Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File:                     tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier:          UyvJtfoc0ml0w/JcfmCEYijIcbFdPcMv3st3Mv8nlVs=
Subject key identifier:   8B:5E:D4:28:E0:BB:42:95:E7:0D:E3:FA:BB:9A:22:7D:FA:BF:41:85
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer:       /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number:          F1
Signing time:             Tue 21 Apr 2026 06:14:33 +0000
Manifest this update:     Tue 21 Apr 2026 06:14:32 +0000
Manifest next update:     Tue 28 Apr 2026 06:14:32 +0000
Files and hashes:         1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: 4Hc3Wwb/FZULj/EmbrD91/CXYZ3ylU50VQiJxkjYNIY=)
                          2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
        Validity
            Not Before: Apr 21 06:14:32 2026 GMT
            Not After : Apr 28 06:14:32 2026 GMT
        Subject: CN=69e715c9-a10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:31:01:18:0b:f6:e2:c3:7b:a1:bd:ad:b0:
                    be:8d:db:1a:2d:ed:3a:25:98:5c:62:dd:f6:06:af:
                    18:9c:8b:b6:e9:0d:02:74:02:e1:ca:9f:c2:4c:93:
                    73:23:cc:5f:bd:8f:82:70:40:0d:1e:26:5d:1b:a9:
                    96:73:b6:54:ee:8d:d4:11:36:3a:dd:ea:7e:e4:f0:
                    2e:1b:84:1c:87:32:f2:b5:cd:a8:7b:00:84:86:f3:
                    31:d5:57:c3:88:d5:f5:52:b3:e5:7e:0c:9c:28:7d:
                    0b:3c:4b:b0:ec:17:48:28:59:d3:45:31:a5:bb:f9:
                    41:df:0f:4d:92:9d:ca:7d:fe:42:b2:df:db:8a:02:
                    ba:cb:03:0d:ab:70:49:17:9a:95:ff:26:d2:28:ce:
                    70:a1:66:d6:45:90:b0:7d:e4:52:d5:bb:d6:7f:11:
                    e2:f8:e6:12:9d:16:26:22:98:81:2c:65:e5:39:65:
                    32:db:79:37:52:2d:3d:9d:5f:d4:12:9e:2d:03:2a:
                    8c:c2:96:50:d4:e3:68:a7:2c:bb:6d:26:f2:6d:a5:
                    34:d4:cb:a1:19:19:e8:4c:13:2c:87:76:ee:39:39:
                    eb:99:48:97:e9:72:ae:d5:3e:76:d5:8c:93:09:57:
                    e4:bf:f5:9b:30:08:91:02:2d:33:28:8f:43:4b:04:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5E:D4:28:E0:BB:42:95:E7:0D:E3:FA:BB:9A:22:7D:FA:BF:41:85
            X509v3 Authority Key Identifier:
                keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:2c:d3:14:6a:0a:68:20:ec:c6:9a:0b:f1:a5:81:0b:5e:
         75:87:e6:8a:25:33:e9:f6:d0:85:c9:c4:4e:84:5f:9b:37:d8:
         6a:18:23:ab:be:c9:fd:9b:8b:1a:06:b4:6e:3f:51:23:3a:5e:
         fd:d7:d9:c2:53:46:57:d5:17:8e:eb:a0:a8:38:25:09:71:14:
         c6:81:5f:e5:7c:c1:b9:b1:84:4c:ae:66:14:a8:cf:20:13:04:
         39:be:f5:21:d5:07:20:19:dc:27:a3:f3:32:e4:56:4e:6f:55:
         24:b5:2b:bc:99:81:14:bf:c3:1c:e2:9d:d8:f3:f0:a5:c8:7f:
         26:ca:68:64:e1:2d:16:8e:ce:94:1c:26:fc:c8:49:91:3b:d8:
         0e:31:4a:0e:7a:5a:3c:0b:cc:d4:b7:64:07:99:9b:a1:6b:1c:
         30:b9:4e:61:e2:a2:48:fe:08:0f:8c:d2:94:c4:97:3c:7a:cf:
         16:bb:39:63:0b:f2:92:68:ed:69:61:79:71:ec:bb:41:bf:3b:
         28:70:6b:b3:73:a8:4d:67:35:c2:9b:06:15:48:37:37:f7:67:
         3a:be:a7:dd:81:31:85:0e:f6:fa:e7:95:27:9f:f2:5a:31:aa:
         73:6d:42:ff:a6:e3:aa:e0:8a:50:0c:6b:17:47:aa:9b:59:c7:
         48:5a:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:28:42 2026 by rpki-client