Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
File:                     v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json)
Hash identifier:          XCJXXMnR+kenslW3tclh8Idn6rEcNVnlX0ZGTcjHujU=
Subject key identifier:   AB:37:24:3B:EC:D7:7C:5E:52:27:50:AB:8B:B2:AC:D7:ED:91:95:F0
Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B
Certificate issuer:       /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
Manifest number:          011E
Signing time:             Sun 05 Apr 2026 05:10:53 +0000
Manifest this update:     Sun 05 Apr 2026 05:10:53 +0000
Manifest next update:     Sun 12 Apr 2026 05:10:53 +0000
Files and hashes:         1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: xAsTK+98FR0LiZgCyPoR2p4J8S7unP7Y4ZF+nx5AoLM=)
                          2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: E9mAZb8xSaXl7oqYSgHwt0AXSurnvpPNcWXcsPgaaag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl
                          rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136302, serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
        Validity
            Not Before: Apr  5 05:10:53 2026 GMT
            Not After : Apr 12 05:10:53 2026 GMT
        Subject: CN=69d1eedd-3834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:18:4e:bf:c2:74:d0:1c:51:22:a8:07:f9:be:
                    7e:5c:35:da:5e:19:dc:ce:fe:ab:06:71:4b:f2:fc:
                    fc:8f:c7:43:37:27:55:b4:7d:e1:7b:49:73:8d:64:
                    e0:7d:a0:1b:93:6e:07:75:34:5d:df:23:ec:80:85:
                    40:9a:4c:28:f2:c6:d6:3a:e0:d6:51:99:4a:f9:20:
                    6b:c5:58:52:3b:30:26:03:9f:d8:40:49:4f:b2:83:
                    9d:18:06:06:50:50:ba:3d:1f:ad:d4:02:ec:48:aa:
                    62:c5:4a:da:6a:38:cb:3d:60:ae:9a:03:60:c2:8f:
                    75:ac:02:4d:bf:94:00:30:ca:82:c1:1c:c5:c2:23:
                    d1:36:34:9e:bc:60:c0:9c:67:ab:f8:46:99:51:e5:
                    ca:91:89:dc:c0:8f:aa:b1:cc:40:b6:ca:cc:dd:ab:
                    48:ba:fa:fa:fe:b5:65:9d:cb:17:10:36:cb:64:09:
                    15:cf:06:3e:2c:3d:67:92:c4:97:06:a6:d8:24:c5:
                    76:08:7b:e0:07:7f:52:6d:c7:b0:2c:07:ac:bb:bc:
                    bb:0e:3b:e8:82:62:b0:45:1b:dc:ec:4e:ea:ef:51:
                    a7:8d:92:1f:07:bc:0c:ab:47:80:19:b9:bb:d8:78:
                    97:e5:a3:20:7d:8e:44:fb:7b:a1:cd:72:f5:80:5b:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:24:3B:EC:D7:7C:5E:52:27:50:AB:8B:B2:AC:D7:ED:91:95:F0
            X509v3 Authority Key Identifier:
                keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:75:c6:e6:2c:14:55:ec:19:2b:e5:11:be:d3:c3:40:61:
         cf:79:47:16:d4:1a:5a:c8:34:c2:24:f7:fd:8a:e2:08:ad:f8:
         27:7f:32:40:9a:5e:75:2c:c4:22:d7:7c:ff:b3:cf:d6:ad:89:
         e1:01:84:46:ef:fb:bc:c3:2e:73:1d:94:72:78:6a:ae:ff:aa:
         94:41:ca:db:9b:90:a5:cc:b8:f5:32:05:0e:86:04:58:5b:0e:
         52:de:06:a8:d1:10:17:34:69:f4:a8:de:20:2e:a8:d7:e2:25:
         65:bb:a4:56:5e:93:3a:6d:62:c1:f2:c8:50:6e:2b:72:7a:7a:
         67:b6:27:e1:92:f2:a6:eb:38:54:74:7f:9f:7c:33:b6:69:21:
         d6:24:90:6a:7c:aa:3d:0f:83:d9:42:78:c0:0e:15:50:7a:93:
         26:e0:12:e4:d5:ac:9f:6a:f4:9e:e2:a3:d9:b8:b3:c0:f5:11:
         ec:a9:99:9b:f5:b1:32:41:9e:fe:0a:32:a5:72:47:d7:84:f7:
         7b:b5:b8:0a:88:3b:a5:07:da:d8:e7:1f:ad:16:40:fe:3c:70:
         e7:5e:11:a6:14:ab:9e:cd:8b:f4:32:f4:ce:79:c3:32:67:0b:
         14:72:03:41:ea:26:1a:49:f6:fe:69:7c:12:9c:0f:d5:bd:c7:
         c7:91:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 04:48:32 2026 by rpki-client