Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
File:                     c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json)
Hash identifier:          r46V2cSDq4VgpDdPywnNH9JL5+iP5x24GVOVRnPIwFY=
Subject key identifier:   44:A6:00:F8:9B:F4:B8:A5:52:92:0F:78:75:66:80:6F:EC:84:63:B4
Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Certificate issuer:       /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
Manifest number:          1551
Signing time:             Sat 04 Apr 2026 18:08:53 +0000
Manifest this update:     Sat 04 Apr 2026 18:08:52 +0000
Manifest next update:     Sat 11 Apr 2026 18:08:52 +0000
Files and hashes:         1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: Y3T2YDExrOR0eZXsSekhVj3+Z6KbtbZGV1kQle788Wc=)
                          2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: FSZHvt0li5V9PrWONUmCstAsGBd4ZV8qfRlket+oLrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
        Validity
            Not Before: Apr  4 18:08:52 2026 GMT
            Not After : Apr 11 18:08:52 2026 GMT
        Subject: CN=69d153b5-b9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:ae:83:28:31:2d:4b:8f:6e:40:94:d3:42:
                    3b:ca:0a:df:a6:bc:f0:47:38:8c:88:ed:8d:c7:e7:
                    7b:4c:57:12:ac:ee:6c:ea:7a:ad:62:5c:d2:a7:be:
                    cf:1e:12:38:5e:e9:ee:c9:69:f3:32:45:06:50:5a:
                    79:3c:6e:eb:eb:9d:76:39:d6:2b:7f:42:61:12:01:
                    58:5f:7c:04:c5:f5:50:30:fd:60:5d:a1:12:42:ce:
                    5c:0c:66:79:88:b3:3a:b3:52:11:04:1a:3c:ea:dd:
                    05:25:93:dc:77:f4:f4:89:17:97:ac:83:8d:d0:df:
                    63:2c:04:84:75:46:14:62:7b:a6:f9:ff:f7:78:b7:
                    1b:ef:ea:5f:ea:a9:fd:8c:35:9f:48:98:6b:19:9f:
                    ad:7b:ac:98:9a:74:4e:4a:30:b7:14:0c:93:55:27:
                    60:ea:67:8f:ee:a9:bd:66:c6:de:55:4a:8a:b1:a7:
                    9d:d6:7d:6b:34:47:89:d7:ec:bf:d9:e2:a5:46:77:
                    59:8d:e2:47:22:67:d3:2c:3e:f9:9d:7a:c0:55:f1:
                    dc:43:e7:9b:b4:fe:45:7c:f4:10:3e:48:05:83:a2:
                    0f:ca:cb:a1:51:98:29:26:37:d6:16:7f:81:e6:17:
                    d6:38:a4:62:db:9c:0f:e1:fc:91:eb:93:0d:20:77:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:00:F8:9B:F4:B8:A5:52:92:0F:78:75:66:80:6F:EC:84:63:B4
            X509v3 Authority Key Identifier:
                keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:ed:5e:65:e5:7e:2f:53:f4:a7:75:ef:7b:80:53:e4:6f:
         32:dc:e7:47:30:76:77:79:f3:1c:ed:71:1b:1c:a6:e9:b3:73:
         4b:79:5c:b1:0b:d2:19:da:df:12:19:47:70:d1:ab:2d:83:d4:
         ae:af:c8:d1:64:6b:63:cf:30:ad:3f:f8:bd:6f:48:68:36:6c:
         37:b0:f2:93:96:6a:84:a9:0e:6d:b1:fc:c2:aa:47:58:d0:2c:
         1f:cd:e7:6f:70:bb:6b:bc:c7:91:6c:e3:b1:93:9e:ab:13:d1:
         9c:bd:50:49:17:b6:02:69:db:92:56:c8:f3:fe:ad:03:05:c1:
         12:72:17:df:c4:25:83:35:32:93:d3:00:10:93:70:9c:fd:2a:
         0f:e3:04:87:97:a4:76:57:72:c2:4a:a1:3e:a8:7f:11:1d:49:
         ff:d4:a4:ea:01:76:a0:b3:20:96:30:36:b2:1a:30:38:6f:9f:
         c1:4d:47:3f:be:2a:1d:b4:7b:8c:9d:09:3f:b8:78:b4:a7:4e:
         c9:cc:f6:fd:44:2b:09:4c:08:5e:d0:e7:78:d4:5c:3f:fe:4f:
         0b:b7:76:07:56:d8:15:ea:0f:2d:fe:04:df:54:f9:59:a8:38:
         13:d9:d1:c1:85:95:f7:f9:11:7f:be:50:66:78:5f:66:3d:e4:
         3b:9b:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:28 2026 by rpki-client