Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File:                     v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier:          xV8Jd94ocQgub0/9k8mvPfXkFACfV5MHR8iRTRTJPXs=
Subject key identifier:   26:48:40:72:73:1E:D2:BB:6C:C1:7F:C3:63:40:BC:87:A2:7E:80:51
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer:       /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial:       3561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number:          353E
Signing time:             Tue 24 Mar 2026 14:27:55 +0000
Manifest this update:     Tue 24 Mar 2026 14:27:55 +0000
Manifest next update:     Tue 31 Mar 2026 14:27:55 +0000
Files and hashes:         1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: OReI+oSxrD2hOwAH6E6RTwSw/Nm2JRvg7Ez71KKxbsU=)
                          2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: TVT+VrCwN+2S5FW1bm5sxd84i0yBJ4gQw0ij0DCJg48=)
                          3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: fyCoCiiO7y+EBJPoJkxpBcTZgIDn8vB5c7S2G4eTbPo=)
                          4: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: Uqjl/yz6bKUW7WJIpt5tUN6JC1ETFbt55O9WS9w0YmU=)
                          5: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: pQqJ0LAppl5pw39LUl73K9sswzlGslgb4MnLz8TkjEE=)
                          6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: Bvg0itv7DhSkjmjfsA+zszmnSYp5+LIVofcg3GzlFNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
        Validity
            Not Before: Mar 24 14:27:55 2026 GMT
            Not After : Mar 31 14:27:55 2026 GMT
        Subject: CN=69c29f6b-249c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:20:40:81:86:86:e3:f6:29:d9:e9:f3:f6:
                    98:c3:fc:d9:ba:f6:f7:0a:9a:61:00:04:fb:52:26:
                    f5:d1:1d:f7:ca:1c:6e:5c:33:95:d1:27:2f:17:8e:
                    e7:13:7b:46:57:49:c0:01:77:9c:b1:f2:5e:be:e0:
                    39:00:5f:92:d3:bf:3d:f4:21:5f:1e:0a:cb:12:d8:
                    29:ad:13:4e:7f:34:67:85:25:dc:03:f5:b5:6e:7c:
                    1b:80:9d:b9:6c:15:0c:78:2b:53:ef:39:9f:06:7b:
                    0f:12:94:d6:8f:8a:c9:df:b6:eb:3f:49:e9:65:e1:
                    95:4b:58:05:97:94:4f:60:86:56:b2:b7:a8:c7:74:
                    30:5b:fe:ac:b0:19:01:4d:84:03:e5:7f:ef:63:b7:
                    8a:b3:54:e7:92:4c:9e:86:b7:35:2e:4c:46:59:a0:
                    ad:67:1b:31:e5:a6:09:eb:03:78:50:d5:3f:e1:53:
                    7a:2e:46:45:74:44:a9:c2:ae:9c:80:6d:3a:38:63:
                    b9:8e:31:bd:24:1e:c6:5e:60:eb:db:2e:29:43:d4:
                    69:6f:0c:22:b1:8f:cd:0c:9d:7c:61:3c:33:0f:14:
                    f6:66:84:fb:6f:0b:03:82:48:2a:db:54:1a:fb:be:
                    88:21:8a:8b:6f:d9:be:c1:55:22:ed:3e:3a:d6:b3:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:48:40:72:73:1E:D2:BB:6C:C1:7F:C3:63:40:BC:87:A2:7E:80:51
            X509v3 Authority Key Identifier:
                keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:81:43:88:6a:ec:a6:13:39:5b:c2:2a:de:b8:1f:7f:25:
         0c:e0:db:a8:9b:00:4d:92:9e:c5:9f:2e:e2:73:45:b4:c4:22:
         44:0c:df:a5:40:84:fc:c5:0d:95:92:fb:57:f3:c0:88:15:69:
         1b:26:e1:09:f8:39:89:45:d7:67:5f:1b:62:ec:9a:53:e9:54:
         0a:5f:be:ec:e7:22:b6:c8:02:84:3d:13:64:58:2e:00:3c:f7:
         c0:05:ed:9e:76:74:27:6d:0c:92:79:86:69:32:85:67:7b:e5:
         23:80:28:33:7e:0b:e6:c1:c4:c9:7d:09:3c:2b:c9:95:63:d2:
         6b:2b:fe:39:41:bd:81:c1:79:7b:b5:ac:5a:12:2b:de:96:57:
         09:06:89:0a:81:4b:d7:ee:44:0d:a6:a1:c5:9f:bb:3b:bb:4f:
         2f:d3:65:18:dc:2c:85:19:34:fb:1c:ed:f3:5a:6b:d7:43:08:
         72:e1:ac:03:b2:d8:9e:42:72:6b:17:3b:74:6e:82:2e:bb:52:
         3b:0c:2e:b9:7d:34:e0:96:76:f1:3e:70:e2:ca:b7:ca:9d:fb:
         09:fc:eb:b2:0b:e3:c8:05:be:ca:73:56:1c:2a:9a:73:8a:00:
         4e:38:75:d3:88:f7:6c:bf:ea:4a:c3:9e:ed:be:8f:d1:26:ad:
         15:ea:38:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:38 2026 by rpki-client