Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
File:                     _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json)
Hash identifier:          SdRrw0qSQk88dE6JRgczKfIZ82tyZPIXjVzgtjfIHDs=
Subject key identifier:   AE:5D:CC:F0:7F:52:B4:E9:17:FC:89:66:42:2D:1B:4E:37:B0:AE:FF
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Certificate issuer:       /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial:       181D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
Manifest number:          180A
Signing time:             Tue 24 Mar 2026 16:26:46 +0000
Manifest this update:     Tue 24 Mar 2026 16:26:45 +0000
Manifest next update:     Tue 31 Mar 2026 16:26:45 +0000
Files and hashes:         1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: +yXpAUh0bBTZsWoMZxJwLn7aPDMWjdKw3v+LK8wiU6k=)
                          2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: QfnBq9xejz5ZwYAMH9XPFcemJYRZJ/r0BcQTGcREk70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
                          rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6173 (0x181d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
        Validity
            Not Before: Mar 24 16:26:45 2026 GMT
            Not After : Mar 31 16:26:45 2026 GMT
        Subject: CN=69c2bb46-c280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:02:79:d0:0d:52:3e:b5:85:84:04:24:23:
                    61:ab:9e:6f:45:46:e9:e5:bb:83:47:db:f6:d1:74:
                    c0:e9:fa:af:f4:fe:18:b4:00:22:4a:23:8e:47:bb:
                    95:3a:c3:29:10:9d:d1:f1:ab:33:63:bb:df:ef:47:
                    e5:0d:f0:94:82:4d:15:bf:a4:27:9e:2d:df:93:09:
                    9d:3c:b2:43:58:36:90:9c:f0:13:25:1a:16:70:6f:
                    4b:0a:5f:64:44:f9:71:c3:1b:e7:13:d7:13:9c:d9:
                    8f:a6:87:71:c2:8e:b0:3f:49:08:fb:d5:a5:f2:3f:
                    21:25:cb:62:b9:b3:3c:e4:89:33:69:e0:5d:f1:47:
                    97:06:08:86:22:cb:5b:77:18:a6:7d:98:c3:eb:62:
                    24:33:5b:ff:0d:68:85:42:c1:23:58:b9:2e:c9:48:
                    7a:dd:ab:2d:cc:f3:9e:43:ed:73:e1:43:c3:38:3d:
                    6e:6a:43:04:f2:0b:ff:60:94:23:c8:1d:21:c5:8a:
                    09:2e:e0:d6:77:f6:8a:3a:af:4e:8f:ce:dd:11:96:
                    96:9f:cd:0b:03:f3:72:c4:d2:73:26:95:9e:44:4d:
                    12:e1:cd:96:2b:df:a9:b8:fc:b9:54:eb:ac:de:59:
                    e2:3f:c7:a4:ac:64:16:36:43:95:7d:71:d6:75:23:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5D:CC:F0:7F:52:B4:E9:17:FC:89:66:42:2D:1B:4E:37:B0:AE:FF
            X509v3 Authority Key Identifier:
                keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:37:31:29:a6:4e:af:00:8e:f0:76:08:f3:bf:1a:1b:26:
         3c:63:ef:ec:b7:f9:2b:e8:46:80:35:15:69:0f:fb:07:71:32:
         5b:c7:d7:09:d8:d5:4e:4f:f4:2d:4d:0e:db:3b:9e:2e:7c:45:
         7b:e2:4a:11:cf:1e:73:6a:3e:6c:aa:4f:04:35:1a:41:ea:c6:
         fb:9f:38:f5:30:52:4a:18:75:1a:06:41:b7:8d:4a:b7:29:88:
         06:c3:c7:98:15:b7:56:3d:51:51:44:df:cf:91:ad:8f:97:7f:
         c0:3f:e4:56:89:aa:05:d0:57:3e:42:8b:1e:ec:5a:07:7d:c7:
         47:1d:86:03:a4:ff:e9:01:fd:8d:85:ca:f0:e6:e8:5c:10:e9:
         12:38:c4:05:b0:e9:4a:5c:ef:61:13:1d:94:c6:90:bd:bc:04:
         a1:79:46:ec:59:b1:9a:97:e7:ab:6f:af:61:19:d6:17:a1:d5:
         88:7a:6b:b3:40:28:2e:bf:9b:7b:32:09:ff:9c:b8:f6:b7:6f:
         11:45:78:4e:bd:fb:97:e1:da:31:5c:2d:a3:76:5e:c0:ce:0b:
         11:3d:95:43:ba:77:5c:f9:d3:a9:41:5b:6e:eb:75:1a:a5:dd:
         9d:63:5f:42:49:32:85:d0:d1:b1:a3:84:56:91:85:28:3b:9a:
         a5:33:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:51 2026 by rpki-client