Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File:                     Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier:          XcbkGUotUIWw2B/wRDutH6NMQycZtYhFYXMxHSXd0IU=
Subject key identifier:   63:F0:DA:C2:16:AC:02:DD:91:F7:E0:86:F4:DB:78:E6:1B:6B:E4:7F
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       0508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number:          04BD
Signing time:             Tue 24 Mar 2026 23:45:50 +0000
Manifest this update:     Tue 24 Mar 2026 23:45:49 +0000
Manifest next update:     Tue 31 Mar 2026 23:45:49 +0000
Files and hashes:         1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: e5j+2BZ1Z6i3oYrBF7M1XyUkyA/5zbvMArPU3oyO2L4=)
                          2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
                          3: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
                          4: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
                          5: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
                          6: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
                          7: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
                          8: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
                          9: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
                          10: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
                          rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Mar 24 23:45:49 2026 GMT
            Not After : Mar 31 23:45:49 2026 GMT
        Subject: CN=69c3222e-98a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:6f:ec:ab:75:b3:37:a7:fe:bf:20:84:11:
                    dc:78:d5:af:e3:aa:34:13:43:87:8c:85:f5:fc:e3:
                    df:8a:76:af:b7:f1:cd:59:74:e2:00:2c:20:0b:e1:
                    13:79:8a:aa:82:a6:06:6d:cc:e9:2f:de:61:4a:1a:
                    80:b8:a2:5f:be:ab:34:d7:d1:8f:65:8a:01:87:f4:
                    66:d6:96:79:32:7b:a6:69:19:12:82:d1:73:7b:12:
                    eb:42:ed:32:f4:ec:d1:00:77:db:b8:12:4a:5b:a9:
                    b2:fe:bd:af:20:81:56:2c:0a:3a:48:99:90:c3:d3:
                    cb:96:1f:d1:c2:c1:d4:a0:ac:65:e4:d9:f0:6d:9f:
                    47:7b:bd:6d:56:2d:7b:0d:73:dd:17:78:88:fb:a4:
                    ef:ad:40:aa:34:c4:ec:7e:88:14:2c:d1:20:8c:f5:
                    83:08:3c:e8:71:3e:55:e1:57:f0:55:f4:a2:d2:24:
                    03:f6:64:52:73:b7:db:4d:bf:60:ca:5f:4c:ff:1c:
                    30:13:a5:51:38:d7:1f:3e:60:64:9c:9f:da:c4:27:
                    a2:9a:2c:83:61:8e:76:6e:e8:83:e5:42:94:4a:39:
                    5d:1d:5f:16:c2:ff:2f:1e:fb:2e:98:d0:3f:17:d1:
                    58:86:fe:e6:19:54:ea:2e:4f:0a:aa:ae:06:03:9a:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:DA:C2:16:AC:02:DD:91:F7:E0:86:F4:DB:78:E6:1B:6B:E4:7F
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:af:56:6c:64:18:d5:a5:06:62:3f:87:95:4c:43:41:a1:29:
         b9:8d:28:09:bd:73:73:a3:9f:0e:fb:59:52:37:d2:84:4f:74:
         3a:b1:88:2e:36:5e:84:c7:1c:e0:3d:13:52:17:5d:16:09:1d:
         67:0d:95:cc:81:19:43:4d:2d:f4:2b:53:56:78:2e:5f:8f:95:
         54:0a:ef:bf:87:af:10:6e:a2:31:30:93:a7:61:4b:4c:f7:0a:
         bc:f8:41:43:3f:06:3b:42:97:dd:f4:e6:a5:4a:07:ab:37:42:
         6a:0f:1e:28:e2:8a:f0:e1:80:ff:06:22:39:9a:54:bf:10:00:
         70:2b:29:b9:da:fc:71:b3:0e:4e:2a:29:2e:4f:48:ac:c0:7a:
         b0:c2:58:fe:7d:ec:d3:40:ec:3b:40:88:d5:80:a2:e6:c0:8d:
         37:b4:ee:88:04:c8:91:03:59:f9:81:10:63:34:72:f8:22:53:
         19:49:5a:3c:70:41:85:92:6d:79:66:28:a9:f5:6c:57:68:02:
         6c:bf:97:00:cf:48:08:54:ef:6f:3b:e5:28:2e:62:69:af:6b:
         35:2d:c4:15:a8:ce:1d:e0:b5:e2:f5:fa:ea:69:51:87:fd:1e:
         e4:66:4b:f4:19:cc:cc:87:38:93:98:1f:61:bd:9e:b9:0f:7d:
         35:3c:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:13 2026 by rpki-client