Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
File:                     i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json)
Hash identifier:          hD1QyCZBjCX9wP/+92ebvjPklWuQJvLY0CUIf+lTmVQ=
Subject key identifier:   64:71:87:E3:1F:85:39:1B:BC:C3:B2:74:FF:D1:58:63:01:B0:AA:F5
Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
Certificate issuer:       /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
Manifest number:          01A0
Signing time:             Wed 25 Mar 2026 03:27:57 +0000
Manifest this update:     Wed 25 Mar 2026 03:27:57 +0000
Manifest next update:     Wed 01 Apr 2026 03:27:57 +0000
Files and hashes:         1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: knNUptB7dDr+WSP50u59UCavcZRejM1TuCfZn1dzH1E=)
                          2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: PUqNEsinpJETSBqgmrd5rPyIixPliezLoawnyww3fDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
                          rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
        Validity
            Not Before: Mar 25 03:27:57 2026 GMT
            Not After : Apr  1 03:27:57 2026 GMT
        Subject: CN=69c3563d-5a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:47:5c:82:7d:55:b1:03:04:36:79:94:59:16:
                    31:2d:38:4e:e4:fd:dc:f6:bb:51:93:f2:8f:e8:f4:
                    94:3e:0d:e2:d6:40:ab:a8:94:34:04:1e:14:a9:a9:
                    f0:55:a3:51:12:1e:ea:7c:67:99:6e:9f:4f:18:91:
                    84:94:fc:5a:5b:42:d0:9d:a9:0d:15:1d:84:0f:87:
                    8f:e4:d4:d7:18:e1:47:51:13:47:5f:a7:5b:b8:1d:
                    d2:e6:1a:c8:cc:64:6d:bb:0b:c3:e6:af:ba:ae:3f:
                    59:4f:3b:5f:77:c6:7d:6e:26:7a:e3:b3:4a:ff:22:
                    af:a9:a4:66:1e:dd:d6:c0:a0:b5:1f:69:db:de:db:
                    e9:63:e3:de:45:ae:c6:fb:f9:f7:66:2c:f5:93:8c:
                    4d:8a:8b:1e:ed:db:bb:1d:e7:2a:00:f8:e1:83:37:
                    21:f2:9a:fd:f0:58:68:60:70:75:19:82:fb:7b:12:
                    3d:6f:29:d3:9f:7b:57:0b:fb:de:0c:48:87:15:62:
                    81:ff:d2:44:a1:3f:16:54:f3:31:32:36:e9:a4:7f:
                    a4:3d:a3:51:f0:c9:c3:44:7d:a1:35:82:e1:5e:9b:
                    41:44:82:06:2f:1d:1b:a8:19:f3:97:11:a3:3f:91:
                    42:27:00:23:f5:ae:b9:a8:08:49:4c:ef:3f:a0:3b:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:87:E3:1F:85:39:1B:BC:C3:B2:74:FF:D1:58:63:01:B0:AA:F5
            X509v3 Authority Key Identifier:
                keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:ff:f0:37:95:7d:e5:38:59:85:44:4b:30:2e:69:f1:e8:
         4d:08:66:1f:f7:01:d2:3f:de:0d:ac:03:8f:bc:9d:42:a0:c3:
         97:f5:80:15:65:47:b9:06:83:7e:6e:81:ea:ff:93:6d:ff:b0:
         ee:c3:a7:8d:74:1c:98:86:57:8c:89:b5:f3:c3:27:d5:00:fb:
         22:ac:86:d7:b1:cb:43:7a:c0:f7:9c:45:66:23:09:f0:e3:ae:
         ad:4a:54:be:ab:ed:2a:75:49:87:da:55:c7:c6:bb:37:b8:15:
         40:a7:68:7c:21:6c:8c:e6:75:76:f6:c1:3c:ac:b3:f8:29:23:
         2f:5b:f8:f6:59:9c:e6:53:2b:13:0d:9a:92:e4:11:a8:42:51:
         bf:32:03:a8:03:45:88:79:14:68:7f:e6:60:48:0c:2d:87:04:
         fe:de:7d:99:d0:59:47:7d:dc:a6:d4:2e:0a:47:2d:c6:64:92:
         b7:f8:7b:41:37:74:e1:6c:dd:67:9e:2f:71:48:ea:fd:d2:39:
         c7:1d:38:a6:96:c7:4d:8c:35:d8:d5:78:08:06:7f:dd:e5:29:
         ce:ee:ab:dc:df:c2:6a:a6:e9:85:31:4c:28:c6:bd:7e:6c:76:
         2c:07:59:f8:96:dd:35:e5:95:93:5c:b4:ed:59:0d:5c:69:dd:
         0c:df:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:12 2026 by rpki-client