Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File:                     G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier:          8yRXHcCnElKuZTjozrxmI2L/TPzJ97wSrhSOMq6ph1k=
Subject key identifier:   4F:A3:E8:5C:97:77:54:AE:8A:04:87:70:D0:CF:BD:0B:6E:1F:91:E1
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer:       /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number:          8E
Signing time:             Sun 05 Apr 2026 06:53:35 +0000
Manifest this update:     Sun 05 Apr 2026 06:53:35 +0000
Manifest next update:     Sun 12 Apr 2026 06:53:35 +0000
Files and hashes:         1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: aD35t+qKz5EATsBcmJodIRmf316ZhwQfGzQYiruEFG0=)
                          2: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: B/siaUA6CI2wK/uyB8by+8BX4ZeMJoKY29AWKojuWa8=)
                          3: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: eBU/BwClmiFg499xv0HW6a00bR/BPwa7zYSjtYkxkiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
                          rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
        Validity
            Not Before: Apr  5 06:53:35 2026 GMT
            Not After : Apr 12 06:53:35 2026 GMT
        Subject: CN=69d206ef-a891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:af:27:ad:6e:45:e3:86:c7:82:62:dd:6e:
                    b2:01:48:01:1a:d5:3f:a8:8c:42:eb:58:43:73:b0:
                    6c:c2:d4:9d:c8:7a:6d:1a:32:be:b0:da:ec:3f:f3:
                    59:f8:56:02:18:c9:8c:1b:ff:68:5a:63:82:fa:4e:
                    b9:5a:63:c8:90:b9:6b:4f:a4:9c:1d:2e:2b:d9:44:
                    8c:59:6b:eb:c6:24:25:8a:85:8f:45:e1:c5:f6:26:
                    9f:f7:f3:70:9d:d2:3f:62:e1:5e:06:3a:01:ae:6e:
                    96:f4:61:0a:6e:ab:c2:1a:35:82:6f:a7:68:ce:f3:
                    bd:c7:c8:9d:23:ad:01:f8:01:1a:55:0a:58:5b:46:
                    e0:15:ad:99:cc:86:54:80:88:53:7f:d5:96:6c:d4:
                    da:4d:73:8a:22:4c:4e:9e:0c:8f:f5:52:78:2a:02:
                    96:e3:27:27:41:3d:c7:46:08:2f:8e:ce:cc:a5:46:
                    28:7b:9f:99:a7:b4:63:67:a4:49:21:98:b8:7a:6a:
                    9c:1a:17:9a:74:f5:43:29:36:d3:96:ea:14:38:c8:
                    3a:73:fb:f1:df:11:dd:d0:ef:d7:dc:57:27:cf:52:
                    e9:79:e2:ff:c6:e8:3d:5d:b4:0e:82:28:3a:cd:9e:
                    13:b1:d3:bd:22:0c:91:5b:d1:0d:8a:30:66:0d:3b:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A3:E8:5C:97:77:54:AE:8A:04:87:70:D0:CF:BD:0B:6E:1F:91:E1
            X509v3 Authority Key Identifier:
                keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:35:17:2d:8d:e1:60:a6:66:51:70:df:8d:1d:d5:9d:a2:54:
         d2:3d:2b:36:38:ef:11:a1:8d:33:7b:3b:41:83:f5:37:0c:98:
         3d:b2:d0:b1:dd:06:2b:cb:6d:0a:2a:8b:d6:74:d1:43:d0:a1:
         19:c0:48:23:fd:fa:ec:bc:57:a8:72:05:93:e0:54:f7:8f:16:
         dd:fc:2b:6e:bd:a0:2e:de:3a:31:d7:e8:98:85:36:12:7e:16:
         ee:aa:76:85:d1:a9:22:70:4c:62:cc:80:1b:50:33:94:0e:d7:
         5e:b8:a9:93:f9:2f:94:f5:9c:ae:c8:ba:43:da:e0:ab:76:79:
         60:2d:04:ca:fb:9b:ef:f9:a4:96:15:3d:27:1a:86:b4:d2:18:
         88:fb:71:e6:5f:5f:aa:79:aa:6a:f2:cc:7f:8f:1a:f9:7e:93:
         1b:63:80:e2:9f:43:34:b5:5b:41:67:e3:11:6c:6f:58:38:7c:
         16:bf:d0:f0:79:96:83:10:59:59:6f:11:1f:75:c6:87:b3:95:
         9d:97:c6:02:25:9c:53:66:4c:1e:07:b8:b0:97:5e:78:47:8c:
         60:14:9c:ba:a2:10:e5:cd:1b:08:71:56:af:31:3d:b7:e9:68:
         3b:5b:18:b8:9b:a7:9e:c5:c5:11:bb:b2:20:c4:28:aa:18:53:
         9e:a4:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:08 2026 by rpki-client