Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          nsdYm9QjACQgKXGvs6XoelH9Fn3+FXw/5UdYqJs1aEM=
Subject key identifier:   0E:73:10:44:32:7C:E2:A1:35:90:2F:8F:77:C6:26:7A:4E:D5:2A:93
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          0278
Signing time:             Tue 21 Apr 2026 01:44:59 +0000
Manifest this update:     Tue 21 Apr 2026 01:44:58 +0000
Manifest next update:     Tue 28 Apr 2026 01:44:58 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: 65Rj+9x9VKfc5SlM50gcjclL0UiUa4IoCZvy3iiS31w=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: 7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 01:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Apr 21 01:44:58 2026 GMT
            Not After : Apr 28 01:44:58 2026 GMT
        Subject: CN=69e6d69b-5cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:0f:ec:20:7a:81:ac:9c:90:8b:b2:94:c2:
                    4b:27:7f:ef:86:7d:54:56:18:45:ff:a5:d9:76:50:
                    1e:cc:57:6c:ce:d2:8c:5e:ad:60:bb:88:d0:5f:6f:
                    b3:df:36:70:fc:97:12:5c:83:dc:c4:70:be:87:28:
                    64:85:06:d1:fb:d9:2f:78:6e:92:16:3e:62:cf:39:
                    69:4a:ab:c0:59:9c:6d:33:e5:4d:ac:83:18:74:23:
                    b5:0d:24:00:f2:77:79:d2:8c:42:ae:3f:f6:92:b0:
                    30:1f:c5:8a:b8:78:20:4c:a1:78:04:8a:b4:e7:9d:
                    80:2e:aa:5b:59:e3:1d:e2:34:07:96:be:2b:e9:27:
                    f4:2b:85:b8:24:c1:c6:ab:11:9e:14:b3:c7:8c:d2:
                    d9:70:d5:aa:1c:94:ff:d3:f9:1e:53:0b:80:1d:a1:
                    03:35:e8:a6:0f:94:d9:ce:7a:0c:9a:c1:62:99:54:
                    82:d5:68:1a:8e:d2:e6:64:dc:3f:44:53:80:87:f5:
                    cb:42:8e:ca:d2:70:71:70:f6:a4:99:ba:92:a4:d2:
                    a8:a6:2b:eb:02:0f:d6:ec:79:59:ea:b5:44:0c:54:
                    5c:b4:fc:52:d3:f8:d1:11:cc:a7:62:ce:5e:c8:c2:
                    b4:c8:84:00:7d:08:c5:93:b7:a9:4b:f8:8a:1b:b2:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:73:10:44:32:7C:E2:A1:35:90:2F:8F:77:C6:26:7A:4E:D5:2A:93
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e3:0f:36:1b:62:59:ae:35:ff:a5:ba:97:55:c6:5e:e7:bd:
         f4:97:a4:f3:5a:ba:7b:58:7c:e9:e9:4a:cd:dc:16:f0:b3:67:
         27:b6:9a:3e:39:0b:33:ad:de:31:08:51:24:33:a9:7f:be:9e:
         f0:0d:f8:4b:71:25:c8:c8:2e:da:8d:a6:5d:fe:b3:81:ba:6e:
         af:50:97:1d:be:eb:3a:30:01:12:15:69:1c:dd:22:4f:f5:5d:
         53:46:dd:48:7a:e0:37:78:7d:bd:83:ee:8e:68:09:23:33:5f:
         f2:82:61:6e:b0:c6:0f:e3:c7:94:cb:c2:d2:89:bc:f9:8e:28:
         7f:17:78:21:3d:75:3e:72:c4:70:f1:0a:fa:0b:bb:e5:1f:37:
         54:8a:cd:a2:60:65:0c:47:3f:49:13:06:e3:b9:2e:ce:32:ee:
         b1:71:aa:2d:c8:2b:f6:a6:01:ec:72:c9:9f:34:fe:35:09:40:
         84:62:84:f5:1c:32:54:11:b0:d7:10:46:3f:ad:e7:9e:4c:ca:
         3a:c0:53:11:d2:13:16:6a:9e:72:58:5b:da:63:c5:83:1d:39:
         86:f5:7f:9a:ed:27:e4:06:10:27:1e:c7:4b:8b:6a:08:3a:04:
         ed:e1:84:21:c9:d6:c4:ae:72:c6:1c:25:11:24:65:cc:68:f9:
         d5:74:f8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:35 2026 by rpki-client