Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
File:                     sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json)
Hash identifier:          m4sDH/GljJn9RC3NAA7jFnE+hGZ2aFpmJSAxdPguZ5I=
Subject key identifier:   37:92:00:BB:0C:F8:22:2A:48:E3:5A:3D:5D:A3:16:AA:71:F0:A7:EC
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Certificate issuer:       /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
Manifest number:          0285
Signing time:             Wed 25 Mar 2026 01:16:00 +0000
Manifest this update:     Wed 25 Mar 2026 01:15:59 +0000
Manifest next update:     Wed 01 Apr 2026 01:15:59 +0000
Files and hashes:         1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: /IrcW8e179lDH8Q8QD/uzAV+dc4p0YZo+kj1aYWBhug=)
                          2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=)
                          3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
                          rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
        Validity
            Not Before: Mar 25 01:15:59 2026 GMT
            Not After : Apr  1 01:15:59 2026 GMT
        Subject: CN=69c3374f-4d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:04:38:18:2a:41:37:98:05:de:0a:a9:41:
                    14:8b:d5:c6:9a:8c:2d:ba:4d:86:01:58:f7:fc:b4:
                    b9:b4:f1:20:87:43:8f:79:5d:60:c5:c5:a5:00:95:
                    db:33:89:66:65:79:f7:c1:51:2f:b6:8c:68:6d:0a:
                    f6:f5:c5:5d:ee:8b:11:58:eb:1a:b9:19:6d:d9:92:
                    30:27:c6:2d:ec:ba:d6:40:a5:64:60:01:c5:85:cc:
                    3a:17:62:4a:8b:89:97:5f:61:0a:9c:bc:1b:ad:10:
                    65:3d:65:ab:4c:b5:fe:8d:4d:dc:c9:01:c6:ca:7e:
                    75:e3:08:f9:e0:36:22:bf:46:d9:16:91:f2:d4:e2:
                    f8:20:17:9f:e5:eb:2a:d1:ae:f9:ef:1a:92:0b:e5:
                    2c:dd:f7:f7:dc:61:b0:81:7e:71:72:86:99:fe:45:
                    f4:c0:52:88:91:48:ad:cd:05:f1:f7:4e:75:fd:fc:
                    86:e8:a1:a6:19:0f:7f:dd:dc:3a:7d:0b:ce:85:f8:
                    88:18:c4:07:11:67:30:62:ee:d2:0c:1c:c3:48:7d:
                    e1:eb:fa:c1:4f:a6:ef:a1:b6:3e:d3:c2:64:67:c3:
                    c5:c5:c5:9a:cc:59:e9:95:19:e7:8c:94:1a:dc:08:
                    f4:47:6f:d8:a0:15:12:2d:45:e2:53:83:39:e3:f8:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:92:00:BB:0C:F8:22:2A:48:E3:5A:3D:5D:A3:16:AA:71:F0:A7:EC
            X509v3 Authority Key Identifier:
                keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:76:e2:5e:7b:ad:9c:8c:e2:80:72:66:d9:41:75:0c:49:4a:
         07:f2:22:e9:23:7e:c6:4c:dd:f6:37:91:b7:ff:86:4f:b9:51:
         8e:3a:a3:22:d4:a8:a3:7c:4c:3f:50:22:c4:a2:88:4d:30:43:
         12:75:c4:b8:c1:e4:dd:32:ef:ca:1f:c8:04:0f:92:59:56:56:
         ff:fd:02:cb:e7:96:19:ba:3b:4d:1e:8e:22:e3:46:81:33:dd:
         34:8c:c9:5d:41:6d:78:3f:b6:a8:91:84:ed:86:7d:9b:47:ce:
         9d:fb:42:e8:99:0c:8a:6a:53:2d:38:2b:01:20:7a:1b:09:f0:
         aa:bf:35:fd:5f:bd:a2:22:63:6e:0f:b2:c6:a5:ac:24:c9:cc:
         bd:b9:40:70:ff:0f:94:e6:4a:09:39:b8:c8:be:ed:4e:16:45:
         7f:2a:bf:d7:27:b6:33:45:a0:1b:9c:13:ee:75:80:9f:0f:b4:
         a8:ac:b7:45:63:44:c2:84:12:4d:fb:12:9e:63:f9:c2:88:75:
         67:36:de:6f:a0:b1:ef:0e:d4:27:7f:9e:e2:78:8b:0f:c6:b2:
         61:8b:e3:0c:71:5f:bc:cc:eb:57:51:ee:d4:35:ea:e4:d6:1c:
         71:eb:80:77:0a:86:0c:1a:2b:c9:fe:2b:cd:8f:85:dc:70:4d:
         b4:1d:ca:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:25 2026 by rpki-client