Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File:                     47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier:          ax3k/kawgaFNETXRzMACZ+V44XRPd5+QciXQWNLZxfM=
Subject key identifier:   2D:E9:2F:D1:AE:CC:E3:22:1E:C0:6A:C7:9E:02:6D:2A:53:5A:79:72
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number:          083F
Signing time:             Tue 24 Mar 2026 20:41:48 +0000
Manifest this update:     Tue 24 Mar 2026 20:41:47 +0000
Manifest next update:     Tue 31 Mar 2026 20:41:47 +0000
Files and hashes:         1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: nEKfmwEN+PFg7m0tBHparnwjRa1rKJ3eExEx/mz/tOE=)
                          2: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: hnYXXyG+HjpMZxqmpN5bsi+NSnbaTfeMqs5LW9a4ZFY=)
                          3: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: 1MVde0/1uHuiUovcFZ77TlqLfJ5SZhmH3WyAneTv/Ng=)
                          4: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: 6zTCHG3uP3cK2rw/2Eul1AW03DSAhrWGcY7OdFAvbQs=)
                          5: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: yhJxmZzQ2ZBaUh/TkISXu1owkmR7YDFhHEkIm62M8ls=)
                          6: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: /NNxt2PRGKi4jINC1uMA6kp3kzBSWqOUAHvR4Zmm09U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Mar 24 20:41:47 2026 GMT
            Not After : Mar 31 20:41:47 2026 GMT
        Subject: CN=69c2f70c-2a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:aa:8a:3e:0d:8c:e5:69:e2:27:40:91:3f:
                    25:06:9b:ca:dd:b1:29:6c:70:98:3f:85:a1:c3:cf:
                    0c:b1:ae:67:57:03:65:b7:73:d7:ce:02:86:22:74:
                    10:90:78:22:cc:6a:de:45:5b:da:36:37:01:95:54:
                    19:df:e0:f4:a0:fd:12:f8:0e:70:96:d6:2d:ae:32:
                    e9:81:9b:fd:52:36:a7:51:e9:05:ff:ff:2f:ba:51:
                    8f:be:83:32:2b:f0:5b:3d:f7:36:8b:10:ca:7e:61:
                    5a:b5:b3:c1:58:07:6b:12:e0:5e:12:f5:61:a1:23:
                    7e:b5:7e:30:bc:be:09:7a:13:98:1e:62:26:30:87:
                    26:7e:fa:1a:4b:8a:b0:aa:cd:1a:bb:44:d0:98:b6:
                    a8:57:c1:f9:70:6a:a5:84:ca:c6:44:ed:05:36:85:
                    db:6e:25:1b:12:0c:b0:2f:8d:64:58:11:e9:86:39:
                    fc:b0:e5:44:90:bc:8b:1d:a3:5f:77:78:73:03:cd:
                    36:15:ea:5c:37:df:e0:f5:09:e9:e5:35:cf:a9:f6:
                    aa:dd:64:eb:10:d4:b6:eb:b8:82:31:e5:c2:2d:20:
                    57:74:ca:5c:c5:d0:be:94:a4:0a:9e:9f:84:22:f8:
                    c2:25:ed:ad:49:15:4d:3f:40:38:d0:9a:e6:23:9b:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E9:2F:D1:AE:CC:E3:22:1E:C0:6A:C7:9E:02:6D:2A:53:5A:79:72
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:c4:2e:6e:25:da:0b:23:5c:7f:84:e7:83:38:8a:6b:fd:
         e2:90:af:af:41:41:8c:16:3b:0a:0b:3b:2c:f4:b0:12:2a:c7:
         20:a5:b5:29:f3:30:2c:4e:aa:42:36:14:19:ec:21:3b:25:23:
         e5:47:8d:6d:59:5a:5c:7e:70:ca:1e:3d:36:95:ef:4b:03:e3:
         47:80:2d:49:fa:2d:10:85:4f:f4:9e:a9:48:06:9c:4b:87:fe:
         02:cf:b3:3a:58:f7:b6:d0:c1:f3:ff:c6:ff:79:bb:41:f7:d1:
         63:34:34:3a:7e:35:74:2a:23:38:37:9b:24:7f:ae:79:8f:24:
         8a:eb:a0:3b:21:03:03:f4:ec:d5:df:92:a9:bc:6e:23:35:98:
         7c:dd:a4:a2:18:24:6e:6f:67:ab:fb:e6:35:a7:6a:68:ef:3e:
         96:d6:74:35:30:12:de:d1:c5:37:6e:a8:75:50:ef:c6:00:3f:
         1c:18:cb:cf:39:55:0f:20:f3:a7:15:e2:1b:62:7d:ca:e4:e5:
         07:b6:93:fb:96:b0:cc:d6:81:e2:e1:79:4b:8b:f6:10:af:aa:
         7f:56:57:06:e1:30:9c:45:95:f8:c6:27:03:1d:30:64:a9:e2:
         2f:79:18:0e:0f:72:5e:8f:c7:00:3e:e4:5c:85:aa:39:a5:05:
         e9:f0:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:29 2026 by rpki-client