Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
File:                     igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json)
Hash identifier:          BiqKuaMNHRlsIhe+mjBwMNi9YGBllRphw7T8cBE0Crg=
Subject key identifier:   88:0F:55:50:90:94:1A:08:1E:32:49:E2:BE:98:1E:A9:5A:EE:96:F0
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Certificate issuer:       /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
Manifest number:          4D
Signing time:             Wed 25 Mar 2026 07:29:01 +0000
Manifest this update:     Wed 25 Mar 2026 07:29:01 +0000
Manifest next update:     Wed 01 Apr 2026 07:29:01 +0000
Files and hashes:         1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: cGpViy3bZgNnaxXUR4Nut5yg9jpalrShQ3fVS6gSiGI=)
                          2: 4B6ACA2E21B511F19C8EC293183D8C67.roa (hash: VPa6yyp/eEFlOacVhCtM4XlEL20jroaHa78D9GMgJRY=)
                          3: 8F8C10F021B511F192BB9899183D8C67.roa (hash: 0xuvjyrkoEqy2zxPFo6OwWWnDEpntu6AcHZQ20nczcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
                          rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
        Validity
            Not Before: Mar 25 07:29:01 2026 GMT
            Not After : Apr  1 07:29:01 2026 GMT
        Subject: CN=69c38ebd-9942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:55:ae:c8:d3:bc:76:b3:7e:f2:1a:a6:51:
                    1f:43:da:8f:4c:21:c4:70:c8:a5:48:e1:dc:df:fc:
                    e0:f6:0a:fd:66:53:88:e0:6b:df:8f:7e:9a:0a:72:
                    ce:a7:fc:45:9c:d6:cf:22:90:20:11:d7:91:28:1c:
                    ae:42:a7:e3:a8:db:5e:e4:78:41:77:ae:7c:4b:7c:
                    df:6c:e0:ed:8e:48:5a:06:7b:24:75:ad:92:59:d5:
                    28:be:85:1f:9f:db:92:e5:73:6a:48:bc:fd:68:4c:
                    be:b3:a3:67:e4:68:8d:b2:62:5c:12:af:1c:8f:d9:
                    e9:65:28:93:25:07:c2:0b:52:a9:7b:fd:3a:38:a8:
                    46:3d:bf:61:b9:e1:2b:a0:16:a5:9d:65:40:ab:a5:
                    d7:f4:99:99:c3:95:3e:e8:a0:a1:f0:6e:6c:dc:fc:
                    19:fe:cf:70:30:43:34:12:4c:04:ed:3c:72:23:07:
                    35:4a:2c:41:75:e6:f7:26:f8:18:84:ab:84:9d:c7:
                    01:51:7f:11:17:61:bc:55:6a:27:1c:91:ec:45:44:
                    4c:fb:6c:3f:7b:3c:e4:f0:1e:b1:a0:f8:67:52:81:
                    02:0e:55:8c:0f:39:c7:29:00:d0:d5:56:02:e9:eb:
                    49:56:ad:d2:4a:0c:8b:60:7f:d5:8f:74:7a:25:62:
                    3b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0F:55:50:90:94:1A:08:1E:32:49:E2:BE:98:1E:A9:5A:EE:96:F0
            X509v3 Authority Key Identifier:
                keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:33:f8:a0:a6:ba:a7:3f:e9:de:d5:cb:12:7c:45:5b:a0:
         8f:e2:45:b4:14:c0:53:3e:5c:0c:cd:1b:c8:9f:99:cc:30:bc:
         f9:18:16:6f:40:e3:59:93:16:9d:13:c5:7b:7f:4c:35:fc:7e:
         31:74:32:0e:bf:f4:4c:df:ae:3d:cb:7d:03:1f:2d:f2:58:79:
         16:5e:37:61:e5:df:9f:9d:68:95:f2:66:c9:68:db:98:a0:bc:
         6f:f9:be:32:01:fc:84:42:4c:49:1a:bf:d1:9d:2a:10:94:2f:
         de:17:59:97:77:b0:9e:b7:54:7e:84:e0:a4:47:f9:b7:26:f1:
         c9:f6:80:49:bb:a1:c2:f6:36:e7:7d:35:c2:f6:64:3a:18:36:
         67:e9:dc:2a:a3:f1:ad:57:66:76:3e:33:5f:75:94:06:36:e2:
         8f:5f:38:a6:52:b3:cd:b2:88:93:5a:b3:4e:f9:48:76:e1:2c:
         59:c9:80:15:2b:8d:c1:7e:1a:d8:5c:5f:52:66:0d:90:09:4d:
         1f:d5:2b:38:fb:df:f4:d0:1a:ba:2b:59:97:f4:2c:20:f4:c2:
         01:d0:85:e5:7e:28:2d:76:11:5b:b7:84:40:13:3b:85:b4:2b:
         f9:fa:88:e5:33:a4:54:5b:4e:4f:bb:58:8d:2c:65:9e:2f:e3:
         0d:48:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:34 2026 by rpki-client