Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
File:                     a0-8524QyfbwCQHlAC-OEPPpr38.mft (raw, json)
Hash identifier:          gmm+Q/02BQIw3XpJIRh2wdRzlRJ6jPGNVO5HYR0xvXY=
Subject key identifier:   E3:E2:3F:D0:8A:A2:FE:A5:EB:50:08:74:3B:EC:92:47:BB:C4:10:5D
Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F
Certificate issuer:       /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
Manifest number:          0B
Signing time:             Wed 25 Mar 2026 08:19:11 +0000
Manifest this update:     Wed 25 Mar 2026 08:19:11 +0000
Manifest next update:     Wed 01 Apr 2026 08:19:11 +0000
Files and hashes:         1: a0-8524QyfbwCQHlAC-OEPPpr38.crl (hash: CQ5SGRsnGP3uRq6NgRpRKR74wlbZ0iRJKY+i3KVmYBQ=)
                          2: 05CB75D01B4E11F190BF0D05243D8C67.roa (hash: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl
                          rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
        Validity
            Not Before: Mar 25 08:19:11 2026 GMT
            Not After : Apr  1 08:19:11 2026 GMT
        Subject: CN=69c39a7f-3378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:ad:f0:3e:bd:1b:b7:51:2d:d7:e9:ed:be:
                    6a:81:e0:ca:f8:f7:a9:fb:cc:04:ca:b2:ac:ed:81:
                    25:8e:17:eb:ac:56:24:75:92:a7:f3:47:f4:12:bc:
                    2b:f0:8f:77:b1:4a:8c:71:a4:e9:cf:de:3d:89:3c:
                    0e:1d:92:88:9b:11:ec:35:3b:9d:8a:00:73:a6:94:
                    7a:eb:f4:89:ab:46:f9:e3:9f:51:90:1f:a0:91:2f:
                    3f:5d:e1:66:ce:6c:fb:94:35:d3:0e:3d:41:c2:0c:
                    b5:59:0c:cf:ac:5a:8e:d3:b1:b9:f4:a1:2e:4d:87:
                    ec:84:6e:c0:cd:d4:ef:c6:b9:fb:14:8c:d2:2f:41:
                    1d:53:52:f0:78:9e:04:05:d9:1c:f6:4e:a7:44:c7:
                    e3:6d:9c:6b:e6:ac:65:2a:8b:c8:82:4c:4c:72:02:
                    43:26:fb:ec:2b:cb:90:34:bb:dc:f4:78:9c:d2:4a:
                    c7:e9:a0:e6:13:ff:1e:b5:c3:36:b9:0b:0e:3f:64:
                    e4:0f:20:17:64:5b:79:6e:45:0a:38:98:9c:15:c7:
                    34:85:f8:a7:47:e2:8d:79:e4:a2:8b:0f:26:9f:43:
                    2a:85:15:4d:ac:70:d5:39:89:23:5d:93:30:da:01:
                    e3:54:45:4a:38:7a:ec:67:30:c8:9d:75:73:2f:aa:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:3F:D0:8A:A2:FE:A5:EB:50:08:74:3B:EC:92:47:BB:C4:10:5D
            X509v3 Authority Key Identifier:
                keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:1e:df:b7:3c:98:0e:b5:7c:56:18:dd:66:d1:22:46:d0:
         10:dc:61:49:d3:c8:c5:60:f9:c0:53:85:71:6e:23:2f:f8:72:
         35:e6:fc:0f:34:03:9d:32:ed:63:8f:30:3c:e0:ff:0d:05:70:
         88:be:d4:8a:eb:39:a7:19:b0:32:a7:fb:89:b4:a4:8f:41:f6:
         a3:45:f3:5e:4a:15:fc:bd:85:b7:2b:e6:97:77:67:6f:38:3d:
         f8:6f:09:c9:78:57:c0:4e:55:b5:b8:37:f7:ef:ad:71:16:0a:
         dd:7b:25:85:b2:ca:97:f7:3a:d9:fd:8e:2e:22:5a:73:94:b7:
         9c:9f:28:9d:23:54:96:5f:76:70:9a:d4:89:d9:49:07:16:21:
         f4:52:c4:0e:07:6c:40:fc:49:8c:2f:d0:3a:29:25:23:c2:a3:
         b0:91:bf:eb:b2:5a:dd:98:b4:e5:33:dc:78:c3:2f:4a:70:2f:
         c1:d6:9d:de:e4:08:79:31:5f:45:cc:5a:e8:82:f5:13:c9:c3:
         83:41:06:1c:69:35:d1:5d:b1:fd:08:f5:b3:7b:4d:27:af:a1:
         f9:5b:74:d1:eb:0d:c3:21:ce:f7:07:ee:26:29:5a:30:f8:84:
         11:19:2c:e6:3e:54:8c:8a:88:5a:68:11:38:c7:ab:1a:40:5d:
         2e:6e:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:44 2026 by rpki-client