Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File:                     xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier:          D4o2GbODHZ2CcRfWU4IyzEHnr+s6F7s31+1jqfjMLPc=
Subject key identifier:   EC:49:A9:E9:B2:E1:2A:F7:60:B1:A0:A3:3C:8A:08:DA:5B:2B:E1:63
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer:       /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number:          0109
Signing time:             Wed 25 Mar 2026 03:13:32 +0000
Manifest this update:     Wed 25 Mar 2026 03:13:31 +0000
Manifest next update:     Wed 01 Apr 2026 03:13:31 +0000
Files and hashes:         1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: r3upCVacm+TDZ4+GAON5Z6A2C7vW1AXFgbtCq9JP/0I=)
                          2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: PK2V6pJkKs1cUfHH+NplffRcxO64GLqymLJjQgGE2VI=)
                          3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: fdQvyXJ/WQPf7MvdyljKOEY7VxKzLOji0CmCTZOXpHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
        Validity
            Not Before: Mar 25 03:13:31 2026 GMT
            Not After : Apr  1 03:13:31 2026 GMT
        Subject: CN=69c352dc-c5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:b5:09:c9:b4:51:e4:17:b5:a5:40:a4:c9:
                    09:44:d9:ae:ac:2c:af:5a:6a:c8:91:7e:e9:40:81:
                    6e:00:d4:20:0a:26:8e:d0:ec:40:fb:43:bb:38:9e:
                    c1:20:59:c0:39:98:02:d3:2a:f3:9f:8b:74:0c:93:
                    c4:55:c9:ef:f1:0e:e7:c6:0f:ff:62:d6:b9:1e:d9:
                    8a:eb:49:1e:d4:ae:1e:34:4e:8d:58:2c:04:22:c3:
                    7d:68:01:5d:7d:7c:2f:95:d2:9f:cd:36:16:c5:90:
                    3b:6e:1e:e0:21:a3:7c:0d:35:6a:05:01:f6:57:db:
                    b2:0c:8f:73:e9:56:0b:40:ee:ed:81:3a:fb:cb:6a:
                    18:7f:bb:ec:a2:5d:a2:a3:02:4b:66:3c:33:5a:43:
                    67:47:42:16:2d:a4:6d:d6:1d:81:36:ad:c8:6d:a5:
                    d2:90:89:c0:de:b4:1b:a3:09:f1:9b:0c:6f:eb:06:
                    96:f2:44:4a:65:cc:b3:93:eb:0b:cf:b1:b6:ee:e6:
                    50:68:09:f7:e7:22:fc:08:a1:a4:48:74:32:49:d6:
                    88:c0:da:46:26:35:45:46:36:4a:3e:61:7f:8b:76:
                    37:6f:ff:8a:c5:b9:21:a1:ca:67:7e:05:2f:3c:5e:
                    ac:70:1c:df:f9:ec:0e:2b:9e:cc:57:ed:dd:9f:8a:
                    8c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:A9:E9:B2:E1:2A:F7:60:B1:A0:A3:3C:8A:08:DA:5B:2B:E1:63
            X509v3 Authority Key Identifier:
                keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:f0:7d:ad:36:42:71:37:fe:95:41:83:d4:c8:ed:31:dd:
         30:1d:4d:c0:ce:e0:1f:77:4b:42:e0:cb:93:c2:0f:b7:da:6b:
         1d:38:19:36:93:bd:77:ee:29:fd:13:ae:7b:82:0d:19:8c:85:
         cc:7a:a8:32:6b:e9:17:d7:0e:bb:2b:ba:7b:05:53:81:77:39:
         49:df:8d:80:72:d1:d6:11:df:2f:47:d8:8e:ea:89:4b:56:dd:
         03:36:81:be:11:cc:09:a0:81:25:ed:ce:90:14:e2:af:bc:99:
         43:8d:c5:cd:e0:a2:e0:49:5a:79:5f:e0:67:33:0f:d2:8d:81:
         9f:ef:6b:29:fd:7e:d7:d7:d3:ef:d5:3a:cf:f4:64:57:e7:9a:
         c6:2e:00:46:2e:9f:bc:ac:c5:13:40:4f:d6:19:2e:20:07:36:
         d6:ad:95:28:9c:25:db:8d:49:2c:4d:aa:8a:4f:30:a8:8c:9a:
         87:21:ee:c3:28:d1:c0:5d:25:44:fb:55:76:e1:99:9c:d8:03:
         7e:c9:29:74:17:44:86:f8:7b:2c:1b:d3:74:65:b3:d0:91:f3:
         09:f8:70:fb:be:fe:c1:1e:36:55:41:3b:81:6f:3b:b1:1f:5e:
         57:0f:b3:de:a4:1b:5a:f0:59:7f:29:94:fe:04:1b:66:c4:81:
         4a:92:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:28 2026 by rpki-client