83:fc:e1:57:4f:7e:1a:db:95:0a:6f:48:81:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:1D:89:50:19:C1:35:DE:E8:85:3E:F1:AC:35:48:02:49:3F:1E
            X509v3 Authority Key Identifier:
                keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:90:59:28:33:ba:29:d9:52:58:44:69:59:08:8f:96:9f:68:
         a5:c8:75:19:08:9a:33:a1:85:b0:e8:29:4e:6b:31:67:e9:13:
         7e:ea:17:08:54:9e:3c:87:32:b1:82:ef:8d:ff:b7:5a:ee:f5:
         7a:c3:5f:51:04:41:e3:ce:f4:3b:f7:16:c1:ed:42:ed:d1:34:
         e2:36:30:44:2d:08:3a:ab:6c:cb:25:43:09:53:29:c1:7b:cb:
         b2:b4:8f:4a:af:ee:3d:03:9c:80:14:2c:52:b1:41:23:a8:62:
         e5:ad:1f:41:3d:97:bd:da:4f:e9:94:6a:54:5b:9d:0c:8d:55:
         a9:0b:c9:d1:d9:ef:5c:4d:e8:72:2e:70:52:00:13:5f:b0:3e:
         b1:e0:64:7a:fb:f6:2c:80:14:d5:f2:a9:0b:b3:93:75:77:67:
         fe:7a:3d:ac:49:47:fe:95:1b:49:c6:d8:32:f4:68:c5:77:7a:
         73:ec:10:7f:5a:12:1b:66:4c:7e:91:59:4d:ae:2e:70:cb:33:
         9e:fd:a5:0f:20:91:f0:03:5a:58:f3:e9:c7:fc:91:ad:cf:7e:
         64:a6:29:30:fd:fa:e7:8d:d8:40:ad:8f:7a:b8:e1:1f:94:3a:
         1f:58:17:e8:04:1e:c6:c4:92:22:4e:00:fc:09:db:42:36:08:
         1e:9a:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:04 2026 by rpki-client