Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
File:                     ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json)
Hash identifier:          6nwVOJOOUUjqy/EipWfWfojGp8J10tIL5hrhVS9DR/A=
Subject key identifier:   B2:18:F1:F1:C9:62:70:FA:F2:F4:61:10:36:4F:99:4C:8B:86:CC:E3
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Certificate issuer:       /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
Manifest number:          D3
Signing time:             Sun 05 Apr 2026 06:07:32 +0000
Manifest this update:     Sun 05 Apr 2026 06:07:32 +0000
Manifest next update:     Sun 12 Apr 2026 06:07:32 +0000
Files and hashes:         1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: RbNVt6L5Rk/tXNAdWO8U1YgKiniHx/+GZWsxUSkZLd8=)
                          2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
                          rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
        Validity
            Not Before: Apr  5 06:07:32 2026 GMT
            Not After : Apr 12 06:07:32 2026 GMT
        Subject: CN=69d1fc24-f24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:0a:1d:7b:ff:a9:e6:5e:9d:64:76:f8:ef:
                    8b:99:07:1c:e6:58:50:bd:04:8b:be:a8:0f:1a:ec:
                    1a:8d:45:0b:cb:80:fa:b4:d5:5d:04:da:cd:6d:e5:
                    6d:93:16:2e:f3:f0:ad:a8:82:62:a7:58:20:ea:1e:
                    65:00:5d:5f:9b:0a:dc:65:80:ed:79:27:33:c8:6e:
                    91:95:7f:1c:58:4e:71:81:09:8a:4a:4b:e1:78:af:
                    be:5b:1c:e2:62:36:e4:62:f8:a9:8a:28:c5:94:92:
                    16:ae:2f:b5:14:68:22:3a:8f:0f:2d:ee:d6:16:ec:
                    3d:d3:c6:2f:73:37:af:67:ad:ff:b8:db:6e:ad:b5:
                    b2:fd:ac:a1:64:95:e5:56:0a:f8:fc:63:af:96:65:
                    ad:f3:cb:71:e7:38:11:a8:ef:50:47:e3:1e:f8:70:
                    a1:fb:6f:3e:f6:04:9f:bd:fb:b3:4e:d2:2b:94:fd:
                    5c:85:71:03:4a:e3:6c:b3:66:50:9e:6b:6c:ee:a6:
                    ed:55:6a:ce:75:6d:fb:16:63:47:0f:39:51:a1:df:
                    37:f9:e0:1c:06:51:50:f4:00:55:92:7d:39:4c:6b:
                    9e:5b:26:6a:23:af:b9:8a:d3:2c:49:22:34:cd:16:
                    5e:c9:e1:55:d3:72:08:ba:6d:ab:3e:af:e3:71:ff:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:18:F1:F1:C9:62:70:FA:F2:F4:61:10:36:4F:99:4C:8B:86:CC:E3
            X509v3 Authority Key Identifier:
                keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:79:74:0b:38:f6:8c:3c:4f:43:38:f0:5d:9f:e7:56:20:
         08:c1:0c:d7:ac:4f:5e:6c:4e:96:d3:24:dc:ad:4c:41:ab:e4:
         d1:cc:4c:e2:bf:d4:88:d0:d2:6f:96:3a:83:90:6f:e9:d9:99:
         35:3f:b1:d1:92:22:76:27:23:c8:e9:25:0b:4d:6c:11:84:c0:
         62:b7:59:95:92:9f:8f:8e:bf:88:5a:e9:6e:87:e0:6f:49:56:
         86:1d:d6:74:91:a9:05:c5:32:ad:ea:9b:b3:22:c1:5b:a0:38:
         1b:54:26:50:67:50:d9:f6:e2:10:92:5a:8c:04:ab:99:be:fd:
         2e:7e:46:c2:1a:21:81:27:97:78:00:89:06:53:8f:56:77:52:
         c8:14:27:71:90:5c:30:5b:9e:b2:00:19:28:4f:61:90:01:a3:
         f4:fe:88:c1:83:d1:98:69:e2:97:92:13:e7:ad:88:7c:5a:f5:
         a4:47:c6:1d:da:db:d1:c9:ff:e9:65:ae:36:04:86:e9:53:4b:
         f8:cc:21:b4:6a:f3:a2:6c:4e:a6:ce:ef:68:3f:f4:78:fe:4b:
         3b:cb:c0:6d:b5:0d:2c:72:80:f5:14:23:4d:3f:1a:5e:3d:92:
         37:3d:7f:07:49:f5:cf:8f:d5:99:f4:5a:06:77:74:9a:b6:d9:
         a1:83:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:35 2026 by rpki-client