Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
File:                     3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json)
Hash identifier:          C94/0Ba8LetmyPEm28Hlr6AZnMZPu8GxG67U7Q3l6BY=
Subject key identifier:   FD:A8:DC:C9:8D:62:57:AB:ED:36:3D:66:D2:C9:44:87:92:EC:65:4E
Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0
Certificate issuer:       /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
Manifest number:          B9
Signing time:             Fri 17 Apr 2026 06:57:09 +0000
Manifest this update:     Fri 17 Apr 2026 06:57:09 +0000
Manifest next update:     Fri 24 Apr 2026 06:57:09 +0000
Files and hashes:         1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: hhegSLm+QAfDjbR3v5gcyo92os75dxJ52eIWfHl+igI=)
                          2: 375E8232C13411F0A297231CC4F9AE02.roa (hash: Rcvi6yejJNqA4Zq2UKAey1CzzI6dgFF00kMlDMOnfRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl
                          rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
        Validity
            Not Before: Apr 17 06:57:09 2026 GMT
            Not After : Apr 24 06:57:09 2026 GMT
        Subject: CN=69e1d9c5-a0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:29:d6:71:3e:e0:0e:04:6d:13:c6:05:1f:
                    8c:ae:d8:fc:4b:5b:c7:82:c9:e8:0c:64:7e:8a:f2:
                    fe:e2:34:bd:db:a5:ba:39:55:59:62:18:44:f3:c7:
                    c7:fd:18:d6:63:2f:d6:fb:db:7c:1a:a6:b5:85:53:
                    36:fc:c2:2e:a0:cc:47:56:14:08:be:67:40:1c:31:
                    7d:fd:32:51:a4:5d:53:3a:19:98:cb:d1:e7:2e:5f:
                    99:4c:db:e1:50:dd:d4:ac:42:da:b0:b4:4e:31:5a:
                    49:4f:0d:0a:b9:5e:78:47:e9:85:75:12:c9:e1:cb:
                    fc:48:47:28:b2:3b:c0:85:ed:b6:b2:12:e0:db:f6:
                    6a:06:e0:92:a7:b1:12:80:44:9e:aa:db:ce:e5:7e:
                    d7:6a:bf:9a:75:00:80:68:fd:f1:cb:49:4d:77:6d:
                    d5:43:e3:99:22:f2:97:c6:74:0d:df:a9:5b:9f:a6:
                    73:41:3f:0d:2c:c6:f0:1a:97:69:b6:99:fa:7c:20:
                    16:47:92:4e:75:72:26:6e:fc:f1:a1:ca:fd:02:4d:
                    2c:fa:23:bd:8b:e3:80:8a:61:ed:64:32:66:92:7f:
                    5c:f0:cf:5c:1f:30:b2:e0:ec:05:0c:b8:49:58:58:
                    83:04:85:3a:3c:b2:48:d1:5a:60:f4:73:a5:40:cd:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A8:DC:C9:8D:62:57:AB:ED:36:3D:66:D2:C9:44:87:92:EC:65:4E
            X509v3 Authority Key Identifier:
                keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b0:ed:e6:d9:31:3e:6e:50:35:b9:92:1a:9d:12:7e:03:51:
         83:bf:02:c4:1e:e3:c1:c1:50:f3:b6:1f:57:80:3a:06:52:fb:
         45:8d:8e:74:31:30:d2:22:73:36:6c:6a:9f:cb:6d:10:97:90:
         fb:fb:2b:9f:1e:62:99:a8:61:f9:85:6d:22:cd:4b:31:ff:8e:
         25:9f:7d:ee:fa:f5:2f:41:c3:10:73:7a:01:23:6c:e7:34:69:
         e0:ef:9a:d4:3e:88:0d:3d:01:3c:e9:6e:19:2b:50:5b:6b:9b:
         a0:f7:e4:61:a3:7a:d8:96:c8:6e:17:55:52:f1:2e:e1:ed:78:
         5f:ed:c4:df:e5:42:46:9b:9f:96:c5:93:e0:79:13:c8:90:54:
         b7:3f:59:af:c9:56:cd:3f:13:9c:f6:50:94:86:31:34:53:75:
         98:d3:9e:d3:e1:2a:97:e8:9f:50:fd:35:44:fd:88:3f:10:00:
         ca:0c:83:d0:4c:46:a3:76:df:f3:ce:82:b1:fb:21:7e:e5:37:
         d0:97:66:aa:2e:7f:9b:87:8a:58:ee:71:88:48:84:7c:7f:94:
         f3:24:30:61:7f:4e:8f:17:a6:d6:20:c0:67:c0:12:6c:02:7f:
         91:e7:7c:5d:ad:01:e5:38:4d:60:d6:b7:12:82:4c:11:e7:84:
         96:cb:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:22:36 2026 by rpki-client