Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
File:                     g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json)
Hash identifier:          jneH31KvoNPFJ0ZZTw9b8ICq1qbcmEtikZi/b/ycqg0=
Subject key identifier:   13:2E:5B:8E:D6:08:26:39:64:78:7E:DB:9C:5A:0C:63:98:F9:3E:67
Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Certificate issuer:       /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Certificate serial:       0F4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
Manifest number:          0F39
Signing time:             Thu 26 Mar 2026 17:31:49 +0000
Manifest this update:     Thu 26 Mar 2026 17:31:48 +0000
Manifest next update:     Thu 02 Apr 2026 17:31:48 +0000
Files and hashes:         1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: //+mI0psAGEGtG/9+cJiAf0bMxTPNbUwP4EdFfPRObk=)
                          2: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: xaInwsIFwSvXf77xJy6gHhrOwnVxW3VAeaaETUl65dA=)
                          3: E1769D329EF711EABE23195AC4F9AE02.roa (hash: t/D8IYKB/rM46dZgcTuJ/X2CfX2Uf2X0FQN7ZHOdxv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3918 (0xf4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
        Validity
            Not Before: Mar 26 17:31:48 2026 GMT
            Not After : Apr  2 17:31:48 2026 GMT
        Subject: CN=69c56d85-ce75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:b3:65:88:77:e4:e6:3f:9d:5e:4d:66:46:
                    bc:13:fa:f4:83:29:23:9d:4b:7d:75:6c:3e:51:41:
                    47:9d:10:29:39:8c:56:68:88:63:9b:44:af:3e:bb:
                    61:b1:cd:5d:95:c5:2e:6b:70:bd:f0:0a:8b:00:ba:
                    7b:73:1d:d0:0c:7e:84:e9:bf:3f:cb:61:57:4e:7b:
                    6a:f4:f8:23:f7:f1:67:e1:04:3d:cb:97:2b:50:9b:
                    de:82:5d:53:ba:44:07:84:5f:f9:5f:93:1e:44:07:
                    c9:01:68:90:fe:0e:f9:04:40:21:67:9b:77:6e:7a:
                    12:9a:04:7d:75:c9:34:67:d0:2c:db:12:75:77:ed:
                    f5:05:08:2a:f0:79:a5:82:ba:98:ef:95:02:ed:cd:
                    a3:d6:39:84:98:00:2e:d1:57:ac:a0:5e:fa:0d:5e:
                    16:6c:1e:b9:73:87:db:76:94:44:2b:ba:7a:dc:a7:
                    fc:ce:b5:b2:1c:3a:7a:61:1d:ac:80:77:49:9e:9f:
                    77:22:fd:dc:b4:c9:2c:b8:09:4c:5f:d3:b3:62:11:
                    0f:8a:83:b8:d3:a0:6a:c1:6c:19:66:a9:79:4e:07:
                    ca:ab:0d:61:7a:61:d0:6b:c1:10:ca:20:96:66:a7:
                    27:84:45:05:af:e7:8b:21:c3:5e:99:9f:df:f2:8e:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2E:5B:8E:D6:08:26:39:64:78:7E:DB:9C:5A:0C:63:98:F9:3E:67
            X509v3 Authority Key Identifier:
                keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:8d:98:b4:8e:79:35:d5:3b:d9:d2:c7:da:d4:e0:62:53:
         45:3f:ac:1e:83:f7:2a:9a:d1:ca:90:88:6c:00:12:5c:22:80:
         b2:e0:2a:a8:98:c5:25:40:73:21:04:cb:3d:a6:0d:9b:0b:b1:
         12:ad:20:39:08:e5:0e:c5:cc:69:e3:99:1a:a2:33:f3:52:87:
         22:08:24:ac:50:99:60:b9:bf:9a:14:c3:08:58:e9:96:64:79:
         b2:82:e2:38:98:e4:bb:b5:61:af:f4:af:c4:80:3e:63:01:3c:
         8e:2d:06:66:e4:f0:a9:61:d2:d6:a1:c7:ea:47:b1:d3:0a:44:
         ef:22:8d:27:b6:26:b1:38:11:8d:62:a7:b9:9d:ab:9c:e3:fa:
         2b:3e:9e:cf:4f:73:fc:d3:18:f8:30:21:d5:88:a2:47:71:e7:
         a9:d6:fa:36:d5:6f:15:62:80:b5:47:1b:a9:26:0b:5c:20:4f:
         d1:74:45:51:61:9a:9b:52:63:7c:95:0f:e1:06:6f:d9:0a:fb:
         80:53:b0:ab:e0:69:0f:4e:21:94:5f:fd:ec:f2:66:60:7a:ab:
         ad:53:3c:f8:34:d7:23:f7:19:41:0e:94:e4:61:84:2d:c8:03:
         c5:25:9d:86:e8:16:f4:e2:00:0b:68:28:6f:eb:77:9c:70:b9:
         b7:7b:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:42:16 2026 by rpki-client