Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File:                     AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier:          vvB+UEKzN3oWpTHWyzYi5tp87+otR2UgPvho0QHGnvA=
Subject key identifier:   8C:43:2B:7A:3D:C7:DE:FB:76:E9:B9:90:D6:0D:D6:57:2D:CF:B2:E8
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer:       /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number:          01CE
Signing time:             Sun 05 Apr 2026 03:14:47 +0000
Manifest this update:     Sun 05 Apr 2026 03:14:47 +0000
Manifest next update:     Sun 12 Apr 2026 03:14:47 +0000
Files and hashes:         1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: uyCb0+wbmjg5el8Juzgo0BR7vgOJQ4K/y0uqv2qmnYU=)
                          2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: oIvNDV0kKg8+q3urTzdMBjxhKk7FfiR/yZ0iZHzMy9A=)
                          3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: yzSO4tM9nUI6xnt7Kh6rwJxk9dfi0T3Au+GC85D5PJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
        Validity
            Not Before: Apr  5 03:14:47 2026 GMT
            Not After : Apr 12 03:14:47 2026 GMT
        Subject: CN=69d1d3a7-9ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:e5:17:7d:9a:fb:5b:53:9e:87:f7:50:c6:
                    45:5a:41:56:2a:13:3d:30:58:8a:69:99:45:e2:d2:
                    58:44:ef:57:6e:44:15:dd:a0:f2:d6:5f:81:60:ac:
                    1b:dd:93:cf:c0:1a:25:09:1e:69:62:d9:90:10:b4:
                    ca:7c:ed:1b:09:75:10:e6:ba:16:a2:ff:37:ce:f5:
                    4d:93:0c:a1:c4:24:aa:d9:2c:38:a5:c5:85:19:d8:
                    28:31:29:c1:1e:62:e0:ce:63:50:d9:ed:22:01:7c:
                    60:e1:c4:2e:46:13:ae:45:e3:a7:1c:b4:c1:14:61:
                    bc:18:dc:23:15:0b:90:ee:f6:44:79:d8:d4:cd:20:
                    b3:89:d3:3f:63:af:bf:a3:6b:69:25:bb:82:24:a7:
                    cd:02:06:bd:7d:aa:07:0a:30:3d:11:6f:3d:34:86:
                    53:24:14:5c:15:8d:06:1c:04:6c:74:af:ba:89:84:
                    14:86:c6:b8:e4:d5:67:a6:c1:4f:76:60:44:3f:5c:
                    9e:a1:a3:e7:9c:b8:07:82:94:96:4a:47:00:75:1f:
                    4d:96:af:52:ef:1f:87:0d:9e:ad:c2:1c:61:a4:df:
                    27:81:fb:3e:5d:0d:b1:0c:d8:84:a1:f5:ae:e3:98:
                    80:72:f4:39:a4:08:97:9b:ad:b0:40:5e:bf:1a:2c:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:43:2B:7A:3D:C7:DE:FB:76:E9:B9:90:D6:0D:D6:57:2D:CF:B2:E8
            X509v3 Authority Key Identifier:
                keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:20:a4:52:f3:21:84:cc:6b:be:bb:2c:ca:ed:39:5e:d3:c3:
         f9:37:2a:a7:89:80:0a:13:0f:cc:e3:ce:88:f1:f9:e4:a8:a6:
         a0:89:88:ff:5c:52:14:62:2b:66:34:de:4e:22:95:53:ea:bb:
         30:f0:76:6c:ce:04:a0:04:b3:07:20:b7:15:82:8e:4e:74:3b:
         ef:fe:21:e3:19:a9:30:6a:29:ab:f6:88:1b:7b:01:06:91:be:
         bc:43:37:ca:04:8c:a5:59:35:8a:e9:2c:e4:99:c8:e5:c2:f3:
         ec:3c:ef:f6:6d:bf:e6:34:e5:32:bd:43:c8:df:f7:34:80:08:
         15:fd:88:b8:6b:73:06:89:e0:ac:a4:0c:15:a8:47:5a:25:11:
         eb:f1:4e:66:81:f4:e7:2f:ef:0a:65:f6:2b:64:d0:52:d9:43:
         24:a9:81:7d:1e:ca:20:c2:ad:ea:1f:da:f5:12:32:d1:fd:be:
         ce:99:40:54:e6:9e:05:21:19:49:0f:c3:8f:7c:4f:ff:98:63:
         d4:c8:53:84:49:ac:97:cb:65:5b:ed:c9:7b:ab:89:72:37:8b:
         b4:c1:4f:a2:da:38:0e:bb:9f:6d:ca:a0:09:72:00:ac:68:f3:
         e7:2e:d6:7e:1e:fd:a9:47:b3:90:5d:f4:65:d9:1f:97:6b:79:
         39:1d:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:15 2026 by rpki-client