Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
File:                     6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json)
Hash identifier:          J9rM/R9/Tt9bbwIM2fAN8Z4p3+oS88SX8mPDrO3IHyQ=
Subject key identifier:   83:83:42:94:86:F3:46:52:AA:CA:1D:42:F8:03:51:21:29:87:73:B3
Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
Certificate issuer:       /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Certificate serial:       049B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
Manifest number:          048C
Signing time:             Sat 04 Apr 2026 23:47:11 +0000
Manifest this update:     Sat 04 Apr 2026 23:47:11 +0000
Manifest next update:     Sat 11 Apr 2026 23:47:11 +0000
Files and hashes:         1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: 03lEY5Y8o+i18owQ8sO5R9ivG8JiK6Sft9VPLpBDzfM=)
                          2: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: N2OHhfn+CsWn9uM8g1Ofmnj7ymg7gw2Y4/3DtYOdMeg=)
                          3: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: WD9MrIU1Zj3w+mVYD7v9tJ6t/TRXPSfmjh+WqlfPWrY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
        Validity
            Not Before: Apr  4 23:47:11 2026 GMT
            Not After : Apr 11 23:47:11 2026 GMT
        Subject: CN=69d1a2ff-e399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:88:c7:e5:64:3c:f8:81:87:02:96:43:a8:
                    99:e6:47:b8:c8:75:f6:fe:40:c8:7b:5f:21:63:98:
                    e3:96:b8:e2:2f:1a:f5:65:ba:3e:3d:4a:4b:27:58:
                    be:58:fc:6a:92:fc:c2:4d:af:4b:44:54:22:61:81:
                    46:68:d7:4e:4a:22:38:a1:11:42:ba:98:e4:83:55:
                    07:25:0d:ba:5d:03:fb:cd:79:26:d1:96:6e:3f:7f:
                    96:57:11:d6:18:e9:58:41:fc:08:23:27:4e:6e:31:
                    43:cf:9c:eb:f7:ef:c0:6c:0a:3c:0e:7a:d5:9b:55:
                    21:8f:5d:c4:f0:ef:67:92:6a:96:f3:af:1e:39:f0:
                    88:06:f9:f3:e6:c2:7c:d0:b4:b2:a4:ee:da:6e:3f:
                    68:be:d1:44:9d:2d:62:56:7e:a1:e5:f1:36:d4:83:
                    0d:f7:5e:22:6f:eb:78:97:40:4d:c7:b0:72:80:74:
                    39:31:3d:5a:f7:1a:56:51:10:91:f0:ae:d3:09:04:
                    86:d0:d6:6a:2b:62:b0:3d:37:ba:c5:c4:1d:fb:5a:
                    33:15:c5:fb:2f:96:33:0e:26:ec:55:90:2a:3c:0d:
                    4e:53:bc:4e:8f:e8:48:7f:83:cd:95:a2:89:93:37:
                    66:69:7c:05:67:ea:d4:fb:95:06:41:b2:3e:68:f6:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:42:94:86:F3:46:52:AA:CA:1D:42:F8:03:51:21:29:87:73:B3
            X509v3 Authority Key Identifier:
                keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:2c:ac:f6:4b:bc:46:14:eb:91:c8:ff:af:5e:62:bf:55:
         16:f7:58:8e:38:5d:1a:ab:b0:f9:61:65:90:cb:da:c9:c2:a9:
         09:71:db:12:cc:4a:2d:de:54:b7:7b:69:5c:61:5e:e5:99:0e:
         5c:2e:14:6a:d3:4b:76:9f:2b:50:30:f3:32:98:7d:87:0b:23:
         d1:c2:00:f4:1a:0d:09:c7:a8:a0:40:7f:3e:2f:71:39:49:82:
         3e:37:fd:2a:e4:e3:dd:ec:f3:30:3d:09:a0:f9:61:c6:5f:d2:
         97:e4:35:5f:f6:b1:8a:6e:26:a6:42:a2:13:9c:c7:68:c2:27:
         c7:c8:b3:d3:43:b4:9a:0d:82:49:8c:06:24:ae:63:89:42:f4:
         f6:e9:88:37:ee:ea:21:a8:bd:04:54:25:1e:c5:f6:75:f3:27:
         0c:5e:c5:14:0b:9b:43:00:78:be:24:ee:30:2e:88:eb:cd:35:
         7f:89:1b:d1:e9:07:8c:6f:bc:90:e6:cb:3a:9d:a0:01:09:10:
         32:90:fe:93:da:a7:9f:af:98:bd:ad:72:50:6d:25:be:b7:cf:
         50:cb:1c:d6:00:8b:af:2e:72:58:81:e5:62:86:69:a6:e5:a3:
         6f:a6:48:1e:62:52:ac:8b:cc:3a:ae:04:c9:24:dc:c6:1d:0b:
         3e:14:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:46 2026 by rpki-client