Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
File:                     he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json)
Hash identifier:          d5HTDJruRAVaWPkEpx3jCdx69f5LjkCqXwfwXKb//JI=
Subject key identifier:   89:AA:89:17:44:6A:ED:12:85:92:B9:9B:E1:FA:87:36:80:55:3B:49
Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7
Certificate issuer:       /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
Certificate serial:       11D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
Manifest number:          11C7
Signing time:             Sat 04 Apr 2026 17:03:55 +0000
Manifest this update:     Sat 04 Apr 2026 17:03:54 +0000
Manifest next update:     Sat 11 Apr 2026 17:03:54 +0000
Files and hashes:         1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: BZiEFC9PXRLaAIZuuwEMXpnZ0R4rghtl0c6fWsmHZPs=)
                          2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl
                          rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4562 (0x11d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
        Validity
            Not Before: Apr  4 17:03:54 2026 GMT
            Not After : Apr 11 17:03:54 2026 GMT
        Subject: CN=69d1447b-496b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:01:3d:78:47:f0:e0:40:04:a6:da:58:e2:
                    46:92:56:39:d0:51:c6:65:6c:75:f2:ab:17:47:e3:
                    37:34:89:b4:70:3d:67:21:50:75:b5:d0:35:d5:80:
                    22:e6:3a:74:71:7d:66:55:19:6c:ee:c4:25:7e:64:
                    f6:91:38:91:24:08:ce:d4:a0:a6:06:a4:3d:61:17:
                    eb:85:d3:3d:6b:4d:29:68:9f:a7:a3:13:70:77:24:
                    bc:6a:76:80:ba:04:b0:25:dd:7e:21:cb:92:a5:ff:
                    25:b3:a6:10:2e:6b:47:e2:7f:77:3f:e8:70:b4:fd:
                    7d:0c:97:9b:07:61:64:b6:c5:0b:37:e8:6b:9a:62:
                    44:29:5d:e7:a9:36:b6:32:f2:41:d1:a9:14:45:0b:
                    ab:79:17:45:b9:01:2c:67:39:c5:fd:32:17:bc:64:
                    cd:58:3a:5a:cf:10:53:c8:5c:87:52:2c:bc:bb:74:
                    0f:9e:15:71:6c:86:38:3c:11:3d:0b:96:f1:d9:df:
                    60:47:f8:42:c7:54:68:31:ac:36:a8:1b:c2:6e:2b:
                    be:76:68:8f:3f:a0:4a:f6:59:29:4d:86:9e:8b:57:
                    ff:18:fd:02:51:8d:8a:a0:d3:b2:6b:1e:bc:46:5a:
                    41:60:95:68:66:a8:81:ad:6a:3f:c2:92:49:9d:0c:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AA:89:17:44:6A:ED:12:85:92:B9:9B:E1:FA:87:36:80:55:3B:49
            X509v3 Authority Key Identifier:
                keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:69:22:5e:9f:0b:3a:90:c8:e4:ba:c0:67:2f:35:d5:c3:57:
         98:3a:07:dd:a9:94:76:12:c3:d4:8e:ec:ba:c0:f9:6b:c1:9b:
         0b:48:a1:06:b0:24:99:c8:e9:23:41:f1:f1:f4:1d:1c:2c:9f:
         5f:f3:f7:f6:aa:11:15:67:8a:2d:c7:8b:ef:e6:d4:8b:65:ea:
         c6:5c:76:7b:19:39:3f:d6:c2:fa:38:56:8a:83:8e:8f:03:83:
         d2:37:c3:d2:9b:5e:cd:23:6e:c3:97:91:69:45:d7:5e:1a:5f:
         93:f6:c1:ac:3d:d8:50:d5:ed:51:99:6c:c8:2d:27:48:ea:ff:
         0a:d7:4e:9f:2a:ac:a1:9a:77:14:7b:6e:1d:9c:82:7b:a0:ca:
         b0:8a:d7:d1:a7:17:43:f0:1d:dd:9b:dd:7d:b5:da:11:75:7d:
         0e:c7:88:8a:86:ac:c1:22:78:f7:ad:49:1b:89:5b:25:09:fa:
         64:47:59:82:4b:3b:93:59:cb:39:8a:2f:51:dc:b5:6d:71:cf:
         08:6e:d2:81:67:4f:b7:f2:f1:94:6e:f6:a1:42:54:cd:3f:d3:
         62:7e:f2:34:86:7f:64:f7:67:39:03:cb:d9:ea:8a:cb:74:d6:
         aa:7e:fe:f2:b6:44:71:21:14:b4:e9:8c:b0:34:cd:e5:c6:d2:
         76:c2:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:27 2026 by rpki-client