Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File:                     CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier:          JIRDPQ0yVXXNWosLlTJ84qeAtEwxpDpgbL0mKaJZLaE=
Subject key identifier:   78:C0:78:B3:A4:F9:D7:F0:67:5E:8C:4C:03:B2:93:3F:AE:7C:8C:11
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer:       /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial:       1977
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number:          1963
Signing time:             Sat 04 Apr 2026 16:19:55 +0000
Manifest this update:     Sat 04 Apr 2026 16:19:55 +0000
Manifest next update:     Sat 11 Apr 2026 16:19:55 +0000
Files and hashes:         1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: AClpoPs1HcqL1p85zP7QeAdOO3UqfpBNQ599T1sGS8c=)
                          2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: FF3AIYHnenSUuGagUXAW6Yxw88+RVwJAWvdOH/bQVLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
                          rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6519 (0x1977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
        Validity
            Not Before: Apr  4 16:19:55 2026 GMT
            Not After : Apr 11 16:19:55 2026 GMT
        Subject: CN=69d13a2b-7396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:9e:a7:db:34:42:d7:b5:b2:6a:41:12:c3:
                    27:9c:af:97:d1:c6:7c:21:ae:37:2c:11:8c:b3:bf:
                    5e:eb:98:4a:22:90:b2:df:36:e6:7d:6e:37:61:43:
                    d6:42:59:16:50:d2:87:fe:05:2b:25:55:ce:b6:b8:
                    00:4c:83:57:04:3f:5f:48:89:cd:6f:39:5f:7c:4d:
                    44:39:8d:15:c7:8b:a0:34:66:9a:b7:13:52:14:92:
                    2f:c4:ec:2c:aa:ac:b5:1b:2b:0c:1c:6a:60:06:29:
                    8e:93:24:29:90:a9:cc:31:81:59:55:5d:b4:0f:30:
                    fb:c6:b0:7a:e1:2e:90:12:fd:da:6a:89:5d:09:e9:
                    e9:41:1e:39:c2:02:31:00:c4:af:48:88:17:92:db:
                    e5:32:c7:8b:c9:eb:fd:2c:66:95:30:66:5f:78:40:
                    24:7f:cd:9f:07:b6:58:a6:0d:9b:8e:58:95:5d:ff:
                    40:d7:54:27:96:8b:03:b4:99:e9:f7:07:09:c9:c1:
                    dd:c6:b7:33:91:c7:72:e9:49:d2:62:70:aa:db:47:
                    4f:ae:62:5f:78:33:69:4e:d3:7e:e3:24:8b:71:0f:
                    03:c4:1e:78:81:d7:7e:f3:0f:55:f4:d7:7a:12:eb:
                    94:58:9c:52:6a:4f:2c:ea:87:e9:23:e4:33:3c:26:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:78:B3:A4:F9:D7:F0:67:5E:8C:4C:03:B2:93:3F:AE:7C:8C:11
            X509v3 Authority Key Identifier:
                keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:67:63:6e:d7:86:41:a5:7a:28:b0:24:d9:23:bd:6b:85:
         a1:11:67:c1:36:08:28:6a:ce:59:29:31:db:0d:59:5e:ab:e7:
         2e:27:2a:ac:2f:14:2f:8e:a6:cb:17:86:4b:c0:55:c8:7f:4a:
         3f:22:81:aa:97:2e:3f:1e:1c:c3:51:5d:44:de:d0:e8:e8:1f:
         4d:e5:2a:1a:66:c7:ba:a7:bc:f2:f7:d6:5a:bc:8c:ed:fa:cb:
         29:25:df:ca:6e:0e:60:39:b6:2c:a7:ae:8b:c4:87:59:67:9f:
         9a:e7:ec:ca:b6:a0:3f:de:37:a4:5b:80:8b:c7:95:48:d4:cb:
         ab:17:93:b9:4d:75:d6:6e:53:fe:31:4e:30:7b:90:cb:4f:59:
         dc:c4:2c:6e:58:7f:a9:94:16:1c:52:fc:83:5e:77:42:22:37:
         45:71:0e:a3:d9:2e:22:87:76:d1:77:1f:f4:29:76:82:45:29:
         aa:08:86:e2:d3:9d:6e:81:24:0c:0e:f0:6a:f9:0d:3b:e3:55:
         99:42:1a:7c:bf:dc:14:17:8f:83:89:68:33:3a:fb:a5:c3:b3:
         8f:89:7e:57:5b:35:aa:98:4d:e5:08:7f:86:77:11:be:e9:14:
         d6:89:ae:a5:9f:1a:5b:a5:d2:10:9e:ab:08:a1:c3:5e:ff:97:
         a5:ec:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:04 2026 by rpki-client