Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
File:                     ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json)
Hash identifier:          Jd/+ewFvaLEMbPg43mu9nW4bc0yRgeKbaf6Od6MS0dQ=
Subject key identifier:   EB:25:A0:26:08:AD:C0:17:67:58:E1:77:8B:73:2B:0B:04:8B:98:E6
Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6
Certificate issuer:       /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
Certificate serial:       0CD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
Manifest number:          0CB2
Signing time:             Sat 18 Apr 2026 18:25:00 +0000
Manifest this update:     Sat 18 Apr 2026 18:24:59 +0000
Manifest next update:     Sat 25 Apr 2026 18:24:59 +0000
Files and hashes:         1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: o6Fxi5kcKcmYB7GeADn9h+kyt25DaUAZbNv+gxHnCrs=)
                          2: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: pUo1M6Sm4lp9c2XrgF+LDSj3mLXP2pG6wm3MhRuMa6w=)
                          3: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: 4GtPeohLS8OTUPDc8RgozS35ewcE3lUXQAukx2eqQRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl
                          rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3289 (0xcd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
        Validity
            Not Before: Apr 18 18:24:59 2026 GMT
            Not After : Apr 25 18:24:59 2026 GMT
        Subject: CN=69e3cc7b-95c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:fb:97:c4:76:85:31:99:e1:f9:62:bc:6b:
                    ae:c9:92:d7:1f:69:f1:33:74:d5:96:96:4b:23:09:
                    0a:1e:97:97:e6:de:a2:e5:bf:66:1c:68:78:8f:76:
                    41:6e:a7:f9:b0:5b:cf:3c:48:12:2c:24:45:8d:7a:
                    93:8a:a5:2b:67:61:ae:3f:b2:fb:73:81:6c:21:b0:
                    0a:0b:02:01:5e:4f:61:ec:29:28:dc:10:1e:0b:2f:
                    79:1b:c3:6b:a9:a1:b1:eb:56:90:6a:cf:0e:82:91:
                    bc:c2:9e:9d:66:4d:b1:cb:0b:a8:79:68:de:a8:a4:
                    d2:d8:fc:33:87:fd:0a:a8:a9:eb:34:e3:43:d5:18:
                    04:7b:ae:57:f2:8e:2d:c8:4e:34:48:40:d6:2e:8d:
                    de:c2:78:99:78:5f:61:a4:ed:77:27:4d:35:23:ee:
                    3c:3a:9f:39:f7:46:ee:53:4d:db:67:42:f3:79:bf:
                    0a:4c:9c:88:f7:9d:a0:10:cd:5f:0a:72:9e:8a:50:
                    34:e8:1c:68:7a:0e:2d:7c:d0:d1:63:34:61:77:c4:
                    f1:57:6b:aa:2f:15:f1:57:8d:a0:cb:ec:85:e8:2d:
                    46:4a:f2:23:96:73:8b:1e:fe:dc:ac:4e:6a:77:52:
                    fb:80:08:dd:1d:4d:eb:6b:76:6c:32:7e:03:ca:bc:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:A0:26:08:AD:C0:17:67:58:E1:77:8B:73:2B:0B:04:8B:98:E6
            X509v3 Authority Key Identifier:
                keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:01:a5:0a:ad:7b:be:e6:54:dc:97:09:36:71:92:ce:3f:
         61:9b:af:64:4e:3a:38:2d:96:f1:80:cf:03:22:42:ff:44:e0:
         80:2e:1d:d5:07:d2:e2:df:c9:e2:ae:b0:33:be:75:c5:57:00:
         73:1e:40:c8:ec:e6:5b:60:b8:ac:53:8e:d4:57:21:f7:f9:62:
         57:19:4c:b4:61:18:31:96:9f:cc:eb:40:3d:ac:55:6d:ab:0a:
         94:9f:5b:1d:90:d4:e1:bb:c1:50:f0:4a:fb:52:d1:69:e4:67:
         59:27:76:32:67:91:26:f7:03:cf:91:3d:fc:a3:ad:6e:18:98:
         c8:42:46:02:44:c5:f6:2c:39:4c:be:f8:f9:34:78:f0:7c:79:
         90:64:86:2f:4f:6a:cf:66:ff:0b:c3:38:4d:c9:54:44:99:eb:
         b1:ca:62:13:8a:63:ba:b4:fd:9e:ca:10:86:d8:52:31:39:1d:
         45:21:01:ac:1f:53:88:89:97:77:d8:cc:48:5d:c4:4d:51:68:
         72:0a:ee:0a:56:ca:39:75:34:9d:e7:76:5e:fa:c2:89:57:87:
         99:4e:02:45:8e:ba:a1:d2:da:25:b6:5b:75:c5:73:33:b3:e4:
         ce:ca:c8:cc:0d:5f:21:36:75:78:bb:52:c4:bd:f6:bc:03:46:
         1e:fa:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 03:46:05 2026 by rpki-client