Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File:                     G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier:          WrS52zcRdlDfKI/T0vx4zeXAolix5yj3MMnA/Iolloo=
Subject key identifier:   9B:C8:2E:98:3E:43:2D:0A:79:9E:E6:7C:FC:61:30:CA:EC:B4:ED:D6
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer:       /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial:       05A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number:          059A
Signing time:             Sat 04 Apr 2026 22:58:57 +0000
Manifest this update:     Sat 04 Apr 2026 22:58:57 +0000
Manifest next update:     Sat 11 Apr 2026 22:58:57 +0000
Files and hashes:         1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: faABhxf47AK6GJLMdGGy9kT9zXHz1mY2ehLYXxbbKBw=)
                          2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Validity
            Not Before: Apr  4 22:58:57 2026 GMT
            Not After : Apr 11 22:58:57 2026 GMT
        Subject: CN=69d197b1-ff59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:cd:f0:7d:2f:10:24:b8:25:5d:8a:e6:81:
                    54:bd:9e:7b:fc:0c:24:4f:3f:81:f2:fc:5a:50:68:
                    7f:d0:9e:e4:8d:d7:b4:c2:d3:ad:f2:cd:a9:82:35:
                    c6:66:19:92:e3:00:6e:89:8b:d2:3a:66:49:78:25:
                    76:ee:2c:6c:70:85:91:44:ce:f6:17:dc:08:8a:7f:
                    0a:fe:98:74:e3:8b:67:99:06:dd:30:11:da:de:e7:
                    5b:82:6d:77:a0:3f:37:4d:9e:54:bb:5b:fc:0f:f2:
                    00:02:1c:5f:6f:98:aa:8e:f4:f0:5b:c6:48:8b:d7:
                    c9:0e:46:fd:39:6c:0a:b5:3f:9f:a9:f7:cc:8c:dd:
                    c9:80:91:cc:d9:fb:02:ee:15:a8:57:95:1c:9c:87:
                    6f:62:28:fa:c3:df:a6:21:ac:17:fc:2e:8a:56:ab:
                    94:cb:9b:0e:d6:8f:9c:be:6d:53:30:33:72:15:fe:
                    9d:49:57:5b:49:6e:e9:11:da:60:e7:9a:82:1d:b8:
                    68:74:81:80:b1:28:78:35:b9:d0:87:96:b5:bd:b6:
                    56:7f:01:de:a2:0f:b3:69:84:f3:ad:c8:e2:69:b9:
                    60:b0:a1:58:4d:58:39:d5:28:13:5d:70:7c:84:38:
                    c1:a9:6b:39:e6:0e:cf:f7:70:6e:c9:58:ab:89:fa:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C8:2E:98:3E:43:2D:0A:79:9E:E6:7C:FC:61:30:CA:EC:B4:ED:D6
            X509v3 Authority Key Identifier:
                keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:7b:86:09:7b:c4:c0:65:b5:82:1c:80:fb:00:f7:4b:bb:
         50:5c:5a:4d:13:dc:c8:68:68:76:36:f8:71:4a:68:48:28:34:
         46:4b:6e:86:d1:2f:ca:7b:e9:af:5a:db:7c:9c:2d:35:9b:6d:
         64:cd:45:4f:e2:73:85:87:08:c0:12:49:38:76:57:10:45:d3:
         16:48:96:91:e6:a8:55:9a:fe:ed:7c:40:cf:29:4f:05:f1:5c:
         11:3d:9a:1d:ec:7a:48:71:b2:7e:1a:58:1f:26:4e:63:d8:67:
         e5:52:77:1e:13:d7:6d:5f:8d:7d:70:b3:fa:4e:8c:6e:ac:8c:
         e5:0f:b4:b7:48:0b:fa:75:03:15:69:f3:7b:a5:88:25:26:8c:
         95:20:b6:81:3d:17:62:89:14:38:54:05:64:b7:6f:f1:9b:4e:
         65:b5:00:85:f9:f1:45:62:23:a2:4a:d3:a7:3e:1d:15:26:5c:
         49:62:00:ae:37:c0:e1:5b:53:f7:fa:f6:3f:0c:df:4f:fc:f8:
         99:30:fe:f6:40:e6:d5:58:01:c4:a9:c2:af:87:0e:1f:8a:8b:
         05:95:f6:b9:93:8c:23:10:1f:0e:2d:47:61:b8:0c:6e:0a:0d:
         ed:ae:15:1a:48:08:47:b8:9d:ee:fc:7b:33:a9:46:4a:0d:4e:
         95:67:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:03 2026 by rpki-client