Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
File:                     rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft (raw, json)
Hash identifier:          YIAwtStL3BgCuv8X6KHq3tgiFm4McHvCAUAjE7yJLr4=
Subject key identifier:   1F:89:AA:EB:4B:01:CF:CC:10:E1:68:CE:05:E1:2C:65:49:63:7B:72
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Certificate issuer:       /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
Manifest number:          0103
Signing time:             Sun 05 Apr 2026 05:33:17 +0000
Manifest this update:     Sun 05 Apr 2026 05:33:17 +0000
Manifest next update:     Sun 12 Apr 2026 05:33:17 +0000
Files and hashes:         1: rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl (hash: dzFFG6J/y1X06IcFMjIqkG0lQnoKzgcMJNGkH6qHq6A=)
                          2: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (hash: Ym98AGZEM1BksP4Y3kvzDkvtm38BxUohqAh//gTG7x8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
                          rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
        Validity
            Not Before: Apr  5 05:33:17 2026 GMT
            Not After : Apr 12 05:33:17 2026 GMT
        Subject: CN=69d1f41d-cdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:dd:56:16:1f:70:c7:99:a4:f7:30:4a:77:
                    a5:0f:17:54:32:7c:94:8b:4d:c4:56:78:14:5c:22:
                    b1:ec:19:64:95:db:86:a0:ab:ae:f8:1d:37:62:06:
                    1c:fc:25:6f:db:5c:32:5a:62:5a:81:2d:f6:c3:5d:
                    a9:4e:73:ea:90:7f:c8:d3:07:a0:75:bc:8d:0c:0d:
                    81:43:be:68:b8:7c:d0:9d:b1:2b:0f:60:c1:e0:a3:
                    19:05:70:51:9a:53:d3:1b:d8:52:e7:8d:cf:83:b8:
                    0a:40:95:53:77:c4:8c:29:a5:80:e4:65:c2:f1:e1:
                    b6:16:b2:7b:8e:32:af:2d:b7:d0:ee:cb:0f:e0:09:
                    c3:de:04:76:41:16:1f:72:c8:ff:07:ad:d4:6c:bb:
                    2e:e3:f6:a3:3a:0d:ae:a1:95:d5:24:da:04:93:0f:
                    40:e1:55:f3:60:71:f4:48:12:7e:55:04:ff:b5:c2:
                    c1:db:74:0c:32:3c:f7:b6:02:36:d1:7a:d4:f8:73:
                    0e:8d:a0:98:3c:85:60:49:b6:83:5c:0c:09:a8:06:
                    58:d5:73:a3:aa:6e:07:1b:96:80:3d:f3:ab:36:fd:
                    c6:9d:34:ca:ff:41:ee:0b:8e:39:85:2e:9f:f2:a4:
                    1d:e2:92:f4:8e:55:a5:78:b1:5f:2d:00:e6:d2:98:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:89:AA:EB:4B:01:CF:CC:10:E1:68:CE:05:E1:2C:65:49:63:7B:72
            X509v3 Authority Key Identifier:
                keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:c6:1f:31:fe:52:da:99:3e:90:eb:8b:95:cb:9a:99:93:
         48:38:ee:4c:0f:4e:d4:e7:0c:66:4e:f8:26:ee:b4:d5:8d:ad:
         85:6a:75:03:8a:3f:ff:0f:2e:42:d6:b2:42:0d:76:fd:74:7e:
         98:1d:b1:c0:c1:6b:11:00:a0:91:f7:3d:ed:f8:8b:f4:46:89:
         14:dc:f7:ca:e9:45:32:e3:47:68:ec:00:76:23:f8:88:23:de:
         81:07:ff:3e:3f:68:39:d9:76:6d:58:65:34:f4:33:0f:40:69:
         ba:e1:86:02:dd:ed:8a:83:1c:2b:7d:bd:2b:71:ca:cd:93:3d:
         67:91:c7:00:37:77:fe:43:c8:f6:11:32:df:96:f0:61:38:86:
         a1:02:36:07:af:44:a2:0b:ca:a4:6c:2a:17:1d:fe:e3:68:35:
         c5:16:a4:c9:37:c0:9f:c6:5d:ab:c7:6a:75:20:20:b6:69:a3:
         04:1d:5b:7f:55:cc:fe:ab:45:86:5d:fd:82:cf:b5:a6:8c:d9:
         1d:e1:37:8f:d6:39:cb:7a:d2:78:19:96:68:db:b3:25:82:45:
         44:79:d6:47:dc:62:ab:58:e9:bf:9c:8a:c1:4b:cf:ff:58:d6:
         05:7c:7c:d5:cc:f0:c9:2a:03:da:cc:81:7b:32:32:92:a4:2f:
         a1:c4:a8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:52 2026 by rpki-client