Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
File:                     iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json)
Hash identifier:          7187tk+ZQt9gRBqkgpCaaOozb+UYZXdO5jF3982VmBo=
Subject key identifier:   9F:DF:98:71:A8:BD:00:63:A4:B7:4D:D4:46:72:0C:CA:F8:8B:9B:E7
Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
Certificate issuer:       /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
Certificate serial:       06F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
Manifest number:          06ED
Signing time:             Sat 04 Apr 2026 21:55:58 +0000
Manifest this update:     Sat 04 Apr 2026 21:55:58 +0000
Manifest next update:     Sat 11 Apr 2026 21:55:58 +0000
Files and hashes:         1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: MxVPK0fMSYuuoxqtIrUS4oZs6GlxfOFzzF0mPxVbWTc=)
                          2: 6339493A516311ED90F04711C4F9AE02.roa (hash: IBX1v2b0T0V0Ud5osnlgdtt3fPLXZpBblbdSLyRReN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl
                          rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
        Validity
            Not Before: Apr  4 21:55:58 2026 GMT
            Not After : Apr 11 21:55:58 2026 GMT
        Subject: CN=69d188ee-d1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:fa:ce:d2:54:1a:4e:7e:2a:00:85:e3:8c:
                    1d:08:bf:d3:00:10:24:95:22:73:12:a4:63:17:53:
                    87:47:2b:e3:5a:7c:38:e2:ab:2a:34:3e:cd:35:b5:
                    9c:be:ce:96:3e:20:1a:17:25:34:ad:a6:fb:45:a8:
                    8e:a9:23:dd:41:97:b2:3e:10:49:cb:2f:25:35:6b:
                    59:48:6c:d3:a6:c4:fc:22:84:8b:d1:4d:45:3b:74:
                    ed:27:d6:6a:ab:f1:db:8f:05:fd:8c:cf:82:9c:1f:
                    5b:63:0a:7e:a8:31:91:26:b7:64:c8:fd:87:fc:94:
                    b5:04:d1:7d:0a:f5:fc:5a:0d:72:c4:7e:09:61:4c:
                    dc:4c:21:b7:62:5f:65:b2:96:cb:c5:77:41:37:f1:
                    b0:99:90:70:bd:44:cf:77:2b:50:80:d0:04:41:96:
                    c5:1e:71:62:d6:ad:33:43:ea:fc:98:fb:49:6c:af:
                    3e:57:a7:83:bb:37:93:26:6b:fc:70:b9:98:76:50:
                    73:ab:ad:52:8a:6a:5b:92:04:53:c9:7d:57:7a:e7:
                    ac:52:ed:c6:1e:c1:ec:8b:94:58:78:51:02:59:ce:
                    2e:4e:a3:87:b1:a9:81:5b:17:ea:43:dc:3d:89:b1:
                    e6:3e:d4:05:79:78:e0:1e:5b:32:7d:d7:b0:b5:31:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DF:98:71:A8:BD:00:63:A4:B7:4D:D4:46:72:0C:CA:F8:8B:9B:E7
            X509v3 Authority Key Identifier:
                keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:12:96:de:fd:8d:bc:93:ff:87:a4:6f:d3:72:51:09:96:71:
         4f:6a:2e:af:73:2e:71:da:b2:62:e6:70:6e:f3:98:e4:7b:18:
         89:6e:49:f5:f1:00:01:fc:d2:a3:f5:aa:e8:ea:43:2b:06:0a:
         a8:dd:2e:e8:53:60:d0:40:f8:91:46:e2:14:53:19:7f:8a:ce:
         b3:2c:56:ae:03:24:3d:69:eb:e4:06:ec:01:cf:d3:b6:ef:33:
         d0:a9:1d:b5:69:3c:8b:59:5b:fb:46:07:5e:04:db:db:08:40:
         57:a5:24:b8:99:12:2d:8c:cd:c1:62:9d:d6:ba:36:79:73:5a:
         5b:80:df:93:84:08:7e:a3:8e:a1:a6:39:0d:d6:45:8b:a9:64:
         22:f7:4d:37:84:25:72:5e:62:77:e2:cb:7e:cf:32:d5:c4:86:
         ef:09:19:20:f4:ef:5b:e5:6d:8b:1c:16:14:9f:4e:9c:96:53:
         19:b5:0f:97:e1:d5:e5:b8:45:c7:44:64:42:06:b8:7d:1f:87:
         14:58:55:22:76:74:67:e0:6e:8b:ba:44:7c:61:c8:8d:a4:ed:
         f9:bb:74:05:b9:97:c7:ce:25:49:f2:dd:10:41:01:3e:8d:6a:
         ad:8d:4c:c7:80:ca:f8:63:80:f4:d8:ae:1a:4d:f6:3c:a7:e2:
         d4:c3:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:37:05 2026 by rpki-client