Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
File:                     jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json)
Hash identifier:          8K178VvYABfHqfDxy5nE5Nj2luZ17kVUqat77lZYJzM=
Subject key identifier:   7D:70:F5:7A:B1:D8:E6:E2:98:62:C1:D5:8C:94:93:42:DC:77:5F:F6
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Certificate issuer:       /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial:       0AC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
Manifest number:          0A9F
Signing time:             Tue 24 Mar 2026 19:22:10 +0000
Manifest this update:     Tue 24 Mar 2026 19:22:10 +0000
Manifest next update:     Tue 31 Mar 2026 19:22:10 +0000
Files and hashes:         1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: zWGm3hlp/x8JSjVxCMt1vEb6kNULEfmhnDGvrVeYJUA=)
                          2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: a6rMYG+rFHuKykrCLdfsIEgFERicXBXZf3yRaSnpCZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2757 (0xac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
        Validity
            Not Before: Mar 24 19:22:10 2026 GMT
            Not After : Mar 31 19:22:10 2026 GMT
        Subject: CN=69c2e462-2f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:ef:ab:ee:9c:66:87:92:df:e5:08:0c:e0:
                    c5:a1:03:27:1a:f9:e1:e4:bb:f6:5e:28:03:c4:c7:
                    21:d3:34:1e:fe:d3:96:d4:48:1d:a0:cd:a8:f0:7a:
                    c9:27:20:48:30:c4:af:f3:d3:58:6a:37:bc:a1:62:
                    53:d6:d1:92:da:af:50:04:11:71:a4:41:a8:e1:e2:
                    76:58:4c:1b:50:df:aa:74:a7:1c:c3:79:e1:71:9b:
                    f1:52:ae:00:20:7a:cf:93:7a:76:ae:27:80:e7:be:
                    4f:2e:dd:69:64:07:8d:66:68:7a:38:58:b4:a6:a4:
                    b2:cc:40:f5:62:a2:f5:7b:81:21:0c:fa:40:bc:85:
                    e0:06:eb:9a:e6:05:4c:0a:cf:47:9c:ef:d3:da:20:
                    dc:06:b1:53:19:81:00:13:55:83:2b:0f:98:bd:8a:
                    7b:e1:6a:82:af:5d:76:dc:5d:86:6f:86:a0:9d:23:
                    4f:17:41:51:e0:c8:19:52:e3:09:0b:23:97:5a:d1:
                    90:85:92:9a:b8:89:28:16:cd:9b:99:65:2a:17:f4:
                    50:52:96:f5:8c:9d:31:71:f5:d1:60:59:8c:53:c3:
                    bc:86:1b:dc:0c:f7:64:c8:50:1e:50:b4:60:d4:3f:
                    b7:6d:a5:79:f9:64:f7:91:b5:48:4c:2e:9c:7d:30:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:F5:7A:B1:D8:E6:E2:98:62:C1:D5:8C:94:93:42:DC:77:5F:F6
            X509v3 Authority Key Identifier:
                keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fa:0a:e8:f8:c0:b6:7b:1e:88:09:6a:82:6c:23:6d:ec:62:
         56:45:d2:a6:75:ce:71:58:41:e8:f7:9f:6c:5d:d0:b1:f2:09:
         89:48:1e:a0:79:05:20:78:1d:8e:94:4a:ff:8d:37:1b:5b:0d:
         cd:9f:b9:47:52:02:5f:f1:c9:9d:cc:35:8d:f2:85:d4:d7:58:
         31:3c:5c:54:fb:4f:22:97:84:12:2a:7b:6d:be:e9:c9:f8:f9:
         95:ab:29:59:09:81:2a:2f:b1:57:9e:ac:ee:a5:2e:77:e1:e0:
         90:de:1f:04:8a:78:bd:6e:67:cc:a8:35:56:43:36:aa:b3:1f:
         0a:87:97:0e:56:df:62:b6:9d:24:d7:92:8d:22:8d:a5:74:05:
         47:0e:c2:4f:bc:d4:e9:2d:ad:fc:45:9a:72:96:43:69:18:4c:
         a9:49:78:b3:f6:77:b6:e2:68:17:5a:9d:f1:f6:1a:6f:21:ba:
         3c:11:8e:e2:01:41:90:a7:2b:a4:0a:7e:af:6d:65:56:6d:3e:
         0c:fd:d9:1a:81:b7:a7:e4:70:65:5d:ac:f4:70:97:b8:36:41:
         a7:4f:d0:6f:b2:43:b4:64:22:fb:9a:50:43:76:8a:13:40:4a:
         5a:c7:a8:48:2e:d9:db:24:ba:4a:36:e6:f2:b8:d1:31:92:74:
         22:85:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:27 2026 by rpki-client