Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File:                     Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier:          e2GZaKd8PiSb4Z7d9DO3nndZ9SA56dllzDVESu9c1Hg=
Subject key identifier:   23:AD:02:5C:C0:D7:14:58:C1:90:FE:70:D9:FC:C2:30:D3:C7:97:CF
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer:       /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial:       0CA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number:          0C9B
Signing time:             Sat 04 Apr 2026 18:22:34 +0000
Manifest this update:     Sat 04 Apr 2026 18:22:33 +0000
Manifest next update:     Sat 11 Apr 2026 18:22:33 +0000
Files and hashes:         1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: zYtyT7p2DxITdiS3/K+XOTMDGGoZlXGH9zB4FYaEks4=)
                          2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: 3KMGe5qUUyYX05XayDx8IgLDNPx7Xx1E+icm0sK1QNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
                          rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3238 (0xca6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
        Validity
            Not Before: Apr  4 18:22:33 2026 GMT
            Not After : Apr 11 18:22:33 2026 GMT
        Subject: CN=69d156e9-f548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:7b:cb:4a:3b:6c:1b:e8:61:6e:58:fa:35:
                    be:19:f9:fb:77:a2:ed:2d:a4:5e:d9:30:ca:8a:80:
                    0d:e6:9e:2b:b9:58:54:06:a0:34:da:a8:8b:41:7a:
                    a0:3b:cf:d9:9e:1d:a3:1a:20:cc:ca:31:a1:bb:2b:
                    fe:c6:33:93:40:db:5b:77:2e:d1:fd:5f:5c:47:bc:
                    38:7e:b2:61:e7:e3:d9:77:b9:73:83:87:46:34:86:
                    9b:f1:09:16:b3:0e:6c:58:17:6c:e0:d8:bd:9b:9f:
                    f4:c4:ad:d7:9a:14:06:66:86:1c:43:b9:23:39:f0:
                    77:af:9a:ce:33:6d:bd:91:be:ae:60:07:0d:a2:1c:
                    78:6f:43:5b:f9:c0:cf:0e:6c:74:14:a2:b3:7e:30:
                    49:fa:47:59:ca:18:02:04:6c:1b:7c:e2:92:90:1a:
                    d4:19:bf:09:9e:9b:eb:ef:69:48:1a:8a:fd:2b:e1:
                    f7:64:ed:7c:c3:e7:05:b3:17:1e:0b:1f:f3:78:c2:
                    f1:4e:7e:f5:9d:04:f0:f4:1b:bc:d7:fb:47:7c:f5:
                    95:d9:a7:56:92:33:4b:45:a5:f7:7f:fb:24:2e:5f:
                    0c:6f:9f:38:4c:59:7d:42:16:86:60:35:22:2a:d8:
                    38:a9:51:f9:23:27:9a:6a:17:06:10:df:85:da:49:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AD:02:5C:C0:D7:14:58:C1:90:FE:70:D9:FC:C2:30:D3:C7:97:CF
            X509v3 Authority Key Identifier:
                keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:91:3f:a1:7b:e3:d4:dc:c3:6b:fb:51:3d:74:9e:55:b9:d4:
         c3:9c:82:fe:f4:35:f7:f6:9a:17:85:45:cc:f2:a0:91:1b:7b:
         9d:60:98:8e:af:27:ed:53:40:8a:a9:f8:ed:e3:e6:1b:2e:a1:
         e2:81:57:ca:73:ca:7a:a8:f5:e6:31:f7:cd:4e:20:48:e4:eb:
         26:74:6a:d6:00:67:33:e0:d0:aa:82:1d:f0:e3:d8:af:33:01:
         d8:cc:d2:d5:56:17:70:89:76:fd:50:67:07:d3:e8:94:3d:03:
         36:2f:ee:05:d2:6f:99:ab:73:c2:3e:d8:41:82:97:3a:90:f8:
         d4:40:70:2f:f1:ca:87:24:6a:d7:21:da:c0:1a:f6:5f:29:f1:
         9e:ca:fb:c8:b0:cf:2c:b1:94:0a:e8:d7:0b:1f:bd:34:50:bb:
         8a:46:45:28:ef:7f:13:c0:9c:f5:63:e8:bf:f3:3c:cb:28:4d:
         56:69:6f:a9:4b:33:7c:f6:94:91:4b:95:f7:60:69:df:10:93:
         7f:a2:22:83:4c:ea:5a:2e:cc:c3:cf:97:82:01:d8:dc:4f:f0:
         10:ee:9f:7d:21:12:9c:86:88:90:39:48:88:29:44:24:d9:ae:
         51:37:71:e3:c7:d0:0e:ce:e5:fd:06:06:f6:fb:5c:b2:af:77:
         f1:84:9a:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE
Rjg5Rjk0OTIwHhcNMjYwNDA0MTgyMjMzWhcNMjYwNDExMTgyMjMzWjAYMRYwFAYD
VQQDEw02OWQxNTZlOS1mNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlAx7y0o7bBvoYW5Y+jW+Gfn7d6LtLaRe2TDKioAN5p4ruVhUBqA02qiLQXqg
O8/Znh2jGiDMyjGhuyv+xjOTQNtbdy7R/V9cR7w4frJh5+PZd7lzg4dGNIab8QkW
sw5sWBds4Ni9m5/0xK3XmhQGZoYcQ7kjOfB3r5rOM229kb6uYAcNohx4b0Nb+cDP
Dmx0FKKzfjBJ+kdZyhgCBGwbfOKSkBrUGb8Jnpvr72lIGor9K+H3ZO18w+cFsxce
Cx/zeMLxTn71nQTw9Bu81/tHfPWV2adWkjNLRaX3f/skLl8Mb584TFl9QhaGYDUi
Ktg4qVH5IyeaahcGEN+F2kmoBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOtAlzA
1xRYwZD+cNn8wjDTx5fPMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0
MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzI4NS9GRTdGNjM3QzE0MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQz
OU1KMEZUOTFOdlBmaWZsSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPpE/oXvj1NzDa/tRPXSeVbnUw5yC/vQ19/aaF4VFzPKgkRt7nWCYjq8n7VNA
iqn47ePmGy6h4oFXynPKeqj15jH3zU4gSOTrJnRq1gBnM+DQqoId8OPYrzMB2MzS
1VYXcIl2/VBnB9PolD0DNi/uBdJvmatzwj7YQYKXOpD41EBwL/HKhyRq1yHawBr2
Xynxnsr7yLDPLLGUCujXCx+9NFC7ikZFKO9/E8Cc9WPov/M8yyhNVmlvqUszfPaU
kUuV92Bp3xCTf6Iig0zqWi7Mw8+XggHY3E/wEO6ffSESnIaIkDlIiClEJNmuUTdx
48fQDs7l/QYG9vtcsq938YSacw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:43 2026 by rpki-client