Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
File:                     cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json)
Hash identifier:          vqAdFtTQ34pQYrdAqyi9gX3m32iOb5EfF3vDzGS8UHs=
Subject key identifier:   B9:B1:85:83:AA:DC:2B:22:5D:5A:48:19:EF:C7:54:00:7C:96:EF:CB
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Certificate issuer:       /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial:       11C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
Manifest number:          119C
Signing time:             Sat 04 Apr 2026 17:05:44 +0000
Manifest this update:     Sat 04 Apr 2026 17:05:44 +0000
Manifest next update:     Sat 11 Apr 2026 17:05:44 +0000
Files and hashes:         1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: UuiBCAFSU0HL+P3/HnLgWEmYv2OZty6zqUydDgeir/I=)
                          2: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=)
                          3: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: OaAKfIcON2XRzyks5YJKaHnYYgiadPipJMC0EisFwRU=)
                          4: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: G1btmWmKU5YH5gEQg9B+VEbXtSEo140Wb5xK6RtnMeY=)
                          5: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: PA2mkLdDXnNHB1sn/98JmRqRd0SL8RFnOSlQl5U7aqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
                          rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4545 (0x11c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
        Validity
            Not Before: Apr  4 17:05:44 2026 GMT
            Not After : Apr 11 17:05:44 2026 GMT
        Subject: CN=69d144e8-b641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:12:f6:24:02:53:08:3d:83:b3:86:15:a3:
                    50:86:f4:db:12:b2:b3:4b:95:a4:df:31:c8:28:40:
                    d9:0c:65:73:d1:24:15:52:c5:3d:ad:48:54:f3:f2:
                    c2:db:65:f9:8b:ca:01:2a:ab:f8:93:99:a0:78:e3:
                    cb:e5:29:34:27:55:7d:91:fc:3e:67:a5:d2:14:3b:
                    38:b8:a2:7c:ac:84:a6:66:66:83:fb:4d:a7:21:6e:
                    08:a0:96:8d:2e:11:2e:ea:eb:4c:4b:bd:8d:65:65:
                    e5:59:82:9d:89:b1:82:fa:8e:9d:b4:f5:2b:e1:ac:
                    3a:5a:38:76:e8:b7:4e:5a:4f:49:26:43:53:d2:c9:
                    7b:a2:65:5c:44:9d:a1:ac:bb:bc:ad:34:fb:0c:90:
                    0d:e4:3a:e3:2f:a8:a0:73:32:4a:51:b0:3a:a5:45:
                    3b:62:97:cb:24:72:5a:5a:b7:bd:fa:02:63:f7:16:
                    0b:7d:f0:e9:07:3a:54:81:84:a7:0d:e1:be:b2:5a:
                    79:21:62:fb:40:67:20:51:ab:49:87:d3:77:00:3f:
                    ae:4b:0f:2f:f0:84:de:04:91:7e:12:41:94:3a:3a:
                    fe:4e:07:49:ee:eb:92:01:97:24:a9:7e:c6:d4:b3:
                    eb:a1:2c:3e:3c:ab:43:d1:ed:de:13:22:d1:cb:d1:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B1:85:83:AA:DC:2B:22:5D:5A:48:19:EF:C7:54:00:7C:96:EF:CB
            X509v3 Authority Key Identifier:
                keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:91:ae:3b:77:00:95:35:42:ec:61:f0:8c:bf:f8:36:36:b7:
         2d:62:f2:82:7e:bc:1a:b8:5a:e8:ff:b4:21:9d:96:fe:da:38:
         4a:b8:ee:67:9d:2c:43:f5:83:69:02:63:01:67:35:d0:16:1f:
         c1:84:9b:b9:df:32:dd:d6:51:4c:c1:99:34:c3:2a:07:2e:b9:
         bb:f5:db:00:78:83:87:a8:a7:8d:f3:9c:3f:df:a9:fb:09:ab:
         16:86:88:26:2a:82:5f:86:c1:6b:58:f5:31:c8:34:ec:fb:16:
         7b:5e:3f:97:24:b7:35:ce:45:f5:1e:49:c6:20:7f:ad:39:c0:
         b7:53:ce:5d:40:cd:3a:f1:a1:21:c6:59:e0:bb:47:51:b6:cd:
         d5:d3:69:d4:70:3b:76:58:31:de:ff:80:b4:05:32:e6:64:5f:
         71:ab:dd:4e:71:68:0c:a6:66:dd:7f:28:0d:50:ab:df:b7:d9:
         9e:3e:ce:73:96:9f:83:cc:12:14:c6:8a:c5:44:03:b3:1b:c5:
         12:3a:cf:7b:c8:4e:2d:93:87:81:4c:3c:67:19:9f:e3:3f:08:
         a2:af:5c:7a:e2:84:42:7a:3a:4c:8a:7f:2a:ad:8f:60:b5:9f:
         d0:d4:62:85:0f:80:fe:48:12:13:7e:13:58:13:15:97:b4:cc:
         1e:f7:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:24 2026 by rpki-client