Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File:                     ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier:          2PVmf6QHGvnPEmkUasdCWh3V26fFRi/mg6edE8c7WiE=
Subject key identifier:   2A:1A:AD:64:B5:7C:8E:98:73:F7:66:97:93:12:B0:47:DE:29:C3:AB
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer:       /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number:          02CD
Signing time:             Wed 25 Mar 2026 01:02:21 +0000
Manifest this update:     Wed 25 Mar 2026 01:02:21 +0000
Manifest next update:     Wed 01 Apr 2026 01:02:21 +0000
Files and hashes:         1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: +yPM66+PUgWN/pdMK/p1+Nzju1zgGyfsk3K/HVHHtec=)
                          2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: //55R4E9ZpIhb2zuQkkd7gmHW9uked3VnwqoLyMzgJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
                          rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
        Validity
            Not Before: Mar 25 01:02:21 2026 GMT
            Not After : Apr  1 01:02:21 2026 GMT
        Subject: CN=69c3341d-ef14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:57:50:a0:d7:b6:9a:18:fc:68:3f:89:c5:
                    b8:da:f0:d7:05:5a:d8:26:0b:59:4e:82:9b:00:8f:
                    25:08:e3:8e:19:04:8b:26:35:c0:d4:22:b5:34:ac:
                    9e:b0:36:5d:e0:9f:b2:55:5b:c1:41:1c:15:6f:9a:
                    d5:ca:96:81:ea:de:13:72:b3:fd:7f:dc:19:e3:96:
                    72:c8:19:69:ad:84:0f:41:b7:d4:93:e7:e7:6f:ef:
                    01:7c:a6:4c:9d:ae:52:6f:a5:a5:8e:f0:4d:eb:44:
                    23:a0:27:6a:0a:c5:57:d4:18:26:37:03:5c:59:f9:
                    37:10:c6:64:43:7d:d4:7f:c7:10:e0:69:cd:7c:f5:
                    88:31:86:77:45:d3:1b:92:3d:04:a0:b2:07:f1:8f:
                    30:51:ca:55:0b:ed:a3:e4:64:94:f1:5f:13:1e:2c:
                    a3:7f:3b:84:0c:6c:92:f6:10:7c:52:ee:49:cb:bc:
                    2e:05:a7:74:68:5c:e4:f9:34:72:23:2d:fd:b8:1a:
                    e9:ce:be:ca:47:1a:4d:e7:27:54:3d:19:1d:c8:a6:
                    9d:d1:28:7b:7a:4a:c3:8f:72:60:f4:66:55:a8:55:
                    4f:c4:c5:f2:82:d0:18:b0:02:1e:e0:5e:98:a5:78:
                    d9:2a:7c:03:f7:da:47:9f:f7:04:2c:03:af:19:4f:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1A:AD:64:B5:7C:8E:98:73:F7:66:97:93:12:B0:47:DE:29:C3:AB
            X509v3 Authority Key Identifier:
                keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:ee:c0:c6:4c:98:b1:05:eb:db:1b:fc:fe:8b:a6:c4:1f:
         8d:85:82:11:ab:05:66:9d:ea:c4:67:fb:7d:95:ed:af:27:3f:
         68:04:9d:fa:dd:42:36:eb:db:19:b9:d6:ad:ef:42:f5:98:f6:
         33:70:1f:ca:20:d6:a1:d6:ee:00:f1:8c:b8:8e:a2:1c:eb:9d:
         3d:24:8c:fa:e4:fb:9e:13:03:21:ed:64:d7:28:d6:16:99:86:
         be:2c:41:dd:dc:bb:92:81:c8:29:2a:6e:14:87:ca:b2:8f:9d:
         90:c1:b0:3a:81:77:68:5a:71:28:7a:c7:46:7b:f8:a8:ac:8d:
         7d:f7:06:f7:89:44:ee:48:03:19:ab:83:64:50:6b:24:9d:e1:
         9f:92:65:89:a1:87:44:43:63:a3:68:bf:b6:95:8d:87:07:95:
         50:4b:64:6e:c5:f9:27:fd:13:cc:2b:44:d1:0c:e6:39:32:d8:
         66:d8:ae:1b:ea:a6:8e:0e:18:c0:b4:5a:fb:c3:21:10:a6:8a:
         03:8c:ba:ee:94:27:f2:e5:d5:f7:fc:11:30:fd:d0:cb:eb:40:
         9b:a3:66:9b:62:73:95:e4:0c:4f:b6:f0:3f:bf:e2:1d:ea:25:
         22:0c:35:b2:cd:d2:bf:2e:f3:08:51:10:1e:05:62:96:78:a8:
         a6:9d:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:54 2026 by rpki-client