Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
File:                     0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json)
Hash identifier:          5UhkJ9MM9V0DsMHbGsQlQiSOcnr/D+rRZwiAUgXr1X0=
Subject key identifier:   67:09:34:74:92:88:AA:C0:2E:10:EE:B7:66:FD:86:18:F4:77:FF:18
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Certificate issuer:       /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial:       0571
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
Manifest number:          0569
Signing time:             Tue 24 Mar 2026 19:26:17 +0000
Manifest this update:     Tue 24 Mar 2026 19:26:17 +0000
Manifest next update:     Tue 31 Mar 2026 19:26:17 +0000
Files and hashes:         1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: jx+hPCpoYTGFwsBPkmUXgQXMOx9/Etqze+ruKGnlJco=)
                          2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: y/RhPkVawSLf+7/JutT935tMP9izv7b3n4uLlLkmRJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
                          rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
        Validity
            Not Before: Mar 24 19:26:17 2026 GMT
            Not After : Mar 31 19:26:17 2026 GMT
        Subject: CN=69c2e559-4926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:e3:fd:48:db:ec:99:e6:35:74:23:d9:8d:
                    2f:1b:13:f6:d2:9f:14:d5:0e:b0:8f:08:74:81:0c:
                    5a:61:a2:91:0d:4c:73:5e:ce:6b:c0:c4:bc:83:6b:
                    13:41:3d:64:35:c9:67:08:eb:4b:3c:86:0c:47:e1:
                    7a:bc:c7:fb:9f:6c:82:d2:93:4f:6a:cd:66:ca:f6:
                    14:fd:2e:4c:af:52:da:8b:d1:4c:f0:dd:37:67:49:
                    03:ff:64:22:0a:fe:0c:67:c9:9c:ce:81:eb:71:fa:
                    2c:24:04:01:19:b3:48:b9:52:e6:90:8c:8b:52:3f:
                    14:c0:64:35:b1:7e:ea:74:e2:71:43:c1:e7:4a:6e:
                    c8:66:ee:22:80:9e:73:97:e9:c1:6e:20:a7:fe:fe:
                    e2:5f:01:98:6f:e4:11:d0:c2:32:9a:52:1a:ac:eb:
                    66:90:5e:c8:aa:31:38:5f:24:f6:8a:41:84:f7:c3:
                    60:88:0d:b9:c1:a9:02:d9:2e:d2:e3:f3:09:98:25:
                    dc:db:66:af:1d:6e:31:2b:b0:3d:e6:99:bb:f5:3b:
                    fc:2b:60:8f:4b:a2:ee:e2:e7:4e:5b:c1:c9:61:ba:
                    4e:09:0c:f2:6b:77:ce:c2:96:2b:1b:9e:9c:8b:67:
                    25:98:bc:4e:26:5f:e8:9d:0a:92:59:0e:a2:bc:a5:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:34:74:92:88:AA:C0:2E:10:EE:B7:66:FD:86:18:F4:77:FF:18
            X509v3 Authority Key Identifier:
                keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:2d:df:03:fc:e9:53:9f:56:67:e3:31:26:57:fb:06:93:
         ae:11:83:2e:ce:34:d5:77:90:c8:6f:85:41:66:9d:9c:58:2a:
         2f:1c:9e:51:8e:99:57:b5:8f:79:b9:6c:41:28:cc:28:88:47:
         d3:8b:02:4d:bc:44:25:ca:07:7a:a2:48:a4:dc:f6:e8:69:2c:
         01:16:fc:fd:96:d1:0b:5d:c6:b4:87:48:cf:01:94:33:d9:87:
         27:40:31:50:e9:32:6e:81:1b:29:5c:ff:05:51:51:30:15:8e:
         0a:8d:16:81:76:7a:3e:f0:04:9d:b7:1a:ac:8e:1d:1e:74:ca:
         3e:39:27:01:4f:fe:17:06:cb:47:ed:2b:f3:03:60:1d:36:18:
         44:46:76:5e:00:66:8b:de:ef:d5:d8:e9:f3:fa:45:ca:69:2a:
         1d:42:a3:ba:7c:d7:ad:db:36:74:41:e1:ad:ee:d7:45:5c:3f:
         25:8e:b9:c7:42:a0:88:b5:4b:8e:ce:76:ec:1f:27:d3:a7:0e:
         34:53:6a:e9:c8:eb:0c:fe:26:e0:73:2e:c2:51:8e:a9:c1:d7:
         87:83:df:e8:20:6f:53:37:f8:fb:63:ba:69:33:0c:28:1e:ec:
         19:4a:53:9b:35:73:d7:ac:b4:a2:ad:f5:16:08:54:b8:c6:40:
         b3:68:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:05:17 2026 by rpki-client