Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File:                     DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier:          a2vFwB6eqccxIulMJdxSsn2al5ZoQjxjX4NQFNs0XnY=
Subject key identifier:   73:25:B4:6D:B5:AA:49:0B:35:EF:67:80:89:EE:6A:B2:B6:99:58:F0
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer:       /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial:       0CB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number:          0C9F
Signing time:             Mon 06 Apr 2026 18:21:51 +0000
Manifest this update:     Mon 06 Apr 2026 18:21:51 +0000
Manifest next update:     Mon 13 Apr 2026 18:21:51 +0000
Files and hashes:         1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: 6sEWGh4riL9wPBgCuI8iqVzwvgr9A0f8C1QXLTTRpL0=)
                          2: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: 2My4J518BuXDlVTrUGKU/R5t7+Fy21v8HniCQ4WnhXU=)
                          3: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: H0qqK0ftqlCO4iGmc0hYXhGbYS0nJ+mVr0nn6HNSQfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
                          rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 18:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3250 (0xcb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
        Validity
            Not Before: Apr  6 18:21:51 2026 GMT
            Not After : Apr 13 18:21:51 2026 GMT
        Subject: CN=69d3f9bf-7de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:cc:3c:07:7d:b1:f6:81:7a:b4:26:92:99:
                    bf:37:d7:db:91:72:ad:ce:0a:9e:e2:e0:cd:04:7f:
                    32:3a:1f:db:b3:d7:bb:68:a0:f9:ec:b4:dc:d3:09:
                    76:7c:3c:76:98:9e:03:8b:f8:99:0d:e1:08:6e:69:
                    2c:af:c0:05:bb:5b:1c:77:f1:ea:bc:f3:e5:d2:aa:
                    59:43:d2:2c:8d:e0:1b:8d:ee:56:39:07:ab:76:5f:
                    f8:b2:3b:c9:28:c5:40:69:07:84:81:57:1e:8f:df:
                    17:7b:96:35:59:5e:f0:73:fa:fa:e0:2b:1d:7c:27:
                    d0:a0:43:96:f1:fe:70:e0:db:02:e4:13:bc:22:37:
                    1b:3c:09:93:b8:f0:e1:24:df:01:0e:2b:7b:8b:fa:
                    eb:fb:b7:02:9f:b3:80:1d:9f:74:91:63:33:9f:7e:
                    4a:c4:20:15:94:02:87:0a:c9:3d:58:0f:55:b5:06:
                    42:29:b8:c3:b1:e4:99:bd:38:3a:e3:b9:40:83:06:
                    2f:1d:74:0d:eb:6d:b1:88:98:f2:0f:39:fb:6b:21:
                    8a:41:d0:3e:1a:2f:12:71:e7:28:97:86:04:73:59:
                    22:d3:7d:85:c4:7e:e1:20:f0:ad:d7:af:36:f6:b7:
                    9c:66:ed:34:86:b5:0c:2e:7c:07:26:ec:26:5a:08:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:B4:6D:B5:AA:49:0B:35:EF:67:80:89:EE:6A:B2:B6:99:58:F0
            X509v3 Authority Key Identifier:
                keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:48:c2:67:26:7e:8f:11:a6:74:b7:4e:67:7e:32:24:bd:b1:
         49:09:98:e9:02:3e:3d:78:66:a4:a4:f1:eb:7a:9b:61:7a:38:
         de:53:13:2b:ee:e6:33:c5:20:66:47:db:51:2d:15:90:94:84:
         11:80:35:36:72:60:01:d9:3a:11:d0:02:61:b1:97:77:50:75:
         a7:43:c4:9a:41:c3:c8:6a:41:d3:9f:e4:b7:fe:f7:c9:33:c9:
         a4:a0:7d:e5:12:ec:ed:1c:2b:1f:7a:42:85:bc:19:99:22:09:
         a4:45:3f:ea:d9:9a:52:f2:8f:65:78:24:af:b7:53:f5:08:2f:
         07:ee:09:a0:11:bb:a9:a4:e2:a3:f5:60:05:e0:30:7e:b3:a3:
         56:0c:ed:db:27:74:e9:88:e1:dd:8c:73:06:ae:df:f5:bb:bb:
         ea:54:82:87:7c:01:7f:fb:19:bb:03:93:cb:db:0b:80:c6:a0:
         4e:63:50:24:e0:26:2a:e5:05:26:0c:b6:82:3f:45:9d:d9:d3:
         70:9e:f3:a3:3d:bf:04:eb:60:33:80:56:61:2d:34:d4:70:7d:
         f2:d1:82:f3:12:7f:6f:7d:aa:e0:e6:8a:0f:2e:e4:f8:27:52:
         36:01:cc:41:cf:a9:fe:fb:bf:44:01:a1:0d:6d:06:96:f6:46:
         13:a1:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:39:05 2026 by rpki-client