Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File:                     rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier:          BB+6MUyIrjIkdAmBjQVMR7e+hIDcftFksIzq8e4i8iY=
Subject key identifier:   D3:93:5A:95:E4:DC:65:7B:CC:69:6F:29:D4:57:9B:45:79:CD:DF:C8
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer:       /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial:       2550
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number:          252F
Signing time:             Sat 04 Apr 2026 15:42:06 +0000
Manifest this update:     Sat 04 Apr 2026 15:42:06 +0000
Manifest next update:     Sat 11 Apr 2026 15:42:06 +0000
Files and hashes:         1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: pb712poHpIAFSACyySaKkGB7bOONoQ8PvHXH8KTUIGU=)
                          2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: i+GdPwFxjLjj+7bNWOxBthvhtqMbDPp4GipdpNEloMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
                          rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9552 (0x2550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
        Validity
            Not Before: Apr  4 15:42:06 2026 GMT
            Not After : Apr 11 15:42:06 2026 GMT
        Subject: CN=69d1314e-373e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:e3:18:0a:aa:72:fb:19:96:29:8e:b6:18:
                    a2:eb:d9:6a:28:55:6c:7e:8e:50:7b:ed:54:0e:dd:
                    d6:45:42:1e:43:1e:58:5c:11:f2:21:f2:c1:8b:5f:
                    d8:79:4c:f1:e8:a0:7f:f0:99:32:93:d0:82:37:bf:
                    86:d2:d1:2a:93:a0:38:51:af:b2:08:25:35:74:a5:
                    4d:88:6c:bc:47:3c:ec:d0:e4:06:0d:49:32:e6:6f:
                    19:fb:17:ed:ad:61:fb:6c:6e:9e:ca:7d:1e:8a:3b:
                    6f:50:6f:32:3e:3f:8b:21:96:05:c2:35:99:25:ea:
                    0b:a4:1e:c0:a1:b0:8d:f6:cc:2d:22:4c:a6:80:58:
                    88:8e:c7:4a:58:66:a6:28:cd:d0:20:55:20:22:02:
                    81:b8:c9:07:6d:80:55:53:7f:c4:c5:fb:d9:25:00:
                    68:6e:69:3a:93:73:7e:92:ad:c3:7b:56:9b:11:5f:
                    f6:e3:bb:7d:32:c9:27:e6:cf:bd:2d:5d:b0:6a:46:
                    d1:9c:3b:7c:21:b3:1f:42:a1:4f:0c:85:19:6f:63:
                    f1:7d:3f:37:16:3d:bb:1e:8d:02:66:73:7b:e1:3b:
                    0b:19:a7:7a:b1:d3:82:9a:bf:ea:26:0f:07:71:58:
                    e8:12:5a:2f:33:b8:12:a4:f7:fc:3a:dc:2c:55:86:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:5A:95:E4:DC:65:7B:CC:69:6F:29:D4:57:9B:45:79:CD:DF:C8
            X509v3 Authority Key Identifier:
                keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:47:2a:1c:b7:4f:0e:71:88:9d:fa:5f:a9:fb:97:cf:9e:88:
         cb:f5:36:36:c4:95:cc:10:42:55:75:ea:c7:8b:10:d9:7b:50:
         73:06:4c:15:09:ec:b9:9c:f5:0a:d2:1c:77:28:52:f8:6f:59:
         4e:10:53:74:98:c2:76:13:86:13:e5:81:85:cb:15:72:99:50:
         76:ba:4a:98:36:f1:71:c2:a5:e6:26:5f:58:81:01:e2:99:ca:
         2d:9b:33:33:da:f4:01:cd:49:97:47:5d:33:74:58:0d:d9:f0:
         98:f2:56:d4:e6:db:a1:27:2e:49:8c:d7:9b:ef:55:8e:ad:ed:
         fb:40:c4:44:31:b9:18:06:24:6b:43:01:10:cf:7f:fb:6c:2e:
         13:dc:70:f2:73:05:b8:e5:d4:df:45:34:e3:29:0a:a9:c6:63:
         ec:6d:9e:04:19:36:fc:5f:73:76:be:6d:24:e0:73:1b:e8:ae:
         fb:7d:ed:b0:11:00:88:23:1f:59:34:b1:73:02:bd:bd:6e:01:
         75:a6:f2:20:1f:9b:8a:ca:c2:6b:4b:06:4f:9f:76:07:dc:03:
         51:fe:35:c9:4c:6e:a5:63:b4:7d:f0:cf:97:e6:0a:be:bb:f9:
         bc:7a:47:cc:65:91:7a:c1:bf:f2:5f:d3:d5:27:9a:22:69:18:
         49:56:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:34 2026 by rpki-client