Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File:                     kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier:          Ii6J8HlIZuK5CQA54zLa0vUSY0nuGtvMe0Ge4h9tpx4=
Subject key identifier:   93:78:7D:FB:F7:C2:9F:04:C0:53:62:D8:13:46:86:48:B2:DC:E7:4A
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer:       /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial:       0AA2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number:          0A8C
Signing time:             Sat 18 Apr 2026 16:02:23 +0000
Manifest this update:     Sat 18 Apr 2026 16:02:22 +0000
Manifest next update:     Sat 25 Apr 2026 16:02:22 +0000
Files and hashes:         1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: 4dYFxBXAhJVlwQHqToRkBHXiK3K3OngiaPe+0+xpdIM=)
                          2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: hWqJvrXEvhGgOQ+/93XwLBgBWmguHUoLhWu4DnVR4Hc=)
                          3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: hn18JZ2Pgz3ZiW7c+VLyxV/L8S6CymPlAeocWGjlF5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
        Validity
            Not Before: Apr 18 16:02:22 2026 GMT
            Not After : Apr 25 16:02:22 2026 GMT
        Subject: CN=69e3ab0f-77a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:cd:e9:36:78:be:56:65:b0:d0:04:e7:27:
                    6c:11:48:13:5f:ab:5d:92:47:45:d4:ff:5a:82:2a:
                    01:e8:be:87:3c:f2:c9:c0:60:6f:1c:e4:be:48:45:
                    14:12:d6:f3:d2:e1:65:39:2c:99:9a:0e:aa:ab:bb:
                    f5:3b:27:50:8a:c4:26:44:61:f0:56:c8:46:dc:8d:
                    93:7c:86:79:d4:02:9d:a2:fc:a8:2f:f4:ce:ad:73:
                    7a:2f:31:d7:35:e5:02:4d:55:4e:29:65:1a:25:1d:
                    77:44:ad:da:86:46:74:0d:6f:14:0a:f8:83:fd:b6:
                    cd:0a:79:52:34:88:1f:f8:b5:24:9a:0e:6a:e3:6e:
                    31:d2:3d:ac:24:46:83:6d:82:96:03:fb:68:30:60:
                    d8:96:a9:c2:40:01:b2:ea:bb:24:9c:87:95:86:68:
                    65:c6:63:fe:d8:5d:c8:bd:65:66:24:b4:5f:fa:dc:
                    96:d6:f2:8b:ef:0b:3c:29:68:f4:e4:89:22:89:05:
                    53:58:3f:9d:a0:cc:03:5a:06:f3:04:63:fb:0e:67:
                    51:64:ef:96:03:ec:93:b6:2a:4d:f5:8f:b1:48:c4:
                    46:6c:4f:c2:59:37:1c:56:7e:47:d2:01:9c:b5:8e:
                    d9:d8:4e:0a:01:62:8a:59:05:ce:f9:1e:91:65:25:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:7D:FB:F7:C2:9F:04:C0:53:62:D8:13:46:86:48:B2:DC:E7:4A
            X509v3 Authority Key Identifier:
                keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:73:b3:cd:d4:3f:b6:2e:0b:53:eb:71:83:42:c8:87:ca:84:
         61:e6:c4:3a:7f:fe:ea:2b:4b:35:c7:8b:d9:34:09:6c:b7:c6:
         1a:15:58:8e:26:61:ce:54:54:e1:57:2b:87:be:24:cd:e1:c9:
         2d:b2:f7:a6:3c:b1:cf:ae:d8:4a:a5:1c:05:bc:46:f4:6c:c1:
         a5:5a:d5:09:76:15:73:39:f8:c8:14:01:dc:e3:e0:e5:64:02:
         2c:71:2b:71:30:96:7e:47:32:9c:43:96:91:48:ab:2a:12:0f:
         2c:3c:33:72:41:4f:59:a4:01:b6:97:b2:7d:85:8c:2c:77:70:
         d4:d9:36:5a:59:c5:04:fc:64:25:95:67:8f:6a:6d:4b:34:09:
         4b:ac:9d:b3:c2:01:6b:1b:c4:d0:33:e9:56:2f:71:ab:af:db:
         c9:cd:3f:8e:e0:41:7b:49:af:b5:8c:59:2c:d2:21:53:e5:2a:
         87:bc:f7:6f:64:38:f1:46:e0:e1:17:2f:e5:fc:8d:bd:65:2e:
         ce:42:3a:48:71:8a:21:16:04:5a:c1:06:95:e6:d9:75:fc:a5:
         53:35:26:94:d7:bb:03:b6:40:11:60:9a:6e:84:39:b2:9a:8d:
         bc:32:c4:9a:8f:c7:50:e9:a3:85:3d:6f:5d:91:1c:41:e1:61:
         b3:31:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:53 2026 by rpki-client