Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
File:                     9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json)
Hash identifier:          DAggljPHC66ffhQ2Y6gONq1qM3Qqqwm4HRvDrvG8YgU=
Subject key identifier:   BE:DF:1F:E7:5C:26:A1:7C:7A:AB:74:4C:64:F9:E3:86:46:49:D8:25
Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
Certificate issuer:       /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Certificate serial:       0CF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
Manifest number:          0CEB
Signing time:             Sat 04 Apr 2026 18:06:43 +0000
Manifest this update:     Sat 04 Apr 2026 18:06:43 +0000
Manifest next update:     Sat 11 Apr 2026 18:06:43 +0000
Files and hashes:         1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: rj/m8hIEy1ick7TVdB0zq1p1BSm49vbzvWjYr7pWbGU=)
                          2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: 3NtaFMmRSGiQ779f2aTB3zcvMfuQOTWoqKAG2Y4TQQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
                          rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3320 (0xcf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
        Validity
            Not Before: Apr  4 18:06:43 2026 GMT
            Not After : Apr 11 18:06:43 2026 GMT
        Subject: CN=69d15333-473a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:90:30:68:1d:a3:df:d4:78:cc:5f:52:23:
                    1a:de:dc:e8:c1:ff:86:6a:8f:ae:00:ca:3c:a7:e8:
                    2b:7e:98:0f:53:92:eb:66:b0:5c:b0:5c:2e:45:27:
                    98:10:08:25:fa:2c:92:b1:f7:df:f5:c9:4b:42:dd:
                    db:3d:e4:2e:3a:a7:cd:48:a5:cb:97:64:91:cd:38:
                    73:bc:37:96:3d:ef:46:04:96:23:b5:39:e3:b2:36:
                    70:f2:97:ea:00:41:10:22:01:0b:90:c5:49:bd:ea:
                    91:ef:9e:5d:66:84:13:92:fe:dc:92:55:be:d1:7f:
                    29:ba:2a:cc:e9:60:26:8f:d1:93:c5:86:27:2a:7c:
                    5d:fb:53:bc:dc:a3:2d:ef:71:57:f8:25:8e:10:f3:
                    9d:df:8d:52:f1:3c:6d:92:1e:f0:0c:6b:ef:94:66:
                    c1:8d:bd:6c:05:24:b3:b4:ce:da:27:80:52:5f:54:
                    18:65:93:29:49:8c:a3:b8:0b:6a:dc:22:16:dc:36:
                    ec:e8:4b:44:3c:7c:57:e7:80:e6:6e:a9:3e:05:ab:
                    dd:45:f1:c8:52:c1:51:6c:61:bc:7c:6d:9f:19:d5:
                    76:7e:f6:ed:ad:ed:12:1c:15:e5:f3:b4:d9:4b:ba:
                    4a:7d:3c:7e:fb:15:12:a9:43:c5:d9:68:df:e3:59:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:1F:E7:5C:26:A1:7C:7A:AB:74:4C:64:F9:E3:86:46:49:D8:25
            X509v3 Authority Key Identifier:
                keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:80:b0:ad:70:d8:72:20:33:ba:7d:86:f1:01:b3:0d:1a:6f:
         01:d3:22:01:68:3a:11:69:06:27:db:e4:92:85:25:5c:71:82:
         85:80:dd:7f:4e:51:b0:54:07:3e:80:64:26:2e:0f:ed:78:f9:
         d8:75:b3:bc:7c:8f:76:2e:b1:a9:0d:61:cc:d4:2a:77:34:4c:
         07:a8:4f:2b:93:5c:13:ee:8e:b1:61:1e:36:bc:a8:3e:68:6f:
         0b:94:ea:4c:89:25:46:33:9b:cd:5f:11:4e:6a:90:ec:c1:df:
         b9:45:b3:a9:08:02:80:90:41:c5:43:23:8a:e0:37:b3:8d:66:
         0d:44:c0:32:3d:e4:b6:b9:19:24:bd:25:87:55:e4:8c:a3:2e:
         d3:41:79:c0:39:25:91:ab:48:b6:1a:6f:60:04:1b:cd:f5:65:
         97:f0:6d:a9:b0:45:d1:6f:b4:61:89:03:f6:81:0e:ab:50:46:
         fa:89:58:ff:d9:83:56:ed:30:fb:e8:d3:dc:b7:d8:16:a7:0a:
         06:5f:7f:6f:31:9b:cf:06:e3:e3:4f:ed:69:8e:1a:e7:d8:b8:
         36:f8:5a:a1:6d:f9:20:cd:d5:5b:0a:c3:d2:36:2b:ff:9f:8a:
         63:fd:57:20:cd:2e:b2:7a:a6:f6:a3:e6:56:bd:98:7b:9f:bc:
         80:1d:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:49:16 2026 by rpki-client