Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File:                     9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier:          bWFoN3YJLme0wkXp3v3OolitIwb+OYv6nq8GQ9Vx/U0=
Subject key identifier:   0D:69:42:F2:D9:63:FD:D1:0D:B0:68:4C:0F:A1:4A:A1:DB:FD:39:90
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer:       /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial:       3542
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number:          3533
Signing time:             Sat 04 Apr 2026 14:47:37 +0000
Manifest this update:     Sat 04 Apr 2026 14:47:36 +0000
Manifest next update:     Sat 11 Apr 2026 14:47:36 +0000
Files and hashes:         1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: CsE42g54wolAL1//p9Sx6jDK2Gez7hbIG7IBvGP7chI=)
                          2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13634 (0x3542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
        Validity
            Not Before: Apr  4 14:47:36 2026 GMT
            Not After : Apr 11 14:47:36 2026 GMT
        Subject: CN=69d12488-b78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:0e:4d:0a:76:62:a8:a4:21:6c:5f:58:8a:
                    35:ab:e1:83:b1:a6:66:43:55:ed:9c:dd:15:cb:03:
                    96:e6:09:7f:0f:bc:80:ef:c6:44:fb:c3:f2:21:14:
                    c4:48:79:f2:0b:e1:1f:89:77:4a:7e:9a:6f:8b:81:
                    a3:97:16:8a:bc:22:1a:d3:e4:1c:7f:36:1f:c6:62:
                    b4:22:c3:e1:c0:98:eb:f4:75:fe:36:27:fc:b7:16:
                    90:7a:4e:85:30:f9:da:0f:f6:a3:ff:7e:4d:b9:06:
                    5e:00:36:4b:66:ad:09:b0:6b:e2:d6:e2:db:c1:f9:
                    8c:a7:c7:7f:98:4d:71:ae:ad:22:2e:71:bb:51:74:
                    c7:d8:95:12:d5:b9:2c:e3:83:23:bc:75:ac:6e:ec:
                    83:d1:e5:3f:aa:ba:c5:af:76:db:b2:5a:0f:ef:25:
                    49:7a:2f:96:8c:db:3c:8b:95:1c:d9:39:5c:85:c4:
                    0f:1e:34:b7:62:bc:ff:c7:cf:f6:e5:5a:9e:76:0a:
                    29:88:1f:99:d8:72:ba:c5:f5:3f:15:80:30:7e:ba:
                    ff:24:08:03:18:90:0f:25:5d:46:7f:43:33:91:7e:
                    bd:2c:4e:82:7b:9f:75:7a:2f:83:5b:70:f1:77:9b:
                    a9:db:51:cc:67:65:df:c0:04:83:66:01:39:ed:b7:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:69:42:F2:D9:63:FD:D1:0D:B0:68:4C:0F:A1:4A:A1:DB:FD:39:90
            X509v3 Authority Key Identifier:
                keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:4b:e7:ad:97:b2:62:a8:37:75:68:3d:30:40:28:09:4f:
         ef:98:21:94:94:32:f2:f0:2b:9b:04:5e:31:82:00:4e:71:9d:
         58:1c:0d:09:a9:94:8e:dd:06:76:1e:27:1f:22:db:2e:5f:a3:
         5d:0d:6c:82:46:bf:be:d3:ff:7c:3c:a7:0b:16:c8:ed:f0:0d:
         07:a0:de:c5:36:e6:bf:ef:8b:b4:9c:28:92:fa:60:4a:d5:0e:
         67:d9:8f:1e:f9:a0:d5:aa:47:b7:1d:2c:55:ca:b5:8f:01:05:
         61:f4:5d:8c:5d:5b:7d:0e:67:07:99:29:25:e0:df:bf:bc:db:
         70:8e:bd:85:7a:58:ed:23:08:9f:e2:88:eb:5f:8d:82:64:f6:
         d6:30:06:2c:c5:e3:eb:5d:bb:9b:91:59:ac:78:ca:2e:71:ae:
         11:36:7e:21:fa:40:6b:d4:ab:d9:33:70:3f:ed:d7:d5:16:77:
         a7:a3:9b:e7:04:7b:27:a6:d0:66:d3:e9:a2:52:79:ec:2f:75:
         ae:7b:2b:cd:84:e9:43:75:53:86:58:1f:68:0a:19:85:9a:c7:
         ec:24:ae:28:ca:37:dc:72:be:3e:64:8e:e8:b3:6b:ef:8a:ff:
         bd:b1:e6:4a:7a:74:e7:6f:33:15:a3:39:ab:01:79:2c:63:6c:
         df:29:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:14 2026 by rpki-client