Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
File:                     DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json)
Hash identifier:          U+Qmjc6oj2CKi2lj14BL3LxQ+pIJjp8qMHgf0hNFxkU=
Subject key identifier:   E2:B3:B1:69:08:01:BA:9E:A1:27:C0:0E:7D:FC:38:AF:FE:9C:C1:7B
Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
Certificate issuer:       /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
Manifest number:          01B1
Signing time:             Mon 27 Apr 2026 03:53:00 +0000
Manifest this update:     Mon 27 Apr 2026 03:53:00 +0000
Manifest next update:     Mon 04 May 2026 03:53:00 +0000
Files and hashes:         1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: +l/7cCXTAEsZFhVlNqEmGPuTg+/nZbNzGXpaXCVKvqw=)
                          2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: 6pEgldrr1YtYq2k54CPHu0agjPZ4ZtHP2ppniIf4WA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
                          rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 03:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
        Validity
            Not Before: Apr 27 03:53:00 2026 GMT
            Not After : May  4 03:53:00 2026 GMT
        Subject: CN=69eedd9c-1a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:41:6b:f1:e6:41:9c:37:4d:17:c7:9f:36:
                    90:ee:c1:0c:4f:82:e1:16:19:e6:a9:e8:54:6b:28:
                    70:75:1d:54:68:f7:63:23:f5:7b:be:7a:f9:f5:21:
                    b9:cd:6e:d8:42:f0:f1:ef:91:90:94:f4:f9:bc:04:
                    64:bd:96:56:af:5e:7a:5e:1e:4c:47:22:2f:0c:c9:
                    83:85:a2:bf:41:c4:74:f4:39:06:ad:a8:8f:16:78:
                    6a:ed:6f:bf:62:7a:f6:7a:32:ce:6f:88:f7:ee:c4:
                    20:3d:c7:cb:2e:60:a7:07:f2:0c:d1:e1:ad:50:8d:
                    3c:40:5d:9d:8a:07:8c:9a:57:81:70:27:6a:59:f9:
                    2b:ed:d0:76:58:6a:4b:25:a7:01:4c:4f:c3:f0:1c:
                    b1:29:4e:09:ca:d9:d5:5d:f8:c3:d5:d4:ac:13:86:
                    7b:d9:17:eb:c2:71:f3:c9:07:20:94:f3:28:c9:84:
                    68:e6:08:26:a4:9c:76:6a:0f:75:a7:49:28:09:b2:
                    72:b9:2d:c1:a9:cb:47:c8:6f:b6:8c:8f:45:1b:14:
                    69:4c:f7:5c:ac:8c:c3:b1:5d:ff:44:b7:a8:2d:39:
                    c1:8f:e0:b9:50:ad:3b:fd:74:af:bb:77:aa:5b:1c:
                    bf:48:69:5d:8e:70:60:e2:de:ab:8d:91:1f:cb:60:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B3:B1:69:08:01:BA:9E:A1:27:C0:0E:7D:FC:38:AF:FE:9C:C1:7B
            X509v3 Authority Key Identifier:
                keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:d7:ed:00:81:80:be:b2:47:14:80:85:30:6c:9b:a4:76:
         61:48:58:4f:80:f5:de:e1:5a:f6:fa:f7:a9:39:ed:70:98:19:
         86:fa:16:c7:72:66:11:9f:75:34:8c:76:8c:92:e3:ad:3e:53:
         68:a1:d6:d9:18:29:83:e2:72:bc:82:10:98:80:0f:28:01:d7:
         6e:b1:88:57:5b:66:40:12:a8:0a:90:9b:3a:7b:78:75:07:75:
         14:dd:d4:0d:a2:f1:74:9b:47:d1:b6:2f:43:7b:0a:d6:9c:00:
         aa:ba:db:f8:14:48:31:76:56:00:41:b2:af:07:4e:b9:d9:03:
         0b:fb:c3:97:c1:8b:45:dc:45:7f:41:3b:93:3a:d1:86:41:3e:
         84:22:f0:c5:66:63:bb:b3:ac:96:37:1f:6b:7b:21:02:58:c1:
         7c:07:a0:25:36:17:32:24:6a:09:1e:d3:6c:df:87:b9:b1:90:
         e7:5d:5b:43:d5:37:cd:5d:77:f0:44:35:b3:2b:95:2e:90:fe:
         3b:a4:51:01:3e:79:34:cb:de:88:8f:22:7d:ca:94:bc:db:70:
         85:f2:40:6e:94:eb:c9:0d:50:8c:c5:4f:c1:47:75:49:bf:b8:
         b3:37:f4:9e:18:f9:02:00:cc:e8:39:83:8d:70:f3:b5:65:73:
         84:59:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:59:16 2026 by rpki-client