Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File:                     ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier:          tflzlDMWDLi/JNjfBfjZ+7qAereamJ6UoB6Qd8o1vhE=
Subject key identifier:   53:56:7A:EA:38:1F:3C:83:B7:CA:29:88:D7:82:35:A2:C2:44:02:F6
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer:       /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial:       02E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number:          02D7
Signing time:             Sun 05 Apr 2026 01:07:56 +0000
Manifest this update:     Sun 05 Apr 2026 01:07:55 +0000
Manifest next update:     Sun 12 Apr 2026 01:07:55 +0000
Files and hashes:         1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: DU+eG/6q6qJSfSmX6+SHp+cTbKaWllzG3g+x6XK6R9I=)
                          2: 77BA366C2D1A11F1A751EB31B4833773.roa (hash: p/66n2AFG6wI5+n7ZXbM6uycgVve50x9bVyNhh4jIvY=)
                          3: 89BBD5642D1A11F197364435B4833773.roa (hash: mhRUcRBlgDpdRN3yUVHe2zfzqzBRrJRcQtBUfg0jwmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
                          rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
        Validity
            Not Before: Apr  5 01:07:55 2026 GMT
            Not After : Apr 12 01:07:55 2026 GMT
        Subject: CN=69d1b5ec-8c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:fd:61:a4:55:96:3d:a5:26:22:83:41:ba:
                    c6:2b:72:6f:78:47:7b:fa:de:8c:c7:d2:d3:09:2a:
                    8f:12:cf:d8:58:5c:e3:a3:5d:0b:5d:19:13:4a:8a:
                    ad:a8:f0:16:5a:8e:91:77:a9:45:e0:51:69:a1:61:
                    43:40:e1:6e:6a:f0:4a:d3:7c:fc:06:8e:42:26:ec:
                    54:39:d9:37:f1:23:74:10:d5:38:37:dd:d2:f1:19:
                    0d:1a:d6:ac:f1:76:c7:fe:8e:d6:99:2c:3f:f8:01:
                    e0:59:c6:0a:20:05:26:2d:9b:d9:5a:c3:3d:61:f0:
                    6e:a5:4e:44:e6:4e:2b:d1:0e:a9:48:0b:8d:b6:8a:
                    64:df:00:a9:97:79:f7:7a:3e:20:0e:87:52:d1:36:
                    c2:85:b4:57:dc:dc:a6:48:3a:26:f8:f2:85:97:08:
                    c5:5d:8e:87:4c:0e:5c:db:f4:a5:56:28:8e:81:57:
                    d8:dd:ea:95:d8:4b:be:03:1e:6b:59:d2:1b:28:4a:
                    e6:74:77:78:49:30:a7:c7:92:2c:7b:7d:eb:69:94:
                    f0:03:aa:c1:15:7b:50:4f:a7:96:e3:06:ab:bf:b6:
                    fa:ef:3b:01:d8:94:15:47:5a:63:60:16:b0:3d:f7:
                    ee:08:dc:e8:dd:40:e3:40:42:ab:6f:21:70:b3:a1:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:56:7A:EA:38:1F:3C:83:B7:CA:29:88:D7:82:35:A2:C2:44:02:F6
            X509v3 Authority Key Identifier:
                keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:c4:2b:3d:44:a0:5a:63:c5:5a:dd:27:84:7d:1b:fe:0b:
         f0:dd:5d:35:95:a5:8e:4b:de:9b:3a:5f:cf:e2:83:af:2b:23:
         ac:5a:45:c7:1a:7a:f8:89:cd:58:bc:25:09:bd:d7:91:37:b3:
         80:29:7e:38:78:d2:e8:50:45:b7:0c:e3:8c:d3:52:ec:d9:ac:
         cb:04:b0:e9:ef:41:24:26:4a:1e:a5:f3:96:d4:32:70:d6:ba:
         64:67:2d:43:67:29:4e:98:bf:93:fc:98:54:aa:5d:cc:17:22:
         59:ff:75:93:6a:16:65:b5:3f:db:78:6d:87:89:e7:ce:ad:89:
         46:a2:a4:43:34:70:09:e5:35:bd:15:b6:93:f3:c4:e9:bf:e4:
         b8:8a:17:7f:51:0a:f8:a3:21:33:b1:ce:7a:27:d7:73:b7:bf:
         c4:b2:ce:f4:3b:c5:11:e9:bc:b8:79:8e:36:ad:6d:d6:b2:06:
         a1:31:dd:2e:98:ad:bf:d8:11:64:68:25:a3:be:bc:94:aa:07:
         77:4a:4a:b8:11:3e:d6:9f:93:4f:12:9c:6f:06:ca:07:7b:11:
         c0:03:0c:50:b3:c5:ad:ee:ba:79:60:2f:84:50:1e:56:cc:33:
         69:84:a9:3c:63:84:73:9b:ee:e0:9a:73:ba:61:2c:63:d5:79:
         32:90:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:32 2026 by rpki-client