Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File:                     MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier:          IjgHJnwtGSyjvEuMLq3BKrpmuwGYOfXFI9U23hbAUiY=
Subject key identifier:   3F:9B:79:D0:A6:7E:16:18:CF:41:6A:64:89:AA:DA:CD:76:FA:65:9C
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer:       /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number:          37
Signing time:             Fri 17 Apr 2026 08:15:47 +0000
Manifest this update:     Fri 17 Apr 2026 08:15:46 +0000
Manifest next update:     Fri 24 Apr 2026 08:15:46 +0000
Files and hashes:         1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: jAouETCD4YXn/rmwLkTv3r7CBHqm9smZMqVmabV4GdM=)
                          2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
        Validity
            Not Before: Apr 17 08:15:46 2026 GMT
            Not After : Apr 24 08:15:46 2026 GMT
        Subject: CN=69e1ec32-5240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:47:8c:1a:13:74:f0:7b:30:03:ff:af:ed:35:
                    37:bb:2b:e7:0d:ef:94:0f:eb:bb:98:bc:fe:80:f1:
                    9a:86:53:ac:cf:fa:d5:0d:2f:e6:c2:de:22:2b:bc:
                    18:1e:a8:a9:00:5b:25:49:d7:ed:e1:ac:94:f6:fa:
                    fc:49:ed:22:62:54:74:f4:3e:b9:3d:57:4b:bf:fb:
                    1e:0f:d0:d3:50:55:2a:20:d0:d4:38:79:59:a7:cc:
                    3c:c0:35:44:9b:48:4b:4c:96:ed:de:e6:e9:da:50:
                    b1:9c:34:c3:84:41:8a:8b:f1:c2:d4:76:cb:47:d1:
                    8f:bc:31:3a:14:eb:c9:0b:e9:08:08:21:c8:c9:71:
                    c2:98:8f:48:40:6d:df:e3:70:8d:51:cf:05:3d:df:
                    d6:74:1b:24:91:60:cf:29:3e:fa:d9:b0:74:4e:49:
                    45:63:1b:09:b4:fd:92:fd:3b:a9:e6:b6:44:cc:b7:
                    a3:e9:91:e3:f8:b1:87:24:3e:4a:cd:7c:f6:07:d8:
                    d8:ca:4c:83:19:13:cf:ee:69:56:04:89:43:f2:8e:
                    bb:50:fe:1c:9d:6d:f3:4c:bf:d9:41:d9:44:df:91:
                    78:a8:41:18:cb:8d:ae:fe:79:62:c5:04:4c:52:51:
                    d8:49:df:17:82:58:1b:e3:21:01:88:2a:27:25:e7:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9B:79:D0:A6:7E:16:18:CF:41:6A:64:89:AA:DA:CD:76:FA:65:9C
            X509v3 Authority Key Identifier:
                keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:63:a9:2b:9f:60:60:c5:85:74:42:a3:cf:e0:90:6f:4f:
         6b:54:b5:68:41:3a:d3:ae:a2:77:b0:c4:37:a6:de:24:4d:e7:
         8c:c7:5b:6a:72:c5:4d:ce:3a:34:bc:b1:3c:57:eb:27:78:e9:
         97:9e:3a:8f:c7:c4:aa:11:bb:da:62:df:2e:34:ba:a2:fb:85:
         5c:1d:c1:60:09:9f:4c:ab:0f:4e:7c:62:ef:4e:a8:7d:0b:50:
         79:f6:0c:87:4c:52:9d:1d:38:6a:16:5b:ae:70:5c:45:17:a8:
         8e:26:08:31:9b:e9:ca:3b:54:02:72:97:62:cf:01:16:04:54:
         d0:bb:28:00:e4:8c:40:6f:96:5f:86:a1:0d:23:bd:d3:49:b1:
         06:b6:6b:2e:a8:1b:36:5f:ee:83:ae:a6:e6:66:4d:21:50:97:
         46:07:2d:1c:a9:2c:7a:1f:cc:e2:26:cb:09:cb:42:51:c7:64:
         0e:5f:20:27:10:25:8c:00:d8:a1:91:40:92:16:de:ca:86:3a:
         a2:ba:23:ac:76:12:aa:9f:73:1a:fc:a6:f6:0b:39:04:dc:17:
         c5:8f:60:f7:e9:f8:79:96:75:f8:ab:9e:2b:69:48:07:03:d1:
         b2:98:89:4c:2b:28:85:c9:16:a9:60:af:a2:aa:04:21:24:24:
         09:4c:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:41 2026 by rpki-client