Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File:                     hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier:          1b5c7p+ON9d8aAwkv7zKDU9WHklfTyZV76oHi4JEFd0=
Subject key identifier:   56:47:7E:B0:E3:47:6D:BD:BD:6C:5D:87:8D:CF:C9:60:20:62:47:33
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer:       /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number:          8B
Signing time:             Sun 05 Apr 2026 06:55:37 +0000
Manifest this update:     Sun 05 Apr 2026 06:55:36 +0000
Manifest next update:     Sun 12 Apr 2026 06:55:36 +0000
Files and hashes:         1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: ET3uGWrPyrdBc6f2KzJn/Ajo3EuJZ8m6VLJdzciUMyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
        Validity
            Not Before: Apr  5 06:55:36 2026 GMT
            Not After : Apr 12 06:55:36 2026 GMT
        Subject: CN=69d20769-8d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:dd:bb:13:3b:76:12:e0:33:d4:54:32:4d:
                    8f:dd:98:cd:40:e7:5c:f7:66:ea:6f:64:52:67:f1:
                    fa:b8:5b:45:9d:02:42:ed:e0:fe:d9:35:ba:b6:a0:
                    fa:f4:3c:5f:40:bd:65:4a:e8:ff:e4:9a:3f:6e:e1:
                    aa:d5:e9:32:20:d9:c0:40:a3:41:fe:11:a2:4c:1f:
                    eb:25:07:c2:e0:e6:cf:e6:a1:ca:dd:86:4f:85:e8:
                    86:c3:c4:ac:0e:72:bb:ed:aa:78:62:fe:2a:1c:11:
                    1c:8d:aa:9f:0f:a3:28:3c:02:02:1a:bb:d5:3f:5e:
                    2f:ef:d9:b8:36:ab:5d:20:25:e4:6f:66:70:c6:cc:
                    17:af:7d:79:06:20:00:22:6f:c3:18:60:a8:a4:a8:
                    2c:19:2f:47:dd:29:73:38:9f:3a:72:08:67:83:2e:
                    e8:3b:38:44:d8:6d:f9:77:0e:1e:0d:f3:91:b7:28:
                    3b:e6:18:9a:a0:c4:73:11:59:36:c2:f1:d7:66:ac:
                    5c:cf:b1:f1:c6:c0:5d:21:35:19:73:c5:39:a8:48:
                    a2:74:36:b8:8e:b1:27:b8:bd:37:40:b2:30:7b:a3:
                    e9:eb:cf:91:7a:6f:12:ca:7c:e7:c3:f5:b5:4d:ad:
                    34:1a:ef:fc:ef:71:c5:31:75:d6:83:c7:51:50:78:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:47:7E:B0:E3:47:6D:BD:BD:6C:5D:87:8D:CF:C9:60:20:62:47:33
            X509v3 Authority Key Identifier:
                keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:d6:ea:b3:8c:0b:bd:de:ca:1b:42:60:0e:6d:42:be:94:
         40:c8:49:e5:f4:bf:f5:72:ff:9a:3d:40:47:c9:a2:29:e7:1c:
         6c:00:94:81:66:ab:e6:72:2b:02:d8:a3:47:6b:db:40:dd:b4:
         2c:33:69:be:3c:ee:e5:40:fa:5a:2d:be:4d:4e:a3:6c:56:6a:
         e7:cf:a3:d5:0d:66:d5:bc:46:04:a4:0f:06:b3:85:df:c2:89:
         8b:0e:88:3f:a5:15:40:66:6a:b6:1e:61:a5:39:d2:e7:cf:13:
         29:8d:b6:69:a3:a6:2b:9a:69:51:fe:4a:f7:82:ef:6a:0f:06:
         ff:e0:ae:b7:6e:83:10:2e:fc:2e:70:3e:1c:95:54:bb:25:c0:
         dd:02:95:a5:22:b0:8d:d3:d6:54:1b:28:d1:0e:2a:9a:5a:e4:
         43:05:05:6c:ef:d6:40:59:7b:c7:f6:14:82:8e:c7:fa:0f:fd:
         9a:25:95:5d:c6:b1:76:95:17:b2:c3:2f:d4:88:61:39:53:5f:
         ba:f2:5f:83:67:f6:7c:ef:bd:9c:82:f4:5b:26:cd:3c:38:9e:
         75:c1:f0:9f:8f:a4:89:e5:c1:28:17:f3:a9:d9:05:28:e4:37:
         2a:7f:b7:fd:11:db:0c:38:02:6f:8f:44:75:0d:17:35:46:46:
         4d:71:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:18 2026 by rpki-client