Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File:                     np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier:          Rds1E2NrNB8ypF9N+4AhJY4kWcZYBTZ0GJyzOuDA5tY=
Subject key identifier:   96:19:F4:87:5C:F5:4D:74:99:00:A6:13:54:07:91:21:D0:39:BB:58
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       08DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number:          08CC
Signing time:             Sat 04 Apr 2026 20:12:48 +0000
Manifest this update:     Sat 04 Apr 2026 20:12:48 +0000
Manifest next update:     Sat 11 Apr 2026 20:12:48 +0000
Files and hashes:         1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: e0QhWBYOR9s/aXj+zZJB9Pk3gSmNGL2omjcXbL/Xvio=)
                          2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: q89Jg/7hPlysCgYbH3zg0CvpgeLJQkUN21WMNq0ChPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
                          rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2270 (0x8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: Apr  4 20:12:48 2026 GMT
            Not After : Apr 11 20:12:48 2026 GMT
        Subject: CN=69d170c0-1261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:65:fa:e1:b9:f9:8c:2d:88:9f:77:74:1e:
                    cc:55:8e:b7:76:3f:8c:82:dd:91:67:0e:27:5c:6f:
                    19:2b:56:b4:1b:d8:28:fc:6b:7d:5d:30:c9:84:98:
                    87:47:0a:f4:e8:f9:3d:bb:1a:5d:d1:e5:a2:84:e3:
                    77:c7:c0:44:66:a5:00:d2:c4:98:40:5b:da:c5:44:
                    33:1b:e3:11:12:bf:e5:f0:ab:f6:ef:43:d2:9a:5d:
                    4c:4a:57:23:f8:6e:ac:c4:2b:16:98:33:97:ee:75:
                    77:1f:c9:67:3e:d6:c7:cb:9d:24:5e:40:94:55:7c:
                    73:24:5f:80:3a:27:8e:82:c2:f2:07:be:46:72:f6:
                    5b:6a:00:2f:7c:21:b3:ac:32:6a:7b:a9:0c:be:d6:
                    b0:4f:c5:00:fd:c5:e9:f0:a9:5e:b6:75:a0:90:38:
                    e4:78:2d:df:66:77:ce:d9:94:16:07:31:61:d9:7a:
                    41:01:c2:47:a8:7f:b9:e4:a5:fc:66:e2:a3:0e:f1:
                    54:25:59:fe:90:66:b5:16:c3:15:75:2b:52:09:fc:
                    18:b3:eb:42:c3:0b:75:e9:5c:ba:81:2a:80:28:dd:
                    9b:e1:f5:b5:48:c2:a9:fc:a4:f1:6c:33:5a:a4:c8:
                    32:58:5c:ea:ef:ae:6e:a1:19:8f:92:65:b7:68:86:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:F4:87:5C:F5:4D:74:99:00:A6:13:54:07:91:21:D0:39:BB:58
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:54:67:fe:55:71:eb:3a:c3:38:70:33:c3:30:69:c1:9b:56:
         bb:66:e0:d7:25:33:64:7f:66:fc:af:f9:b8:75:f8:ac:91:67:
         47:de:ed:39:9d:be:51:e4:d7:69:9b:09:22:33:13:84:bf:5d:
         a0:d4:9d:ec:6b:0e:64:6e:2b:d0:9c:97:89:f5:e7:0f:b1:4a:
         73:13:ad:2a:28:13:c2:fa:61:e5:8d:3c:31:b1:eb:ca:15:44:
         d0:d5:a0:17:e3:4d:86:11:2c:a6:00:74:d3:09:68:53:83:86:
         0b:e5:df:3a:0d:28:0e:5b:b3:20:0c:f2:4e:e9:ab:fd:f0:53:
         5b:bf:90:ad:70:36:b4:33:7d:0d:16:4e:88:05:dd:71:73:5e:
         89:37:ad:a0:65:54:e7:ad:40:ee:b4:35:a3:52:8b:04:06:86:
         a1:db:07:44:14:b9:b2:bd:03:60:bb:54:fa:d3:b1:f7:33:1b:
         98:0e:7e:a5:69:cf:eb:4b:91:d7:fc:61:f9:69:24:c8:00:e8:
         c5:4e:c8:9f:d5:c7:f0:6c:42:b7:25:2b:1f:57:c6:74:8d:61:
         d5:16:24:68:00:5b:0e:41:de:43:4a:ea:dc:81:82:8c:6d:31:
         3d:70:a5:2f:4d:56:c2:01:52:97:9b:4a:33:d0:6e:88:b8:8e:
         d7:3e:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:46 2026 by rpki-client