Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
File:                     cFeff18bId_J3mZ8azwh8W-H1XI.mft (raw, json)
Hash identifier:          q4Z0U2rjaYmUX4iUcYvovT/F/m6ReOcq5QWlY44jHLo=
Subject key identifier:   6C:4A:1F:01:07:F1:9C:3C:CD:99:10:E0:A2:9B:5E:76:F8:21:0A:F0
Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
Certificate issuer:       /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Certificate serial:       0CE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
Manifest number:          0CD2
Signing time:             Sat 04 Apr 2026 18:14:06 +0000
Manifest this update:     Sat 04 Apr 2026 18:14:06 +0000
Manifest next update:     Sat 11 Apr 2026 18:14:06 +0000
Files and hashes:         1: cFeff18bId_J3mZ8azwh8W-H1XI.crl (hash: OFjVqlWar7Tu8t+0MQha7u3d974hj+RUAKIEyolq5w0=)
                          2: DEABC3F619C411EFA1A8677DC4F9AE02.roa (hash: 8tkkl6lhiYhqYdLO3UVOSM4D9OeTsXNmgBLsQxqUjjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl
                          rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136655, serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
        Validity
            Not Before: Apr  4 18:14:06 2026 GMT
            Not After : Apr 11 18:14:06 2026 GMT
        Subject: CN=69d154ee-0629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:d6:5b:56:e2:b7:54:f5:91:f3:de:db:00:
                    ec:f7:9f:a9:6e:7c:dc:c4:d6:40:f0:40:8e:b8:e9:
                    f0:ed:d3:73:f4:20:e0:4c:f4:5f:2c:0f:81:9b:0b:
                    d8:6d:e9:37:5a:81:83:3f:b0:5b:8a:6c:36:47:58:
                    f7:cf:94:cb:dc:33:b4:2a:1d:4b:78:37:3f:21:df:
                    4c:00:82:89:53:32:5d:e1:f0:f3:e9:4c:a1:eb:45:
                    3b:1f:13:94:15:05:90:d9:1e:8b:c1:4f:00:b1:3e:
                    38:b1:4a:58:fe:d8:8f:7a:61:5d:36:39:0d:1c:9c:
                    85:48:7b:76:03:b8:e7:27:b6:be:6e:78:0e:ad:43:
                    87:69:aa:bf:e9:79:87:67:d8:b5:61:79:9a:97:2c:
                    fa:ae:1a:a3:06:6d:01:1d:7b:0d:95:67:a6:a0:da:
                    b3:c7:51:5b:8e:ca:ce:df:6d:f2:a0:00:cd:9d:0a:
                    02:f7:80:e3:45:22:a5:ea:0b:1a:ef:d5:0b:a5:89:
                    cf:00:34:cd:1b:a0:8b:a7:ec:32:5d:b3:2e:e7:25:
                    ec:ec:a4:02:68:ce:88:36:a4:88:1a:da:19:07:55:
                    c4:e7:e6:e8:5d:c9:67:d3:1e:41:a1:3c:5f:19:66:
                    e4:d1:5e:64:1d:6b:7b:d9:6e:ba:ff:46:7d:78:ee:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:1F:01:07:F1:9C:3C:CD:99:10:E0:A2:9B:5E:76:F8:21:0A:F0
            X509v3 Authority Key Identifier:
                keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ec:56:e6:e4:95:bf:24:92:21:9a:a3:01:8f:10:32:e8:9f:
         50:79:ad:73:bf:67:c3:86:3d:e5:61:36:a1:05:e0:1f:29:40:
         a7:6e:23:e6:77:4f:08:9b:e4:b1:db:49:91:26:16:7c:7e:c4:
         2c:dd:72:38:cc:30:01:3b:42:93:b6:1f:4f:07:7e:f4:11:97:
         20:d0:f5:0f:9a:dc:bb:a5:f9:9e:39:51:51:b6:cd:ac:23:e9:
         9a:8e:32:f6:5c:19:1a:c6:3a:10:20:e9:bc:a0:55:cd:de:83:
         e3:54:a0:97:e6:13:85:c3:a4:97:c5:5f:e2:7b:ba:dd:6c:8a:
         98:17:1e:72:f1:bd:69:6d:40:e4:a9:7c:58:02:6a:8e:4c:0e:
         5f:3e:d0:5f:7a:e8:74:0b:6e:c6:e7:cf:14:ba:f2:7e:1d:d8:
         04:a2:e9:ae:03:83:11:c1:b3:57:bd:ce:cd:65:41:71:40:85:
         4f:c3:89:0a:40:52:59:ee:5d:1e:67:46:bf:a3:38:1f:33:b5:
         ba:2e:d1:d6:90:1d:d1:0e:a6:9a:11:bb:c8:45:30:7b:fd:be:
         fb:41:fa:76:33:3f:1b:13:1d:6f:0e:3f:ad:bf:bf:01:6c:29:
         44:e4:c0:6c:6b:af:1a:8c:f4:f9:55:66:5b:d4:b6:f4:99:c3:
         73:81:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:23 2026 by rpki-client