Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File:                     9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier:          F4O7W+0AxeKCQloGeyo5FH4NKIq2RcOx1BCxB7mFzgk=
Subject key identifier:   26:E4:D8:2A:E9:2E:E9:C3:78:BB:4D:85:A8:CC:E9:E9:A1:B9:FE:5D
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer:       /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial:       04AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number:          04A6
Signing time:             Wed 13 May 2026 00:02:32 +0000
Manifest this update:     Wed 13 May 2026 00:02:32 +0000
Manifest next update:     Wed 20 May 2026 00:02:32 +0000
Files and hashes:         1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: ei2utP5hu6FwjH1h0Qn248mcjza6aCyPFbp2hZihGb0=)
                          2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: 2rQJWPdUgZ0hNF0HMVFMTi4ImpvJKJ7bVW+COUiFLto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
                          rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
        Validity
            Not Before: May 13 00:02:32 2026 GMT
            Not After : May 20 00:02:32 2026 GMT
        Subject: CN=6a03bf98-fae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:ea:2d:46:a5:47:65:4d:7d:f5:d2:91:7f:
                    61:38:ad:3d:f7:7e:ca:ae:7d:c7:fc:6b:9f:bd:d6:
                    ad:25:f5:b9:5a:bc:25:62:37:8a:19:fe:98:10:7f:
                    2d:d9:db:f8:7e:84:22:f9:77:cc:38:65:3c:16:6e:
                    91:88:b3:49:be:3c:1c:7d:28:75:3f:f6:82:8f:ad:
                    55:04:dd:a9:51:c4:8a:73:d1:4e:18:36:b7:ff:86:
                    00:68:11:18:16:e3:8f:f9:d1:31:12:6d:e7:fb:81:
                    b8:e7:56:83:10:e9:5f:6f:ef:3e:77:82:4a:0f:64:
                    6a:f1:0a:60:af:80:6b:95:13:df:8c:59:ec:5c:d9:
                    0c:50:16:ac:88:70:c8:01:ce:c1:cd:21:b3:91:db:
                    30:7a:48:b2:5c:4e:3e:d5:7a:4f:11:a4:25:83:4f:
                    1b:4b:94:e1:d2:91:a9:fa:fc:f9:cd:21:d2:5c:86:
                    a5:07:99:3b:83:3e:48:60:01:99:4f:dc:d3:03:db:
                    c5:24:7c:16:cc:20:b4:1f:3b:47:bf:52:b2:c4:67:
                    07:a5:47:c1:66:8c:a8:50:e8:76:06:4a:ea:f0:95:
                    5c:e6:38:4a:5b:36:45:8d:57:38:11:2f:ee:28:be:
                    0f:a5:33:cf:33:72:bb:df:ee:ea:65:86:48:82:3b:
                    22:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E4:D8:2A:E9:2E:E9:C3:78:BB:4D:85:A8:CC:E9:E9:A1:B9:FE:5D
            X509v3 Authority Key Identifier:
                keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0e:0a:65:35:11:3c:d0:75:45:1a:b9:ae:0b:49:ae:75:47:
         06:d5:b7:a5:9b:f9:f9:86:53:f2:83:72:06:4b:1c:0b:fb:ac:
         50:5e:2a:50:3f:07:58:f5:f4:98:fb:4b:e2:49:cc:5c:f1:9a:
         9c:ad:e8:05:45:ae:2f:6e:ee:9a:cf:bb:94:6f:47:82:91:c7:
         26:76:82:1c:5a:c9:bc:12:c5:b7:84:42:e0:22:ab:72:aa:aa:
         2f:79:df:02:a4:4e:5f:0d:e8:f5:75:94:e2:9b:4a:8c:c7:d7:
         2c:a5:2e:a9:42:98:7a:87:47:cf:ca:65:f1:6c:07:bd:69:17:
         31:24:b7:72:ec:21:5a:d1:db:04:e3:6b:6a:24:eb:81:27:65:
         15:b5:0f:fd:a7:85:b2:ee:af:61:da:f0:fb:3e:0a:13:be:33:
         c2:5f:ff:59:55:ca:57:74:b8:e1:52:51:8f:14:54:08:62:d0:
         51:59:6c:4b:69:10:cb:d1:c5:06:f0:3e:12:b1:8e:5f:42:23:
         f5:05:0e:18:4f:e8:f3:20:93:22:a0:00:79:96:c7:a5:54:16:
         1a:ac:a0:a7:cb:6c:a0:94:5d:29:6a:3b:6b:08:25:b1:dd:81:
         82:fa:0e:21:cd:7a:88:86:76:7d:99:28:3a:01:0d:26:95:4f:
         54:83:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:14:08 2026 by rpki-client