Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
File:                     cxPr9cAfS3ltkFi6w8ZfVbMFync.mft (raw, json)
Hash identifier:          6An3kbzEYl98/hhMJYra+hwE9LxhXzcuKNyIP1dF6ZQ=
Subject key identifier:   F9:F3:BB:EC:13:48:97:A0:87:88:AC:91:57:42:37:41:E7:9F:0D:F4
Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77
Certificate issuer:       /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
Manifest number:          06
Signing time:             Sun 05 Apr 2026 08:32:11 +0000
Manifest this update:     Sun 05 Apr 2026 08:32:11 +0000
Manifest next update:     Sun 12 Apr 2026 08:32:11 +0000
Files and hashes:         1: cxPr9cAfS3ltkFi6w8ZfVbMFync.crl (hash: 16RuP2ZOCoO521OZobmtKxxIIsZSJAfg6/VCuyo3aB0=)
                          2: CCC7F1622C2A11F198E8A6989D833773.roa (hash: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl
                          rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77
        Validity
            Not Before: Apr  5 08:32:11 2026 GMT
            Not After : Apr 12 08:32:11 2026 GMT
        Subject: CN=69d21e0b-7f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:31:e3:ad:9c:b5:8d:2d:11:95:18:95:25:
                    88:06:f3:ba:9b:bf:fd:82:9c:b7:3b:8f:7e:0a:b8:
                    1f:be:c0:77:bb:70:b5:72:c3:af:14:05:7c:96:c3:
                    17:4a:42:50:99:5c:0d:a1:29:bc:37:4c:f6:6b:38:
                    30:fe:5e:d3:63:a7:25:fd:31:f9:e3:cb:dd:d3:6e:
                    3b:ce:33:ef:29:40:f2:ba:49:8f:5e:60:42:28:ae:
                    51:ab:17:b2:50:fa:bc:44:31:90:6e:da:9f:3d:71:
                    c6:99:56:e3:1a:31:07:6b:ea:07:28:f7:f3:ce:67:
                    b4:7d:f8:30:40:3b:97:34:49:dd:8a:77:2d:4e:45:
                    91:cd:01:8e:a6:c3:a2:fd:94:c7:c9:c7:4e:02:aa:
                    2f:a3:f9:5d:28:b8:13:3b:60:18:50:b3:ef:55:8f:
                    fe:e0:39:47:5e:48:33:33:96:d2:fc:4e:3b:f1:27:
                    3f:ad:2d:13:26:fc:4a:9e:86:44:31:53:b5:5a:ed:
                    d4:e8:f4:dc:07:ef:8d:63:92:24:72:3c:b3:bc:5d:
                    99:ad:19:a5:c5:b4:08:6d:11:75:df:da:bc:34:4e:
                    c5:2d:45:45:59:78:d1:3b:c8:11:f4:d8:07:6d:9a:
                    b6:f2:ac:e6:31:af:cf:3c:c3:01:d8:9e:a3:9c:5c:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:BB:EC:13:48:97:A0:87:88:AC:91:57:42:37:41:E7:9F:0D:F4
            X509v3 Authority Key Identifier:
                keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:15:e8:d9:45:95:d2:af:d3:84:16:f9:3d:3c:68:ff:1c:05:
         4d:4c:97:74:21:e9:87:b2:ac:18:bd:f2:10:e8:6b:db:ad:a5:
         1f:a8:cf:1f:35:f4:b0:02:97:63:a1:77:d6:63:14:b7:40:65:
         aa:2c:62:cb:33:5d:4e:91:b0:6a:21:7d:c9:d1:d6:94:21:8d:
         aa:ca:0f:4d:4a:4e:f0:a8:cb:bd:50:15:99:cd:0a:97:69:76:
         bc:35:fb:7e:4c:d2:b7:a5:d8:63:3e:41:e6:5c:95:ee:b8:13:
         16:a4:e8:d7:c8:b7:e4:22:f3:85:55:08:13:de:cd:d4:d7:e7:
         83:25:29:89:5c:1b:95:4a:da:d6:97:51:15:6c:6c:88:31:fa:
         09:6d:80:0a:be:0a:51:2a:77:ad:aa:0f:8d:7b:3a:bd:1c:62:
         a1:02:10:d5:63:66:15:6b:64:8b:fb:1e:c6:66:ac:50:b7:33:
         4f:4d:21:d9:ec:f5:94:1c:9d:41:17:21:a1:e6:e1:5b:2c:fc:
         bd:d3:6a:28:4f:94:b3:5d:d3:c0:43:bf:28:af:7b:d0:53:22:
         1b:6b:76:2c:58:12:f2:ee:6d:45:ae:9f:8a:65:93:c3:3f:32:
         fb:fb:55:34:be:1d:38:43:1a:7f:35:6d:06:e3:12:27:75:5f:
         dd:9d:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:49 2026 by rpki-client