Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File:                     -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier:          XnztWLgdpfmUsy+EY8m7gmnvArao8zZlGWisowXrYUQ=
Subject key identifier:   BB:BB:81:08:78:3A:BD:03:33:C3:1E:2B:E9:14:07:2E:13:A6:51:24
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer:       /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial:       0305
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number:          02FF
Signing time:             Wed 25 Mar 2026 00:53:36 +0000
Manifest this update:     Wed 25 Mar 2026 00:53:35 +0000
Manifest next update:     Wed 01 Apr 2026 00:53:35 +0000
Files and hashes:         1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: /VN0Xp+mnEiiBonGQSVb1pvAZ4w7cHStS7suNEiVCQA=)
                          2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
                          rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
        Validity
            Not Before: Mar 25 00:53:35 2026 GMT
            Not After : Apr  1 00:53:35 2026 GMT
        Subject: CN=69c3320f-8924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:6d:63:1e:70:99:5e:2f:d2:59:8e:0f:4e:
                    bf:5e:c7:9d:aa:f1:f7:c9:09:b4:c5:8e:0c:be:40:
                    83:c9:af:a4:74:2b:d9:61:25:75:16:98:1e:8a:00:
                    d3:61:9c:9f:55:43:ce:ac:4f:67:a1:fe:da:14:ec:
                    31:a2:30:ef:8b:fe:7c:34:3c:43:f1:d9:f4:2e:a4:
                    b3:a0:ae:7d:d1:0e:7b:32:82:f0:e4:c5:07:3e:6d:
                    ed:21:4c:93:fc:33:90:32:5f:ad:8e:21:41:4b:f0:
                    52:77:b8:4d:15:37:d5:70:ac:80:95:da:8b:54:3e:
                    2c:26:d8:9d:48:a1:ae:4e:ac:d8:a9:33:8e:c9:57:
                    76:1b:cf:ec:bc:45:8d:6b:83:1b:a6:8b:87:59:00:
                    4e:e9:cb:aa:96:33:7d:66:0f:a9:72:de:05:f9:82:
                    76:d5:8f:b4:ba:89:6a:dc:a1:ab:32:6b:be:0a:78:
                    39:ea:95:61:7c:2e:c0:29:1b:7f:6a:dc:a2:ab:28:
                    26:eb:ae:b8:63:45:c2:ec:c5:f9:60:89:f6:d4:58:
                    18:c3:58:a4:7a:42:b3:3b:2c:c8:ee:ca:cb:2b:c0:
                    6a:f4:c3:d7:29:95:4d:e6:38:cc:09:cc:66:58:b8:
                    ed:3f:eb:b4:09:b4:2f:05:c8:64:27:35:f1:3a:aa:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BB:81:08:78:3A:BD:03:33:C3:1E:2B:E9:14:07:2E:13:A6:51:24
            X509v3 Authority Key Identifier:
                keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:70:5b:b6:4c:21:17:2c:39:4b:b4:f8:bc:52:d0:c3:bd:63:
         b6:df:01:ac:2b:2d:db:4f:22:7c:a5:01:aa:17:44:35:9a:90:
         7f:9a:fb:2a:28:52:4d:03:f4:4e:e5:64:76:ad:2c:72:8f:b5:
         b8:b0:9c:d9:60:4e:1c:9f:c3:fd:bc:75:58:dd:90:cd:a9:76:
         4d:51:b2:71:c4:94:ea:db:69:d4:c6:66:f2:f1:e8:3a:b5:5c:
         52:10:b5:30:80:a3:a0:d2:10:06:ac:71:41:3d:a3:b9:2e:43:
         9d:be:6e:22:62:57:ff:e3:92:19:46:1a:db:70:ce:ac:ee:4d:
         71:52:7b:31:79:a2:b6:e4:1a:3b:10:cd:d6:14:da:7d:cf:74:
         de:7b:ed:9f:f3:4e:97:2b:d2:38:8b:cd:10:7b:f2:da:36:44:
         55:88:f2:8a:5f:c5:06:d7:39:6b:f3:d8:12:e0:d9:10:a6:36:
         06:2d:0b:aa:59:a5:47:e1:6d:ff:0b:b3:29:17:c7:9a:15:cf:
         d9:b2:58:dd:1b:42:8a:c8:c6:4a:74:e3:c2:cd:9d:75:c0:08:
         31:62:43:04:5f:b4:51:82:64:49:39:41:09:28:47:59:ee:de:
         e9:51:33:90:f9:89:f3:50:5d:72:f9:0e:43:4f:7d:34:17:cf:
         7f:51:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:21 2026 by rpki-client