Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
File:                     mVh7qcf_9rbFmelODc5H61a-au0.mft (raw, json)
Hash identifier:          XHwxW1IF53Qvvr/ohCJDgGSk4jWHy45ZTPwVbGGusYs=
Subject key identifier:   36:40:70:82:0F:2D:8F:2F:5C:B7:35:E0:7E:DE:FC:FB:07:85:BB:5C
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Certificate issuer:       /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial:       06C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
Manifest number:          06BD
Signing time:             Sat 04 Apr 2026 22:07:26 +0000
Manifest this update:     Sat 04 Apr 2026 22:07:26 +0000
Manifest next update:     Sat 11 Apr 2026 22:07:26 +0000
Files and hashes:         1: mVh7qcf_9rbFmelODc5H61a-au0.crl (hash: xucG9bQlMhhUGy/3b1XxVwCIuVMrfQ1I7NvnlLpuXtY=)
                          2: B9BE8D0659BE11EE8F460C79C4F9AE02.roa (hash: Alwr/H0eTxjeV8xmFk0xomTjCOAvQL65k2YFqe7uUFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
                          rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734 (0x6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B40, serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
        Validity
            Not Before: Apr  4 22:07:26 2026 GMT
            Not After : Apr 11 22:07:26 2026 GMT
        Subject: CN=69d18b9e-08b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:3c:2d:9b:b8:eb:1c:ef:cf:c9:8d:a4:b1:
                    98:c0:a5:0b:38:2b:eb:37:c1:56:de:8d:8a:21:30:
                    0b:2c:19:a1:b8:4e:6c:87:d7:40:67:bb:40:22:f3:
                    4e:30:3d:2e:8b:ea:67:03:fd:3f:d3:fd:46:40:f9:
                    7d:6c:a1:d2:9e:33:5c:6d:62:6d:2d:14:0d:eb:4a:
                    33:75:d0:6b:6b:72:63:cc:d1:d0:7f:91:32:1f:a8:
                    5d:b8:58:ee:3c:98:ae:a0:a0:7a:5e:ca:1d:9b:cf:
                    40:da:97:07:db:69:02:49:d0:b1:50:25:e1:58:15:
                    a8:09:4b:aa:22:bf:fe:7c:7b:89:fe:97:cf:9c:d7:
                    e5:4f:fc:21:81:94:31:c2:f4:a8:a2:d2:3d:bf:f6:
                    2e:59:d1:60:80:ca:39:bc:ce:9d:f6:16:c5:f8:a5:
                    f7:23:30:2b:1a:7a:35:b6:96:6d:9e:04:ae:9f:f1:
                    1b:d9:2f:db:c2:b6:ec:96:6f:99:ba:0e:96:51:ad:
                    03:dd:79:b0:7b:fd:b2:08:d3:8e:f0:6b:1e:c4:71:
                    45:b4:c4:1c:c3:32:f2:9d:bf:6b:d5:0d:c0:d4:6a:
                    e4:25:85:2c:04:d4:29:54:26:0d:ce:22:d7:7c:ed:
                    5c:8b:2e:b0:01:4d:66:15:63:8d:53:66:18:3b:19:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:40:70:82:0F:2D:8F:2F:5C:B7:35:E0:7E:DE:FC:FB:07:85:BB:5C
            X509v3 Authority Key Identifier:
                keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:34:52:6d:77:d4:2d:94:ed:bc:55:1b:f0:df:40:e1:00:c1:
         00:60:14:e0:b7:94:33:e6:fe:70:f7:a2:0a:4e:a8:7b:6e:1c:
         33:d9:f1:28:68:c3:90:59:cd:87:a5:12:c6:83:14:de:aa:7d:
         b3:72:7f:52:69:73:8e:56:65:91:8c:ba:54:c0:7d:24:57:49:
         a2:39:bb:d4:78:8d:dc:00:d0:3a:7f:e5:b8:3a:db:90:6d:fe:
         c3:f4:2c:b9:4f:1f:ca:30:00:74:a9:a9:d4:f2:38:5d:22:29:
         af:e7:7f:67:80:09:0e:c0:7d:89:47:63:4f:88:60:b4:48:89:
         cb:16:fd:98:9d:c9:bd:c0:6f:1b:f9:40:00:7a:0a:00:de:78:
         e1:d2:4f:f7:1e:61:47:e8:f6:aa:09:da:2b:a3:db:79:19:6c:
         a5:ca:31:df:6f:76:e0:70:02:56:f7:7d:4b:c8:7f:16:40:27:
         74:5d:25:57:fd:4c:63:c7:ff:d0:ab:d4:5a:1e:54:97:01:ee:
         91:dd:d6:95:86:ae:60:99:e9:ec:4e:cb:6d:d5:1b:d0:90:37:
         ee:59:36:6b:08:c6:c9:8e:ab:55:45:82:3b:a1:d3:d5:43:a9:
         3f:77:54:f8:39:3c:9f:e1:f7:57:58:a8:e6:7a:62:1b:fa:99:
         f5:14:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:31 2026 by rpki-client