Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File:                     E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier:          fpHkp5wDO3sHV1molzt252aWR6jfhZlkzMlxJeKHaDM=
Subject key identifier:   6C:71:F2:E7:FF:10:2B:6A:E5:7D:4D:A5:CB:DE:6A:94:8A:A3:A9:9E
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer:       /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number:          0191
Signing time:             Sun 05 Apr 2026 03:52:43 +0000
Manifest this update:     Sun 05 Apr 2026 03:52:43 +0000
Manifest next update:     Sun 12 Apr 2026 03:52:43 +0000
Files and hashes:         1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: 2K/7zPv5NBrTrfGFtMml5y+HwUS49nSvhzNRNUvKk6w=)
                          2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
                          3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
        Validity
            Not Before: Apr  5 03:52:43 2026 GMT
            Not After : Apr 12 03:52:43 2026 GMT
        Subject: CN=69d1dc8b-03dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:69:3c:d4:99:b3:96:a2:d2:7e:e9:1e:25:
                    8d:f1:76:1d:9a:47:37:f0:d8:aa:64:54:dc:2c:f6:
                    7b:56:c8:21:8b:ec:35:0e:04:e3:73:f7:58:cc:36:
                    27:61:61:a0:d1:7e:34:3e:cb:c5:ed:16:54:61:df:
                    28:b0:61:97:41:92:29:54:70:41:f0:0b:14:54:23:
                    e6:fb:f9:45:0f:1a:77:a5:b7:f8:4b:28:48:ab:e4:
                    3d:8f:70:4f:1a:9c:1b:a0:7e:d8:84:ca:a9:1e:0a:
                    14:cc:17:41:92:e7:0a:22:f1:e9:4e:65:cb:33:4d:
                    1e:c6:65:c9:35:d4:91:28:82:7a:3b:54:76:6b:a2:
                    a2:ae:24:22:24:d3:10:2a:62:bc:45:e2:e8:97:18:
                    83:a5:46:00:a3:4b:fa:68:e6:80:40:56:90:cb:01:
                    ce:a8:ab:fe:4f:83:6a:79:27:70:7d:21:d5:0f:74:
                    48:3b:1f:df:d1:66:59:7d:6a:d2:c3:b9:5c:bf:d4:
                    b4:5d:79:d9:ef:d0:0a:62:92:30:98:08:18:3b:30:
                    08:72:18:ec:6d:75:7c:44:48:0d:cb:b4:6f:12:70:
                    a8:1c:5d:fa:ed:c1:dd:56:f1:d7:75:cd:e4:47:87:
                    f5:72:42:45:f4:3b:4c:b5:74:05:87:a7:2f:c9:21:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:71:F2:E7:FF:10:2B:6A:E5:7D:4D:A5:CB:DE:6A:94:8A:A3:A9:9E
            X509v3 Authority Key Identifier:
                keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:e2:98:26:b0:1f:cf:9f:de:de:d3:db:44:89:f8:b4:89:
         77:da:97:01:85:50:e0:43:24:78:79:1c:f3:16:69:7e:ca:14:
         15:49:d2:f8:d2:ce:a1:6c:c8:89:cc:21:e0:cd:46:6a:65:27:
         f9:3f:23:73:99:24:aa:af:51:48:e2:f0:ee:dd:49:b4:eb:74:
         90:28:c3:cd:27:6f:24:57:e6:7c:7d:f1:b5:cd:58:d3:c2:72:
         b8:86:a2:bc:e1:56:8e:0b:cf:df:28:bf:c9:61:cb:77:4a:35:
         04:53:16:eb:e3:ee:1f:c9:5a:e1:b7:f8:de:98:b1:de:0f:ba:
         c6:0c:cc:1c:93:df:d3:13:03:93:cc:01:72:df:0a:cb:cd:0f:
         f3:70:74:4e:70:a8:c1:4d:54:d6:f9:2c:87:28:63:3b:dd:6c:
         b5:f5:b7:2e:a6:63:ca:eb:21:4e:34:48:e4:b5:ec:1a:8b:ce:
         c5:3b:28:b5:29:4c:fd:d9:65:17:d8:bb:bd:4f:9b:65:42:b0:
         1f:18:58:65:80:96:e6:7e:78:1d:e3:90:cf:0d:ab:79:be:29:
         f6:9c:09:10:61:94:2d:32:bf:cc:70:ee:d7:31:e9:37:eb:fb:
         ed:9e:29:e0:62:4f:39:1c:ef:d6:8e:d2:ee:69:35:8d:7b:38:
         ad:5a:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:39 2026 by rpki-client