Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
File:                     4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json)
Hash identifier:          +Wkz7HjJEv6OTmUHRMCiODRFneKqUgYvF9MCSTFb0FQ=
Subject key identifier:   F3:76:2C:70:EB:14:99:11:76:33:4A:18:C6:A1:39:62:17:C3:A7:6B
Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF
Certificate issuer:       /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
Manifest number:          0134
Signing time:             Wed 25 Mar 2026 04:39:48 +0000
Manifest this update:     Wed 25 Mar 2026 04:39:47 +0000
Manifest next update:     Wed 01 Apr 2026 04:39:47 +0000
Files and hashes:         1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: 0pNT/pjJtWmdzxWNXZI8WeaQKUoWVJwdg229kxDuR2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl
                          rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
        Validity
            Not Before: Mar 25 04:39:47 2026 GMT
            Not After : Apr  1 04:39:47 2026 GMT
        Subject: CN=69c36714-a0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:05:67:95:99:79:8a:94:3e:3e:45:bb:80:
                    b0:73:8c:ca:ca:86:25:8e:bd:f3:86:cc:49:83:79:
                    03:c2:6c:6b:1a:37:84:50:ad:98:d4:ce:fd:7e:09:
                    98:9c:b0:36:17:eb:b3:7d:01:f0:71:05:61:b1:fe:
                    ea:73:63:b7:86:6f:8c:ef:49:ef:04:23:ac:7a:dc:
                    f5:aa:b1:0c:e1:99:0f:51:12:0d:71:b9:ef:26:33:
                    7c:09:2c:4d:92:ce:0a:d0:d3:23:88:cf:ea:6d:02:
                    19:82:05:27:30:24:2b:f7:78:48:ae:6e:0f:8a:d7:
                    41:37:67:42:45:e7:07:f9:34:22:97:f4:e6:68:c0:
                    95:50:ac:3d:51:67:b1:ff:50:74:3b:3a:70:32:15:
                    4d:f1:7f:5d:68:ef:dc:cd:5c:71:1c:1b:31:58:7b:
                    a5:70:f6:24:ae:6e:4c:98:cf:54:2e:1b:f0:a6:c8:
                    41:18:82:98:e0:be:d4:f3:2c:73:b1:ba:3d:d4:a7:
                    b1:6d:4c:14:63:75:46:ce:86:ff:e3:37:8e:db:f5:
                    43:4d:69:6e:92:f7:f4:be:66:66:60:a8:ac:46:a4:
                    45:65:5a:dd:04:cf:28:c6:e0:8d:58:6d:89:e8:22:
                    07:8d:92:5e:42:2f:10:eb:d7:23:b3:6d:5a:3a:7a:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:76:2C:70:EB:14:99:11:76:33:4A:18:C6:A1:39:62:17:C3:A7:6B
            X509v3 Authority Key Identifier:
                keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:92:a6:91:ce:45:82:0e:52:97:d2:6b:ea:94:1f:33:84:
         b6:ff:61:91:90:9c:8f:9c:2a:65:90:9d:56:71:a9:1e:03:85:
         14:a4:7d:6c:b5:bd:04:a4:8b:ff:f7:27:02:64:c9:ea:9d:f0:
         19:74:26:4a:9a:1f:3e:df:58:6f:09:32:5d:77:0f:15:cb:2a:
         be:45:20:70:11:dd:52:6c:d8:49:73:cf:1b:86:70:e1:84:d3:
         f5:0c:6b:ff:bc:37:08:89:e4:84:5a:ea:dc:5a:b6:50:7a:c6:
         7f:2d:cf:a9:78:62:7e:76:f8:e7:13:cf:f2:e8:66:f7:c3:47:
         ce:ac:02:fa:59:61:7e:1d:42:bd:ce:7e:aa:12:55:0d:b5:c1:
         db:69:3c:82:66:cc:c4:89:0a:34:81:4d:35:50:b6:db:5b:f4:
         28:ff:c2:2e:90:69:47:30:ca:b0:02:bc:d6:79:10:33:9d:24:
         9d:7a:8a:e3:f6:27:29:81:1e:8b:47:1a:ac:40:e2:2b:67:a5:
         66:39:5d:7e:cc:ed:ff:d3:09:af:ca:39:d2:ce:8f:45:71:0f:
         00:3c:aa:0b:6b:9b:22:cd:7d:cc:f4:26:9d:44:83:09:8e:04:
         ca:a2:21:32:fe:34:0a:0c:17:50:ad:79:38:cb:c3:48:f5:57:
         a7:4e:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:39 2026 by rpki-client