Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File:                     MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier:          8ylOqT1G2PC6iOFWd8nfZWfZb5DfD31SaRf2Wv+QEtw=
Subject key identifier:   31:D6:21:F1:5C:3D:CF:3C:80:9A:1B:D7:75:BF:95:27:BB:FC:BA:25
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number:          01DD
Signing time:             Fri 27 Mar 2026 03:02:07 +0000
Manifest this update:     Fri 27 Mar 2026 03:02:07 +0000
Manifest next update:     Fri 03 Apr 2026 03:02:07 +0000
Files and hashes:         1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: dz+biQqW6mTNL5RiSifJ+UPt7fmwdioIqf75NOYNr9Q=)
                          2: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
                          3: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
                          4: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
                          5: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
                          6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Mar 27 03:02:07 2026 GMT
            Not After : Apr  3 03:02:07 2026 GMT
        Subject: CN=69c5f32f-2348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:ae:49:ad:0b:69:5b:f2:ba:16:bd:01:04:
                    1d:dd:28:dd:3a:54:05:46:d6:77:00:fc:67:60:2e:
                    9d:8e:f7:61:b9:a9:dc:46:c2:45:06:ac:35:01:3f:
                    72:7e:f3:20:26:c3:58:b0:8e:15:fc:49:7e:ca:c2:
                    5a:24:7e:fc:8f:d9:18:f6:15:d5:32:42:04:09:82:
                    17:c7:fe:c5:f3:c8:55:cc:aa:83:02:aa:0f:6b:f6:
                    2d:70:d5:d4:d9:85:2d:42:c5:49:cf:a2:c2:ab:5c:
                    c2:08:ed:b2:20:70:b2:d9:b2:4c:bc:f0:2e:1c:c6:
                    0c:64:c8:41:cb:2f:c9:f3:2c:86:99:a2:20:4f:d5:
                    12:a7:3b:03:02:cc:ca:35:b3:0e:bc:5b:81:94:47:
                    8b:ce:4d:23:19:cf:a0:8e:08:53:39:46:04:ba:65:
                    39:a3:58:02:dc:81:54:c0:05:38:22:28:8b:cd:53:
                    9e:f2:3a:83:f1:98:74:f6:98:49:fe:d9:13:8e:16:
                    44:bc:cd:78:d4:3f:ce:cd:7e:36:dc:4b:f2:c3:83:
                    a9:ee:90:95:18:7e:be:74:c2:10:8b:42:0e:67:14:
                    c4:13:91:71:d3:62:74:76:7e:a0:b2:d7:80:00:18:
                    40:97:0d:4d:8b:8a:aa:db:af:44:dd:50:44:bd:02:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:21:F1:5C:3D:CF:3C:80:9A:1B:D7:75:BF:95:27:BB:FC:BA:25
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:7e:f3:df:6a:fc:1c:96:db:7e:a3:0c:67:44:5e:14:db:
         41:c3:4b:50:73:9a:32:2d:2c:a3:34:78:e0:56:43:39:d2:03:
         cc:28:54:17:c7:02:f1:64:c0:fa:3d:10:6d:d9:75:ee:c0:c8:
         7e:66:85:5c:59:95:fb:a6:fa:61:18:b1:2d:23:56:d5:b4:2f:
         73:f3:a2:ae:da:0d:ee:01:1d:1f:49:17:08:3d:b2:e1:47:2e:
         49:f3:36:56:af:ba:83:ab:3c:20:d3:3a:db:7f:04:47:fe:91:
         2f:80:67:6a:99:8e:7a:02:39:d4:ab:1b:28:77:69:6e:29:de:
         6a:29:63:75:4c:47:1f:fa:4f:18:83:ab:30:42:0e:f2:74:62:
         2e:d5:76:16:1c:44:26:03:bd:3c:48:93:20:dc:47:df:a9:48:
         87:ea:c3:0c:18:38:ad:60:c1:e7:0e:ce:72:7f:e2:9e:a8:3e:
         b8:6d:1a:50:7b:27:22:3c:4f:22:49:6a:a3:0d:e0:92:89:78:
         0b:2c:92:23:72:32:ba:0b:bb:08:1b:6a:29:0c:a9:da:9b:78:
         31:a2:83:d7:1a:83:2b:c6:97:97:f8:d4:98:b6:b9:20:4b:94:
         11:b8:84:bb:2e:1b:f7:00:82:ed:3c:cc:4e:cb:74:3f:16:c6:
         fd:ac:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:04 2026 by rpki-client