Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
File:                     4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json)
Hash identifier:          fxmy4oT1wxbnsf9OzSDFMq+7J8oOEwvrTFYD1PjK9jI=
Subject key identifier:   5D:F6:3D:21:C8:A6:38:B2:67:A2:5B:DC:A1:A4:12:7F:0C:32:36:77
Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
Certificate issuer:       /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
Manifest number:          09
Signing time:             Wed 25 Mar 2026 08:25:24 +0000
Manifest this update:     Wed 25 Mar 2026 08:25:24 +0000
Manifest next update:     Wed 01 Apr 2026 08:25:24 +0000
Files and hashes:         1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: m10OFSP5PKWPoZBul+uddN8x/zRXPW496yTmz4KvcwQ=)
                          2: 192C64F2252311F18B88524DC4833773.roa (hash: hVhdvs7GH6X86vaiCeryWerFVJfvpNrRVfFuhErwgtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
        Validity
            Not Before: Mar 25 08:25:24 2026 GMT
            Not After : Apr  1 08:25:24 2026 GMT
        Subject: CN=69c39bf4-17a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:f3:72:83:cf:e5:45:de:88:5b:9c:f9:94:
                    78:06:d0:8c:21:7a:60:9e:72:7e:d2:07:5f:d6:39:
                    92:af:b9:d7:fd:bc:23:75:52:f9:a3:5d:bb:b7:1b:
                    f8:6f:93:27:b0:4d:0c:35:28:94:1b:d1:df:5a:0f:
                    3a:b1:44:11:2b:56:e5:57:4d:31:9f:da:eb:f5:85:
                    b4:a7:9d:28:eb:dd:1e:19:43:b3:df:92:6b:28:b0:
                    95:44:6b:e1:49:78:79:93:53:48:ff:10:df:75:cd:
                    9c:67:45:5f:58:37:64:ae:5a:74:0d:96:76:a4:87:
                    36:83:8f:4a:6e:12:6a:1d:ad:83:61:74:1d:79:32:
                    30:15:8f:c1:42:3e:26:22:84:4c:b6:7d:ef:9c:12:
                    b6:cb:ae:98:f2:84:a6:15:ae:3c:64:07:4f:26:fb:
                    88:65:24:6e:a2:e0:df:84:2b:8a:3e:66:0a:9a:2e:
                    fa:71:ec:32:e6:46:cb:cd:e2:89:ec:62:36:bc:59:
                    4c:2f:db:ba:5e:ee:4d:01:94:0c:b5:71:76:42:00:
                    ab:23:82:03:e5:bc:fc:fb:fb:41:2d:5e:6b:df:49:
                    60:1b:f6:ff:a3:2a:46:3c:a6:db:f5:e6:9a:04:3a:
                    26:9b:13:74:db:2b:b5:b9:3e:74:f6:ca:1c:2e:0d:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F6:3D:21:C8:A6:38:B2:67:A2:5B:DC:A1:A4:12:7F:0C:32:36:77
            X509v3 Authority Key Identifier:
                keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:26:69:7a:b6:4c:26:d0:07:91:f6:e9:a4:8f:06:51:75:7b:
         14:06:a5:ee:3f:ac:5d:b7:44:cc:3d:1f:80:66:49:42:a8:fd:
         61:45:0a:1d:bc:0a:09:39:26:62:57:f1:10:43:ef:86:43:e9:
         96:82:52:96:5b:9c:f4:95:05:37:47:5b:38:cc:55:34:e1:55:
         e5:df:7a:c8:0b:ae:09:24:bd:8e:7b:f3:4a:ee:59:ab:89:7c:
         53:a5:3d:5d:a2:6c:9f:64:a2:f3:1b:7a:29:ce:dc:de:05:91:
         7e:c8:f2:8c:43:68:39:67:b8:e2:cc:91:4e:27:48:9a:2f:61:
         da:4f:3e:c1:e1:f6:1d:be:b9:12:0d:95:44:fe:49:c5:13:f4:
         3f:d6:ed:90:8a:dd:d2:06:a2:77:dc:ff:90:9f:2a:89:29:3d:
         72:fc:b7:a1:d9:fc:08:fa:c8:75:5c:e4:81:17:97:83:68:8f:
         e8:c8:eb:c1:94:31:ac:55:0d:02:5b:b9:c0:24:15:59:89:0e:
         40:3c:2f:fe:4f:34:80:9c:bf:8a:a1:56:c5:31:b3:b0:b4:9b:
         7a:64:4f:29:a0:14:df:e4:22:59:3e:71:25:ac:4f:38:26:07:
         a0:ea:5e:5a:13:08:0d:bc:16:3a:9a:c4:83:e4:52:62:4b:5e:
         51:f8:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:14:57 2026 by rpki-client