Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
File:                     a0-8524QyfbwCQHlAC-OEPPpr38.mft (raw, json)
Hash identifier:          wwGVjVF9PRz9M7URGxiG4tVK/sS6BdQ2Ey26GLOmZhk=
Subject key identifier:   87:D9:31:D1:B2:7C:FB:67:B8:85:77:45:67:77:00:E1:E3:ED:4A:6F
Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F
Certificate issuer:       /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
Manifest number:          11
Signing time:             Sun 05 Apr 2026 08:23:08 +0000
Manifest this update:     Sun 05 Apr 2026 08:23:08 +0000
Manifest next update:     Sun 12 Apr 2026 08:23:08 +0000
Files and hashes:         1: a0-8524QyfbwCQHlAC-OEPPpr38.crl (hash: cJ2qcUSJV3O6lmYKVclD2bd+hWPJ7gYWNMhlscBloDU=)
                          2: 05CB75D01B4E11F190BF0D05243D8C67.roa (hash: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl
                          rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
        Validity
            Not Before: Apr  5 08:23:08 2026 GMT
            Not After : Apr 12 08:23:08 2026 GMT
        Subject: CN=69d21bec-3bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:9e:b9:08:58:b7:18:58:b3:77:f4:fb:e2:
                    15:67:5c:70:bb:8f:b2:9f:ff:bf:c1:f9:2e:b8:0d:
                    32:9f:a5:e7:6a:ae:48:7b:3c:4b:cd:21:79:2e:80:
                    a8:c3:58:8b:8d:3b:0f:af:95:8a:f2:cb:a9:32:f7:
                    0e:b2:1c:27:12:15:4f:41:ae:05:bc:26:9c:7c:28:
                    f1:04:1f:a2:d9:ce:00:b3:d2:c6:7a:35:47:2a:ee:
                    49:d3:cd:96:89:64:32:a4:4c:27:62:df:20:0c:a4:
                    4e:50:77:26:f8:80:f3:20:a6:3c:7a:64:4f:60:84:
                    63:22:02:7c:1d:93:05:96:ae:65:f3:59:0e:0e:d0:
                    72:3d:0d:b6:46:47:46:82:03:b9:ac:ee:15:b3:80:
                    ca:dc:c1:36:09:fb:74:e6:19:f3:a4:8f:fb:22:03:
                    34:78:ac:be:68:24:6f:c9:8e:c6:91:9f:c7:c2:19:
                    52:2a:a6:e7:3f:62:74:0a:5e:9e:39:61:d7:25:df:
                    99:f9:8f:fd:19:46:6e:3d:2e:5d:f1:d6:82:ab:3c:
                    5e:bf:ef:d5:98:58:e1:d3:98:23:e2:07:61:7c:87:
                    a2:3a:2b:03:a6:ca:73:06:60:a4:a5:67:13:fb:3d:
                    9e:e8:3f:c9:5a:42:b9:3d:11:5d:e2:f7:e1:10:55:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D9:31:D1:B2:7C:FB:67:B8:85:77:45:67:77:00:E1:E3:ED:4A:6F
            X509v3 Authority Key Identifier:
                keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:02:d2:81:73:8f:f4:60:f7:d4:06:2f:88:41:f5:92:1a:
         30:31:7f:42:5d:d5:ea:f8:06:bc:82:32:6a:3d:75:ed:97:b0:
         2f:13:68:f5:60:d5:fd:c8:74:1d:5d:f1:92:45:f7:aa:b9:d5:
         51:66:bc:e7:f6:f3:be:db:dd:45:88:c0:9d:75:55:f9:7b:53:
         42:a2:5a:53:82:d1:ae:24:7a:5a:6a:8f:9d:ad:96:d0:53:07:
         00:55:13:8f:8f:de:03:11:a9:4b:1e:85:95:e8:13:c7:2e:25:
         0b:25:33:d1:c5:2c:44:f1:f9:65:2c:aa:d2:ca:a2:1a:af:0a:
         bb:00:3e:bb:1f:3f:6a:d4:19:9f:24:bf:ca:ae:0b:61:fc:b6:
         1e:cb:ac:2b:a9:1b:46:15:59:7e:c8:9f:a4:f2:36:e3:ef:42:
         fa:67:3f:b7:c2:51:32:f2:fe:0b:62:cf:5a:d7:d1:69:6f:2f:
         72:d0:90:3c:96:99:d0:f0:09:56:9b:89:84:15:49:43:57:ff:
         e2:31:d7:ac:5c:9d:79:0d:7d:4d:44:1d:4f:72:41:08:f0:d3:
         c8:75:07:e5:35:e0:16:cb:97:be:ed:4a:f3:7a:b5:fc:25:2d:
         d7:ee:91:da:36:25:22:e4:82:4f:f9:8e:13:62:bf:d8:90:fd:
         e3:9a:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:37:11 2026 by rpki-client