Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
File:                     cXGYzRpGea2dRS7h2wLQASpDdOw.mft (raw, json)
Hash identifier:          qeajK4BaVf0TNlT+BbWjg3dqY1Odc7hH/hL8cUEXVBg=
Subject key identifier:   11:6B:74:54:97:43:E7:CA:94:5D:B9:DD:73:89:B6:D3:AA:47:57:B3
Authority key identifier: 71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
Certificate issuer:       /CN=A9169F49/serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
Manifest number:          CB
Signing time:             Sun 05 Apr 2026 06:10:36 +0000
Manifest this update:     Sun 05 Apr 2026 06:10:36 +0000
Manifest next update:     Sun 12 Apr 2026 06:10:36 +0000
Files and hashes:         1: cXGYzRpGea2dRS7h2wLQASpDdOw.crl (hash: tMzc3uJ1bln30cbB1u+ufQjqbqEK2NQzORJyq+8GpOc=)
                          2: 2B42D1D8F9B611EFB3AB154BC4F9AE02.roa (hash: EILeiHdgRS5T+00CqE1QLUGZWDX5PLvwuDPP5GaU2OM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl
                          rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169F49, serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
        Validity
            Not Before: Apr  5 06:10:36 2026 GMT
            Not After : Apr 12 06:10:36 2026 GMT
        Subject: CN=69d1fcdc-b755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:c5:0b:49:b4:a3:20:a3:02:00:ae:81:c0:
                    30:18:03:3d:b3:09:32:cd:da:41:32:6b:34:18:0d:
                    bc:94:ae:de:ac:04:0c:e9:ab:e8:42:59:1c:56:16:
                    e9:0f:2f:4c:e6:f2:ef:f5:b7:75:d8:6b:c0:04:f0:
                    94:e4:bb:c0:f5:a0:fb:bf:7f:0b:2f:7a:72:b0:af:
                    fb:a8:32:2a:eb:71:49:95:94:b0:3d:9a:38:f3:6d:
                    89:b5:04:a5:3b:60:7f:58:b2:c9:e0:3d:f9:ec:ff:
                    68:3e:49:40:d0:4f:43:bd:e2:72:d7:3d:71:c1:9e:
                    e2:06:7f:16:0d:2c:92:5e:d9:73:8f:8d:59:fe:75:
                    34:67:80:76:f6:40:66:83:28:5e:cb:cf:e8:55:21:
                    ba:08:b4:94:e0:26:36:4d:08:c3:0f:23:90:1a:46:
                    89:33:79:e8:fd:85:e4:88:86:24:88:84:4c:92:03:
                    70:ad:dc:9b:fb:a8:23:54:71:2e:8b:40:30:ed:34:
                    1f:db:35:17:47:b4:24:c9:d8:a4:4d:b2:fc:f1:05:
                    4c:9c:4f:5c:ea:94:ea:59:29:f7:c5:b5:0e:cd:9f:
                    2b:90:c7:14:61:92:b0:35:64:ba:4c:75:99:1c:5e:
                    f8:cf:64:61:e6:c7:08:95:89:66:53:bb:22:86:50:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6B:74:54:97:43:E7:CA:94:5D:B9:DD:73:89:B6:D3:AA:47:57:B3
            X509v3 Authority Key Identifier:
                keyid:71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:67:7d:7a:bb:80:7a:20:7a:89:24:50:41:d7:23:c8:f3:
         c2:91:50:e1:a1:49:d4:3a:7f:b2:2b:b1:b9:bb:5f:9c:35:b1:
         b3:09:5e:c7:1a:ae:68:f6:39:ca:6e:36:40:d7:00:7a:5b:cb:
         f6:c8:d2:2a:ab:bc:57:a5:39:e6:95:e1:d8:d9:d0:af:bb:c5:
         2c:33:4c:e1:e4:b8:33:5c:e5:fa:3d:d9:de:05:c7:15:4e:5e:
         96:f1:0d:87:bd:3b:e4:06:c7:92:e3:e0:5a:df:4f:05:ba:ed:
         99:99:05:50:2b:51:a0:a1:57:c3:60:a1:8d:af:69:62:e6:d6:
         21:bb:c5:c3:a8:10:2e:5b:e3:30:74:d5:6b:49:52:f6:d5:c0:
         c8:45:44:6d:88:e7:40:d3:23:89:3b:3f:ba:55:b7:92:fe:06:
         45:79:22:39:e2:cf:d4:53:c1:eb:0d:ae:99:e3:39:a2:4b:8c:
         39:1d:c1:f3:ec:70:43:a5:54:9a:87:e8:66:04:b0:97:56:4d:
         68:5e:cf:08:37:70:c6:0f:4a:ba:fd:6e:66:0e:92:df:f6:9f:
         ae:b1:a1:f4:f3:b3:bb:73:25:13:31:47:ee:5e:ea:32:23:d1:
         fc:48:c9:be:8c:ce:c3:a2:2d:4a:10:e7:cd:79:e8:7e:39:9a:
         11:ce:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:04:03 2026 by rpki-client