Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          lV20Hg7+BzERzcOCo0nOZL5sZBGkNhxbclxOEt25gQI=
Subject key identifier:   D2:DC:3A:32:62:7C:B8:99:87:22:3B:B1:32:67:14:F0:09:39:83:5E
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0CC9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0CB0
Signing time:             Sat 04 Apr 2026 18:22:47 +0000
Manifest this update:     Sat 04 Apr 2026 18:22:46 +0000
Manifest next update:     Sat 11 Apr 2026 18:22:46 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: g4FrtlRw0l4fdl/a195Qx/DDN/w+P7p7uUvLyjiox1c=)
                          2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
                          rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3273 (0xcc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: Apr  4 18:22:46 2026 GMT
            Not After : Apr 11 18:22:46 2026 GMT
        Subject: CN=69d156f7-ac1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:40:ca:24:24:cc:08:ac:5a:82:40:c4:b9:
                    38:96:31:2c:cc:1f:c4:85:e0:f7:65:8a:6a:56:6b:
                    1d:59:35:db:f7:dc:18:a5:ef:66:a7:00:00:e0:23:
                    8c:07:23:98:8f:92:2e:d6:1f:a8:b7:6e:d4:e3:6c:
                    ff:b4:e8:4f:63:e4:0f:7a:7e:44:33:9e:a0:c8:f5:
                    e0:8a:47:35:40:64:9f:6d:44:db:2d:77:55:24:f4:
                    5e:f2:f5:42:33:a9:8d:10:c3:4d:72:05:48:be:e8:
                    ae:96:d2:ed:5d:60:14:68:3a:b2:bc:b7:63:85:77:
                    ba:99:68:bc:b8:a1:86:70:3a:b5:c6:84:f8:00:96:
                    fd:df:05:0f:2e:04:92:c5:2c:7d:91:60:68:73:19:
                    f5:83:bd:2a:10:95:35:99:09:c6:f9:09:14:f9:6b:
                    da:4c:2f:a7:8d:9c:e3:a4:38:c7:55:57:91:6a:02:
                    d5:40:07:d0:93:fd:51:90:98:f8:7c:27:77:84:1d:
                    53:91:33:83:71:a5:69:ab:74:fd:4c:0a:80:8f:3c:
                    c3:64:a9:70:00:8d:69:b8:ed:e0:7f:2e:b3:07:d4:
                    fd:fe:3d:0c:ad:26:4d:3b:37:74:8c:aa:9c:b6:17:
                    cb:ee:f3:95:13:e1:be:a4:76:b5:fe:87:0f:95:81:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:3A:32:62:7C:B8:99:87:22:3B:B1:32:67:14:F0:09:39:83:5E
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:00:2c:b3:bf:e1:b8:18:17:79:cf:9e:93:7a:02:dd:95:8a:
         5f:a3:89:9b:9b:d5:85:34:c3:89:71:11:58:fc:c2:a7:4c:3f:
         03:94:0b:02:67:bb:53:a4:d8:5c:c1:25:e1:bb:08:13:2f:30:
         75:99:19:2e:17:40:8f:c6:1c:55:48:53:66:22:36:38:7e:88:
         6a:10:f4:08:0e:64:2f:b9:4d:58:ea:3f:97:de:71:10:47:c6:
         a0:57:d0:91:e9:b0:c3:b4:f4:73:59:0c:c6:d5:97:b9:6f:88:
         9c:9f:ca:39:3a:46:7e:2c:38:ed:2b:f2:91:2c:50:7a:08:97:
         42:f0:c5:fc:66:b5:78:4b:9b:22:f1:6c:7d:f1:61:e7:8f:07:
         00:6a:31:2c:53:ad:98:16:38:9b:9e:c4:99:a3:02:96:a4:43:
         0e:9d:f9:4d:66:3a:09:39:e8:c2:3a:f9:3e:12:32:5c:66:93:
         f9:32:33:23:9f:28:c2:36:a3:ae:c2:b8:af:4e:8b:e5:6a:8e:
         2d:94:23:a5:f3:ac:72:82:2e:2f:af:18:74:7b:34:1c:8a:15:
         86:35:21:f7:e1:b5:62:71:42:74:01:12:fe:bb:02:a9:21:ac:
         7f:1d:1f:ff:18:ba:d3:b8:52:21:7a:d0:f4:25:cb:d9:db:2a:
         b0:4c:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:59 2026 by rpki-client