Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File:                     4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier:          OQACZxWtYGAp0NRL0+Jr0Vtui/mXtFo8wZZjogUuSpk=
Subject key identifier:   41:F0:2F:79:D2:6F:75:A8:B4:6C:6B:E1:FA:B6:58:C2:F3:E4:C3:70
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer:       /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number:          9E
Signing time:             Wed 25 Mar 2026 06:32:56 +0000
Manifest this update:     Wed 25 Mar 2026 06:32:56 +0000
Manifest next update:     Wed 01 Apr 2026 06:32:56 +0000
Files and hashes:         1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: ieyviqVM+t1pOUIIuCnPiZ5Fvy8gnVtH9c8wvU5l1YE=)
                          2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
        Validity
            Not Before: Mar 25 06:32:56 2026 GMT
            Not After : Apr  1 06:32:56 2026 GMT
        Subject: CN=69c38198-47bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:97:54:0a:96:2f:5b:ac:90:7a:dc:ac:3c:
                    97:0c:ce:95:30:6b:b2:06:ea:f2:af:97:98:55:18:
                    88:fc:b5:db:e6:d5:db:e0:55:fb:de:39:64:53:0a:
                    c4:81:87:ce:91:47:d7:2e:80:62:72:4a:61:0a:1a:
                    d8:00:83:b1:e7:df:fe:d5:58:ec:51:1f:70:2e:a1:
                    47:05:10:b5:07:9b:18:8b:38:3a:e9:b4:e0:b7:e5:
                    e1:ba:26:e4:ba:69:6d:d8:90:e9:d5:6b:fa:8d:72:
                    5b:ad:ef:cf:be:20:50:fc:3a:e2:74:04:98:71:e4:
                    fe:e4:7a:f7:bd:d3:5a:8a:53:dd:6f:5e:96:52:ac:
                    f9:78:d2:fc:1e:30:c2:e8:dc:a7:ae:32:9a:7a:8c:
                    a3:e8:c6:c9:1f:db:8a:d0:ef:b8:aa:1e:2a:fc:72:
                    c5:ec:0b:ef:1a:d3:29:f0:cc:62:a9:72:4d:4d:4f:
                    c2:26:36:67:7e:38:10:da:ee:09:22:9f:c8:4b:8b:
                    08:f2:24:a0:e9:7c:ee:cb:ac:27:b9:48:fa:97:3a:
                    ba:38:b3:0e:fe:ed:0b:6f:68:91:ee:f0:64:a9:80:
                    4f:ce:46:b8:67:08:9f:55:d5:41:3a:2b:df:68:86:
                    2a:e6:d1:d6:10:98:6e:94:d3:f8:fc:99:04:1b:f1:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F0:2F:79:D2:6F:75:A8:B4:6C:6B:E1:FA:B6:58:C2:F3:E4:C3:70
            X509v3 Authority Key Identifier:
                keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:26:be:54:a7:58:6d:61:19:6e:21:80:25:78:81:bd:af:ac:
         ea:ba:4d:63:97:e4:10:d0:97:0d:1f:8f:03:fb:9c:69:fb:10:
         83:97:d8:4f:18:76:e7:0c:63:14:e9:40:08:a7:0f:15:01:64:
         9a:d1:95:20:7d:0a:01:5b:75:e1:b8:49:c8:ba:96:c3:9b:50:
         c8:8c:d2:a3:41:ea:d0:31:8d:b8:38:57:31:70:da:ba:48:54:
         c6:fe:75:21:ce:f5:e6:78:36:81:68:fd:63:b2:eb:bc:20:3a:
         4c:31:1f:6f:8a:c6:8a:68:93:d5:85:c1:39:85:62:5c:42:e7:
         84:6f:35:43:63:4b:ee:7b:a6:e6:26:b4:16:a9:08:8d:26:b5:
         cd:15:26:0d:04:97:5d:42:47:a7:b0:2b:4d:f6:8d:90:84:22:
         20:58:f9:da:66:c6:e2:23:47:63:70:6f:b8:71:bb:7d:2d:81:
         5b:9c:3d:ca:da:2e:da:e6:74:08:e4:84:8e:44:1b:59:00:b3:
         57:c1:dc:3d:ea:ec:4c:44:a8:53:56:d8:cd:e9:87:49:8f:33:
         ac:bc:94:bd:31:10:35:52:94:90:49:59:bf:06:5a:a1:d6:4b:
         37:c3:0e:27:41:7b:24:a0:ae:31:d6:d8:3c:89:3c:8f:70:73:
         09:f1:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:39 2026 by rpki-client