Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
File:                     w9DuaJTOj1bPawcKsT-YFp39QR8.mft (raw, json)
Hash identifier:          7VD8hmAqFPWXdquoR4PKawRD9Qe0/eBSq/3wyfWveYc=
Subject key identifier:   F6:60:C4:F6:06:87:33:1C:7B:23:0F:85:AA:1C:E2:88:48:4E:26:4E
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Certificate issuer:       /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
Manifest number:          21
Signing time:             Wed 25 Mar 2026 08:03:45 +0000
Manifest this update:     Wed 25 Mar 2026 08:03:45 +0000
Manifest next update:     Wed 01 Apr 2026 08:03:45 +0000
Files and hashes:         1: w9DuaJTOj1bPawcKsT-YFp39QR8.crl (hash: Upfq+/uhs3S/fYNERZe+YaIQchqNY7JXmPQY2hfX4bY=)
                          2: 5147C064FFE611F0819299B6756F56BC.roa (hash: dxqWrt5xYEHSokLX0i3WpHa5o0vkk7mwt4FA5//2TjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
                          rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
        Validity
            Not Before: Mar 25 08:03:45 2026 GMT
            Not After : Apr  1 08:03:45 2026 GMT
        Subject: CN=69c396e1-e3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:22:51:39:67:c8:55:2c:51:a6:1b:2e:97:
                    cb:4b:a3:fa:9d:9b:1c:c6:69:29:cb:7a:35:5a:82:
                    13:b4:0c:54:93:bd:1e:31:eb:ac:3a:9f:78:53:b0:
                    58:ad:af:c7:3f:98:c7:11:94:31:e0:3e:1e:e8:0a:
                    48:e6:bd:1b:20:d0:69:82:ae:c8:af:f6:7c:06:eb:
                    88:4d:9a:26:44:ca:ee:ef:1a:37:0b:a4:ed:69:df:
                    69:43:3f:2b:97:31:4f:bb:ed:72:6b:c6:fd:03:98:
                    c1:30:53:50:0d:b2:f9:1f:49:82:f8:0d:a0:5b:82:
                    48:d8:54:d4:04:4a:5a:19:e4:cc:04:2d:88:b8:76:
                    ff:7a:03:a3:f3:35:1e:de:83:e1:2d:6b:6d:21:8d:
                    bd:62:82:69:02:9f:50:b5:0d:af:84:a5:6e:05:f3:
                    7b:7b:1d:3c:d5:57:cd:1f:50:69:3c:13:a3:da:8b:
                    ac:51:ac:0f:72:d0:17:c4:72:31:06:be:50:83:fb:
                    75:4d:6f:a9:e1:49:3f:64:07:d5:ea:1b:28:6d:f1:
                    6d:d5:49:0f:c1:f4:e8:17:32:b2:60:e9:00:3f:1b:
                    8a:90:f2:9b:70:10:e8:d2:89:b3:12:69:5e:cb:f9:
                    c5:67:83:de:39:00:f9:7b:dd:ad:11:b2:6f:48:fd:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:C4:F6:06:87:33:1C:7B:23:0F:85:AA:1C:E2:88:48:4E:26:4E
            X509v3 Authority Key Identifier:
                keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:dd:46:ec:4f:91:43:9c:28:9a:b9:3d:f6:fb:a2:88:76:
         0c:81:14:be:bc:67:99:ed:46:db:00:69:98:92:ad:da:ed:05:
         e9:c0:be:e6:cf:47:74:26:be:3a:22:de:5a:5c:ac:37:9f:59:
         d2:c3:ce:74:ca:31:2a:a5:44:0c:f2:ff:3b:32:b0:78:21:52:
         00:4a:1e:64:c3:ac:ac:e7:26:1f:8a:7b:5d:14:b1:1a:4e:d1:
         3d:82:1c:d7:f1:50:41:00:44:7c:d0:c6:0a:2d:f0:c6:d0:25:
         d1:a3:e5:cb:29:cb:b1:8c:74:4a:c4:6c:80:64:eb:03:c7:91:
         c8:cf:6f:78:94:86:19:1f:e4:1b:a6:3b:d6:1d:89:67:42:a2:
         70:3f:10:53:3f:15:4a:57:2a:77:40:8c:2b:b2:c2:24:c3:ae:
         45:f3:fe:42:97:d7:df:ff:42:d1:2e:33:96:e1:b3:6e:11:85:
         ae:38:ea:17:38:04:48:c5:25:23:db:71:f3:11:75:62:29:d1:
         ac:e0:06:bd:44:01:f1:e3:5c:fd:ac:2c:47:03:b8:70:ad:fc:
         d5:90:c3:d5:e4:c4:fc:ab:48:47:b2:80:48:fa:92:2a:29:d0:
         9f:56:8f:3a:75:cc:cc:a5:78:7e:09:d4:7b:24:b6:f4:10:f7:
         fa:e6:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:02 2026 by rpki-client