Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File:                     xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier:          D+dOYbozfOmkKntIvukngXr91lRbqvWHSDl2lYK7HcM=
Subject key identifier:   CA:A4:8A:9D:24:85:6C:83:25:8C:AB:FE:6B:37:B3:EB:AB:4A:8B:8B
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0EF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number:          0ED2
Signing time:             Sat 04 Apr 2026 17:32:48 +0000
Manifest this update:     Sat 04 Apr 2026 17:32:47 +0000
Manifest next update:     Sat 11 Apr 2026 17:32:47 +0000
Files and hashes:         1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: Av4/bn4ekrSPzuVoXspzMisebtrsu2ogfBggw0nRvwI=)
                          2: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=)
                          3: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=)
                          4: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3833 (0xef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: Apr  4 17:32:47 2026 GMT
            Not After : Apr 11 17:32:47 2026 GMT
        Subject: CN=69d14b40-77a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:37:37:83:e6:6c:0a:aa:9d:c0:e4:c3:03:de:
                    ec:98:6a:25:1d:1b:91:82:4a:67:c1:d4:b6:3e:60:
                    92:24:9e:50:d8:51:2b:7f:fa:43:61:86:da:b6:40:
                    3b:e2:d1:91:90:2c:08:67:55:6a:f3:a3:b8:1f:40:
                    a6:50:4f:29:7a:b3:29:4d:43:4f:0d:9f:48:52:62:
                    94:43:9f:63:a2:04:3c:35:bd:dc:f0:1f:20:31:05:
                    36:f9:6b:97:5c:5f:33:1f:76:99:fe:dc:20:50:df:
                    4b:49:ae:22:39:69:68:b0:66:f4:e1:cb:a7:f9:04:
                    6c:56:91:b0:3a:94:77:04:80:9f:32:2f:d3:03:ee:
                    34:38:f5:2c:57:43:43:93:fe:48:da:20:7e:3f:33:
                    8c:de:81:61:50:29:53:ed:08:cf:2f:d8:60:a3:c4:
                    55:76:d8:b1:e9:ca:d3:bb:6c:d2:59:98:0c:89:f3:
                    ba:98:79:35:ee:d2:9f:89:4e:2f:f5:bc:90:81:32:
                    10:bd:27:32:a8:51:90:cd:f2:32:dd:80:20:b2:ce:
                    a2:a9:4f:c3:2f:f3:b5:71:f7:3a:14:2d:57:1d:24:
                    2c:91:c0:e8:f4:92:fe:76:e2:2c:44:d1:50:04:6d:
                    a2:dd:4c:90:94:85:d9:59:6e:fc:f2:c0:ed:ac:84:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:8A:9D:24:85:6C:83:25:8C:AB:FE:6B:37:B3:EB:AB:4A:8B:8B
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:80:d1:7d:d6:bb:c9:d2:33:a4:f1:5e:73:d8:1b:70:e5:3a:
         6c:a3:2f:4c:33:8e:20:7f:48:a3:de:29:36:dd:de:d5:87:95:
         08:03:25:7e:ff:d3:86:85:5d:06:2f:ff:98:61:4c:4c:9d:74:
         b5:16:bf:b7:5d:1d:fd:84:6e:97:8c:57:41:17:3c:de:58:82:
         7c:41:c8:fb:e3:61:aa:3f:01:a6:de:af:e0:b0:11:4e:7f:10:
         95:27:9c:03:09:da:23:99:69:c8:2f:52:05:e9:04:a7:48:b0:
         ea:37:fd:59:7e:6f:c3:8f:8a:e7:8a:32:31:bc:82:28:8b:83:
         9a:72:ef:21:75:c4:dd:21:c6:49:fc:1a:f5:e7:c3:2b:a2:78:
         e3:a6:c9:70:9a:58:d9:bc:87:3e:f0:5a:ff:b7:85:56:f7:fc:
         74:e6:cc:51:3c:71:8d:c0:bb:1e:07:58:18:4f:ae:1b:ed:38:
         0b:f1:dc:a6:de:b7:b0:09:7c:7f:3c:29:03:17:88:d9:91:00:
         fe:bd:14:fe:f8:f8:31:f1:23:21:e0:37:76:0e:aa:4a:08:0a:
         97:19:f5:be:9c:53:75:a4:0a:1a:44:10:38:05:27:2f:c7:0a:
         16:0d:24:fc:c7:71:0d:7d:2a:73:31:32:dc:6f:eb:2c:7a:61:
         cd:1e:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:38 2026 by rpki-client