Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
File:                     cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json)
Hash identifier:          NRV31ZwGWW5WbgV9JK+KmQ+SBHJdbid2MlpWrJYhWxQ=
Subject key identifier:   07:68:B8:3D:E5:B2:17:9E:B0:E0:17:EA:C4:15:24:EF:D9:60:26:86
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Certificate issuer:       /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial:       11B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
Manifest number:          11A8
Signing time:             Sat 04 Apr 2026 17:05:17 +0000
Manifest this update:     Sat 04 Apr 2026 17:05:17 +0000
Manifest next update:     Sat 11 Apr 2026 17:05:17 +0000
Files and hashes:         1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: mV6lKxO7ecz3e04xK4PhAotRTvmcd92/UARdHn1wr6E=)
                          2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: STeyXyMTSYyvRcahtnut8o6/l8sNSI++3Wnn1BDQDwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
                          rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4532 (0x11b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
        Validity
            Not Before: Apr  4 17:05:17 2026 GMT
            Not After : Apr 11 17:05:17 2026 GMT
        Subject: CN=69d144cd-0e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:c6:c6:88:50:26:2f:ae:f1:10:e4:a4:c4:
                    94:02:7c:57:87:8a:ba:6f:a7:26:56:25:d5:7e:00:
                    8c:e4:17:12:fa:f1:8b:7e:a2:58:ef:60:93:46:bc:
                    5f:2e:78:f8:6c:16:79:24:5e:0a:0b:c7:8f:97:cf:
                    21:72:d8:4a:57:cf:46:41:a0:9b:e7:1b:04:5c:64:
                    8e:23:0d:bb:d3:a5:cd:44:48:72:4e:56:d1:4d:a7:
                    3b:a3:f1:0c:df:8a:c3:1a:9b:ad:b9:58:49:d6:2b:
                    1e:76:36:ca:07:cc:48:38:d1:7d:b1:e3:18:93:22:
                    01:55:3b:58:c9:2b:3e:c1:94:bd:18:ad:12:c5:74:
                    19:90:a3:f9:e7:d2:70:64:41:20:12:43:3a:e3:7a:
                    1b:eb:97:ee:a7:2e:43:bc:f3:40:8d:54:86:99:ab:
                    d6:60:11:86:dc:5f:14:c6:8d:64:65:30:17:25:e5:
                    d7:07:4f:b9:c2:17:b8:e9:e0:d1:fc:0f:32:5d:b4:
                    b0:60:0f:3e:7a:d9:b4:7d:ec:90:db:ee:5d:46:fd:
                    5c:81:8e:d1:1f:35:a1:7b:87:b0:11:30:46:3d:0e:
                    1f:06:73:89:c7:bc:39:39:81:ac:f8:1b:99:b3:a7:
                    c9:b8:f1:a8:e5:52:dd:2c:bb:2c:88:0d:9b:98:28:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:68:B8:3D:E5:B2:17:9E:B0:E0:17:EA:C4:15:24:EF:D9:60:26:86
            X509v3 Authority Key Identifier:
                keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:af:b1:66:ce:45:4e:0c:a2:ba:25:7a:c0:e6:66:e7:69:1d:
         4f:12:bc:4c:f8:0e:9c:c5:03:51:1b:3d:81:0a:d8:dc:98:26:
         af:28:29:3c:45:39:82:ff:92:43:d6:c3:b9:7d:97:64:d1:c6:
         34:9e:e6:19:07:0e:85:63:42:08:61:a4:d8:43:87:fa:4d:37:
         25:e5:46:a6:69:fa:7a:3b:ed:0e:41:5c:0a:a7:7a:d0:82:77:
         2a:fc:5d:25:15:e8:d2:85:8f:16:d8:a9:12:e1:2b:d3:6a:a2:
         09:dc:5a:ca:bb:38:2f:06:20:cd:31:ae:e5:d4:e0:87:24:10:
         5a:51:00:0a:3a:2e:a8:2b:cc:5d:5e:bd:bf:7d:0f:17:88:13:
         e2:80:54:9b:27:9e:f7:74:76:c8:c8:be:6f:72:7d:42:93:ae:
         ac:50:cf:37:8e:a8:b7:92:20:1f:24:a3:a6:5c:35:51:82:cc:
         0b:27:52:4a:4b:3d:27:80:af:05:f6:4c:e2:88:71:32:8e:95:
         ed:7f:23:b6:55:e5:48:fe:68:9c:e6:22:6b:17:39:cf:e0:78:
         a9:b5:af:2b:46:40:b1:d6:12:b7:35:e1:06:8b:70:94:51:67:
         56:b3:b0:57:40:fe:e0:0f:97:21:a7:7d:bb:a7:13:f1:7a:30:
         5c:28:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:03 2026 by rpki-client