Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File:                     9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier:          I02/njD17NzoNO/2qytFysXgsX88l3gqcPOvhWXqelw=
Subject key identifier:   61:15:E7:95:F3:96:A3:B6:09:0D:A5:27:EF:B7:CB:6B:10:CB:B7:B7
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer:       /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial:       0D76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number:          0D52
Signing time:             Sun 26 Apr 2026 17:54:36 +0000
Manifest this update:     Sun 26 Apr 2026 17:54:36 +0000
Manifest next update:     Sun 03 May 2026 17:54:36 +0000
Files and hashes:         1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: UjLaLCGAmKeRd16OhknFYG0ejs1XPRbhJgrzhfzIkTE=)
                          2: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: XguSXdxwX10IbHPbblPRZe5PIEMjt2uiz6CEGHIK6Gc=)
                          3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=)
                          4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM=)
                          5: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: uhdsb7IsbH2eS89Ae2T+bO+dY73SgZMqEnGlhmdvaA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
                          rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 17:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
        Validity
            Not Before: Apr 26 17:54:36 2026 GMT
            Not After : May  3 17:54:36 2026 GMT
        Subject: CN=69ee515c-a8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:60:44:3c:ca:41:3b:8d:48:2d:64:5c:3a:
                    6f:8b:da:fe:e7:96:a1:90:27:e9:b0:85:41:70:3e:
                    31:b6:b8:1b:45:9f:4d:85:40:52:a3:a2:26:8b:ab:
                    16:db:3b:b8:ca:67:9b:fa:35:fe:22:22:39:df:7b:
                    36:6b:c1:ca:61:36:8c:a9:52:39:9d:fe:6c:22:67:
                    5d:48:5f:d7:67:bd:f0:8b:48:67:5d:f1:eb:3a:a5:
                    c1:66:74:16:9e:d0:5b:33:a6:a1:a7:15:60:11:92:
                    dc:50:35:19:e4:66:2e:c6:1e:a2:01:88:0f:a9:0b:
                    2a:40:31:31:46:4b:9d:b8:6c:78:82:b5:e8:eb:49:
                    fc:d8:b5:e8:80:e2:29:8c:b5:2e:b8:6c:be:15:6a:
                    38:c7:6a:ea:aa:12:62:a5:73:94:08:f3:b3:73:ee:
                    21:34:f5:ba:a7:f6:bc:0f:24:40:9b:bd:09:d1:ec:
                    c4:83:02:8c:4d:ca:ba:34:e4:a3:4b:eb:af:63:8f:
                    d2:4c:80:4f:7d:c5:69:ca:dc:a4:7b:bf:4e:96:9b:
                    56:63:94:a4:68:6d:16:6f:bf:ff:81:2a:b5:14:6b:
                    fc:7f:e9:2d:bd:cf:20:42:60:8f:d1:67:3f:6c:cf:
                    42:66:19:ce:eb:af:41:d5:bb:30:ad:95:e9:86:8b:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:15:E7:95:F3:96:A3:B6:09:0D:A5:27:EF:B7:CB:6B:10:CB:B7:B7
            X509v3 Authority Key Identifier:
                keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:54:68:fc:2b:4d:39:7d:df:d6:36:81:82:ac:c0:9d:c6:53:
         c8:7e:3f:be:e1:f9:fb:a4:ec:a2:08:78:75:f4:c1:3d:23:69:
         94:6b:0e:23:14:23:09:a2:ce:ce:c6:ba:8b:31:e3:36:b6:75:
         4f:6e:00:ef:d5:6d:78:dc:f6:1b:d0:18:ec:ab:c2:5f:e9:54:
         c8:19:51:53:fd:58:bc:78:88:a1:88:f1:d4:96:4c:2e:48:77:
         48:b4:ea:c4:8f:53:4e:37:10:6a:f0:23:fb:18:51:f6:fb:fa:
         36:71:48:09:71:6d:81:d5:89:7a:11:4a:47:fa:87:14:80:53:
         5e:2a:29:aa:64:58:07:43:6a:7b:a0:f4:2b:dd:4a:35:6d:16:
         60:8f:cc:1d:2c:8b:47:a4:f0:96:c7:84:75:db:fb:ac:7b:31:
         9c:d0:ea:d1:af:8f:db:bd:dd:d0:20:76:28:3d:15:d6:ca:39:
         89:75:93:6a:c6:06:67:1e:19:83:0a:fa:c7:b2:ca:2b:d1:40:
         ee:6a:ca:58:fc:35:bd:84:75:7a:d4:48:18:62:e9:91:ef:03:
         8c:bb:12:02:00:c1:69:fd:f0:d9:42:69:99:6b:f2:a0:a5:60:
         a3:7e:65:53:90:f6:4a:85:9b:08:30:46:52:12:9f:05:a6:2a:
         60:ed:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:47:21 2026 by rpki-client