Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
File:                     9pdbCtxHKKQNClkNM23U-ro5DwA.mft (raw, json)
Hash identifier:          Cn9JbJzhvLEthyzw1mrjGujVYt1f2yx0kNpIkuidWIM=
Subject key identifier:   F5:97:EA:92:58:81:98:5D:18:E3:67:9C:E9:71:77:FE:DD:F5:E9:1F
Authority key identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00
Certificate issuer:       /CN=A913FA2D/serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
Manifest number:          43
Signing time:             Sun 05 Apr 2026 07:47:49 +0000
Manifest this update:     Sun 05 Apr 2026 07:47:48 +0000
Manifest next update:     Sun 12 Apr 2026 07:47:48 +0000
Files and hashes:         1: 9pdbCtxHKKQNClkNM23U-ro5DwA.crl (hash: A+uG34tyFvkgCzO6AwXmkjnKwtF/ZXpkNJiaEPYvwek=)
                          2: F82BF6A8D3FD11F08BA98C7BC4F9AE02.roa (hash: 6WkyvNNnzEKbhZLPxsCnSzPE8ILtaJ60SG7+lHKUE78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl
                          rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA2D, serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
        Validity
            Not Before: Apr  5 07:47:48 2026 GMT
            Not After : Apr 12 07:47:48 2026 GMT
        Subject: CN=69d213a4-d720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:15:0a:2c:f8:ec:a2:d0:9c:6f:27:15:cd:
                    15:a7:a9:ae:b5:f9:00:2e:e7:fd:ca:3b:4f:d3:73:
                    73:2a:be:c0:e1:98:64:21:2e:8c:ae:3e:e4:d7:f5:
                    cc:1f:37:b9:83:d3:de:6e:2f:fa:54:b8:e9:d7:f2:
                    33:d5:18:e9:c0:1a:ba:46:40:49:70:5d:eb:32:22:
                    00:48:56:56:6a:de:5f:ac:9e:f2:ee:28:3f:1e:11:
                    9d:8e:db:08:49:d7:15:86:2d:41:52:b4:e6:67:a5:
                    e4:8d:c0:16:78:02:66:1d:11:0a:06:fe:1c:b4:4c:
                    b5:8e:84:3b:ed:af:c6:7a:55:1d:20:bf:4b:51:d6:
                    03:bd:3b:f7:80:21:59:08:70:c4:f2:72:46:5a:b1:
                    a5:92:86:ca:4e:76:29:9a:e9:21:12:c2:02:22:fa:
                    86:3e:5e:e0:99:48:25:86:c6:ff:6b:f8:73:9e:3c:
                    a2:86:57:1d:56:c9:e9:2f:f5:b2:e5:d9:bd:54:67:
                    de:0f:5f:5a:fa:7d:b0:bc:f5:d8:35:7e:65:d9:21:
                    ec:a4:77:ad:15:65:0e:1f:70:2c:9c:b9:47:22:2f:
                    de:0e:d8:29:98:6b:8d:3b:b2:a3:a5:73:34:c5:65:
                    1e:ef:42:96:1d:df:59:d0:cc:dc:72:39:02:2c:42:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:EA:92:58:81:98:5D:18:E3:67:9C:E9:71:77:FE:DD:F5:E9:1F
            X509v3 Authority Key Identifier:
                keyid:F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:3f:47:5d:b8:d9:89:e5:7e:6e:9b:b2:19:7c:22:94:c5:ca:
         0a:f4:b1:45:a2:c3:c6:ea:8f:9b:f0:ac:14:0d:6b:3a:7f:7d:
         ab:de:b7:30:71:2b:a3:6d:ab:15:1a:13:4a:40:46:91:bc:db:
         93:31:f9:9a:99:e9:1b:0b:93:38:bd:38:93:91:c2:38:49:5a:
         c8:09:9a:f2:c0:b5:fb:c2:54:2c:4d:8a:e6:fb:69:9c:f7:c6:
         33:03:de:5b:ee:c0:e7:54:96:8b:73:16:f7:c8:a8:c1:70:34:
         22:32:3d:9a:76:f4:c3:71:51:5c:4b:6d:6f:00:a5:f3:3a:5a:
         30:ec:8b:94:99:90:92:e6:c3:1d:73:f4:d8:6f:a5:84:8c:49:
         e9:f4:f6:56:fc:2d:b6:82:04:c0:a3:29:d0:dc:19:ec:82:66:
         ef:7a:28:e4:95:e5:d8:94:63:77:eb:7e:69:81:df:ce:83:9d:
         90:4a:db:1e:2a:9c:33:9f:ed:65:8a:b2:29:7f:03:99:de:20:
         1c:83:d6:87:01:3c:2b:5c:5a:a8:5c:80:1a:c6:90:7b:13:bd:
         00:52:19:5e:de:41:02:d8:e3:8e:65:b6:9f:55:ea:f3:95:f3:
         4d:3f:03:88:b5:12:6b:5a:1f:3c:f2:72:ee:5a:ce:0e:48:74:
         84:62:41:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:26:31 2026 by rpki-client