Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File:                     v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier:          L3OJtMF0E8zo9WZkCQTZ+1yxxBdwJ3GS0J4Y2kdR/ko=
Subject key identifier:   83:28:00:EF:0F:82:D2:10:CF:CA:27:FA:9C:E2:1C:C7:AA:B5:E0:18
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       0791
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number:          0725
Signing time:             Tue 24 Mar 2026 22:00:20 +0000
Manifest this update:     Tue 24 Mar 2026 22:00:19 +0000
Manifest next update:     Tue 31 Mar 2026 22:00:19 +0000
Files and hashes:         1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: wuImAR4t95CufiPdlXu3P23ev7GxsYKWg8p74sLKa5w=)
                          2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: Om4qQKnR/ADlcoIytwUPeq9RDFGoVRvj56Lkmeu3bys=)
                          3: 671FC40EE29211EE94348874C4F9AE02.roa (hash: VorX/TcJnMctyKf1znFoq4UgSn2F6EKq1vU97sOrAnI=)
                          4: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: NOaVU4q5vDhTCfS8D0magdRbNPsrNEg2xYPHqGcyq74=)
                          5: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: UCc+DbJCpOApyDxFAfgaNwfGqcYO0Lw+1K3uPVDAppM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Mar 24 22:00:19 2026 GMT
            Not After : Mar 31 22:00:19 2026 GMT
        Subject: CN=69c30973-3e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:04:0f:0f:03:8e:bb:1f:f7:3e:20:d2:ba:
                    54:79:78:77:50:06:90:44:92:c7:23:2f:05:5d:de:
                    90:1d:0c:d5:90:a0:5c:26:42:68:b4:dc:07:44:aa:
                    dd:57:e8:bc:54:27:34:21:4c:2f:3b:42:7b:f9:4a:
                    bc:45:cd:8a:be:d1:99:50:1e:a9:2d:73:db:8a:e8:
                    d8:ac:06:a3:84:c0:74:37:e6:31:04:0b:c4:fe:ae:
                    c3:f0:df:cb:58:28:53:9e:21:dd:d4:5c:b1:c8:6f:
                    f2:9e:27:63:74:c0:a7:bc:22:40:e8:a5:4b:38:65:
                    8f:cd:99:2c:53:78:2e:16:7d:65:27:8a:9d:46:7e:
                    b4:49:ce:cd:49:ef:45:95:5c:90:de:1b:8e:36:cb:
                    8a:ef:e2:94:de:3d:f8:65:ae:2e:0b:c1:f8:b4:38:
                    cb:b1:d8:96:d5:eb:30:c8:d2:e7:d6:ee:7d:12:2e:
                    f3:15:c8:2d:85:4f:5c:b4:18:cd:2d:0c:01:48:c9:
                    11:2b:4a:ce:d1:b5:4e:9c:ee:ea:ae:c4:db:b0:d4:
                    b8:ec:d3:87:e8:d3:12:34:83:7c:f6:c3:11:df:53:
                    28:11:bb:5d:de:1f:70:21:1d:d1:36:05:7b:2a:45:
                    41:80:27:6d:37:65:20:93:35:7b:9b:9e:5b:fc:2f:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:00:EF:0F:82:D2:10:CF:CA:27:FA:9C:E2:1C:C7:AA:B5:E0:18
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:be:e0:27:85:69:16:54:3e:83:1f:05:ef:e6:fd:2d:49:
         aa:85:11:4e:ed:b9:f5:14:c1:66:53:38:9b:34:c5:ea:1a:74:
         77:eb:21:54:55:12:09:e1:2a:cd:19:43:ec:e0:40:72:e6:3e:
         40:4b:f0:d1:83:52:c5:e8:7a:33:1c:c5:88:4c:ea:ba:08:ee:
         3d:8f:b9:c7:6c:18:e1:98:ba:33:f0:1a:ab:ff:38:37:9e:02:
         67:c6:c9:0e:0c:74:18:2a:95:ed:c4:b7:26:62:61:69:f2:e3:
         58:6f:e3:88:b5:5a:e4:fc:48:d9:1e:18:99:da:ff:b4:26:60:
         c9:2b:f2:82:71:f6:59:ed:37:48:fd:7f:04:61:37:13:0d:71:
         68:b5:f3:27:8e:97:ae:40:4d:18:9f:00:da:b4:82:2c:f0:4b:
         f1:13:87:d0:72:19:a9:1d:7a:00:10:96:4f:4c:fa:3b:5f:a0:
         ce:81:f4:20:c2:14:00:c4:31:91:d2:12:6f:dd:cd:27:80:6b:
         5d:d1:b9:15:63:98:19:c1:81:c5:07:2a:0c:9a:c4:5d:5d:bf:
         f0:f3:8c:9c:79:a6:85:97:b5:98:6f:3d:cd:da:5f:cc:72:be:
         5a:55:6f:8a:40:b0:2c:77:70:1d:4f:e3:e4:24:cb:63:f3:2b:
         af:8f:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:13:58 2026 by rpki-client