Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File:                     cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier:          8mIp/x7UP5nl7bPSg1zeErl1hwE4CCS4YCjgw3No52A=
Subject key identifier:   D7:D1:9E:A0:84:D4:F9:A1:19:3C:95:9E:01:F6:1C:0E:64:70:D9:89
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer:       /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial:       0806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number:          0800
Signing time:             Sat 04 Apr 2026 20:56:44 +0000
Manifest this update:     Sat 04 Apr 2026 20:56:43 +0000
Manifest next update:     Sat 11 Apr 2026 20:56:43 +0000
Files and hashes:         1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: 9R7hHklcaPfPr6AjjQgxKzAtLVOdGSG2fU2wgQpafII=)
                          2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: dWIZyaUXtS3+l+2OTps4tqiCz5E9mMM/Wq+9JsY8Y08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
                          rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
        Validity
            Not Before: Apr  4 20:56:43 2026 GMT
            Not After : Apr 11 20:56:43 2026 GMT
        Subject: CN=69d17b0c-dc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:13:4f:b7:59:ca:5e:49:be:66:3e:b5:70:
                    9f:f7:ff:86:b0:d3:94:df:48:25:89:7a:c5:fd:13:
                    07:7a:6f:26:ad:73:fe:8f:41:ae:c9:b5:09:e3:64:
                    a1:af:7b:53:16:10:a3:e4:1d:a8:10:a9:60:49:dc:
                    55:c1:74:b0:3d:0e:2a:fb:e4:29:a6:d4:da:26:f2:
                    05:b9:fa:bd:23:d8:c5:af:1b:fa:85:0c:6f:53:21:
                    bf:d8:5f:10:2d:74:bd:82:36:bf:88:f8:ff:a8:1f:
                    93:2b:f7:46:a0:1d:36:87:fe:1b:bd:fa:5e:ba:c5:
                    6e:aa:c5:8c:b0:cc:46:4c:ff:29:c3:4b:1f:68:ce:
                    a8:64:26:82:cb:55:2a:66:9b:fb:b2:c5:71:aa:54:
                    84:c4:53:a2:1a:8c:ca:8d:bc:80:c4:d7:81:75:21:
                    2f:91:7b:96:9a:2c:33:dd:f8:4c:c8:70:c3:97:3e:
                    d5:dc:98:3a:f2:8d:1a:07:17:3d:69:97:5e:14:53:
                    4d:53:94:a7:3a:ac:15:cf:e3:aa:d5:e9:60:e5:58:
                    b7:ec:d9:b2:3f:72:97:fe:8b:56:98:1f:17:94:4d:
                    83:ae:9d:c7:b2:d0:81:dd:9b:07:6d:5e:ef:40:aa:
                    db:f6:56:e3:fe:22:cf:10:24:3f:b7:49:49:3b:7f:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:9E:A0:84:D4:F9:A1:19:3C:95:9E:01:F6:1C:0E:64:70:D9:89
            X509v3 Authority Key Identifier:
                keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:52:61:c5:23:f5:94:f3:7f:e4:17:a6:87:e2:1c:72:ed:27:
         14:36:b6:1a:74:a8:0f:25:78:ef:ea:2c:20:a8:92:2a:ad:66:
         c6:bd:06:c3:b6:ad:37:8b:8e:9c:5d:62:b0:7a:31:83:b2:8e:
         73:c8:ba:3c:32:59:24:03:f5:2b:20:21:72:4b:87:a0:a9:be:
         00:76:e1:ca:b1:66:9a:4b:c7:5e:66:e4:5c:af:8c:94:ee:18:
         26:78:14:6a:86:fb:54:48:6f:d0:e7:cb:ed:86:57:0c:07:a9:
         bd:25:2c:87:29:04:21:05:66:56:0a:6e:4d:83:30:dc:e8:19:
         3c:93:98:33:a8:df:fb:06:b7:f7:b0:73:9c:65:c0:95:21:62:
         37:cc:f0:d3:82:19:10:d4:a9:ac:46:30:64:95:d3:dc:7f:bc:
         be:c3:3a:7b:a3:4b:b1:6b:46:b3:91:42:3f:9e:f5:21:7c:ac:
         3f:32:4f:36:25:93:85:8e:c7:31:e3:6d:87:a4:d4:7a:01:63:
         59:04:1d:3c:2f:24:da:10:cb:75:30:e8:21:f9:f5:77:c4:71:
         c9:9f:fc:ac:2d:5b:2c:83:dc:53:75:e8:8c:5d:44:ca:31:fb:
         85:75:e2:9b:28:f7:b7:3f:a5:87:ef:6c:6a:8f:06:4c:44:a8:
         cf:ab:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:56 2026 by rpki-client