Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
File:                     ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json)
Hash identifier:          vBXCKC3t9OomemBmzFmThFGuEoSaNjH7P1TJ4kf4Ies=
Subject key identifier:   19:A6:44:CD:D8:3C:98:FF:58:11:F2:12:F3:8D:ED:EA:37:30:1D:48
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       0713
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
Manifest number:          06E1
Signing time:             Thu 26 Mar 2026 22:15:44 +0000
Manifest this update:     Thu 26 Mar 2026 22:15:44 +0000
Manifest next update:     Thu 02 Apr 2026 22:15:44 +0000
Files and hashes:         1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: NYEzGctGYCpX8VdXt/uCHkHZKLa1y1OCCCbht7HdIcg=)
                          2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: mjocAbD55sni/MpKHvpZIoG9vwTBNbsg26qx5ur9R1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811 (0x713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
        Validity
            Not Before: Mar 26 22:15:44 2026 GMT
            Not After : Apr  2 22:15:44 2026 GMT
        Subject: CN=69c5b010-a54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:c4:5f:5c:36:ba:a3:d0:6b:ef:40:9e:49:
                    66:8f:07:d7:16:74:13:0f:24:73:4a:6c:58:e9:96:
                    2b:ed:b6:45:c8:14:1d:ed:88:0e:6e:72:60:91:24:
                    e5:f8:4c:3a:b5:b3:74:b9:9c:a1:df:73:17:69:f0:
                    4b:8f:79:e0:5b:ea:33:e8:ec:eb:0c:3d:86:eb:c2:
                    c7:2c:8b:c6:90:2a:76:8f:22:f8:14:a9:fc:66:16:
                    f1:1c:0f:f5:11:03:9d:c0:5d:0c:4e:99:91:80:93:
                    17:a9:1b:64:97:a2:f1:05:21:a6:07:0b:d3:95:4e:
                    66:f4:99:fc:03:e4:d6:74:4e:3a:5c:cf:43:56:9a:
                    d0:a9:fb:85:05:c1:a8:f3:a5:2b:d6:b3:72:6b:94:
                    da:30:e8:cd:76:cb:82:8d:94:d6:73:35:2c:5a:72:
                    d3:3e:01:65:38:8a:47:ba:e7:4a:47:55:bd:0c:42:
                    b1:6a:b5:e3:b5:f7:05:3e:c7:c3:55:73:af:fc:4c:
                    46:fa:ff:e1:ef:55:71:93:66:23:1e:bc:1a:38:f0:
                    d1:47:3a:52:52:90:6c:85:3b:18:5d:95:08:42:65:
                    5b:10:70:aa:fa:62:7f:84:e8:f3:46:5f:3f:10:1f:
                    dd:61:b9:54:92:35:4f:33:d0:7d:fa:65:47:81:7b:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A6:44:CD:D8:3C:98:FF:58:11:F2:12:F3:8D:ED:EA:37:30:1D:48
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bd:09:29:0e:fd:05:db:76:6b:c0:3e:2e:a0:e7:2c:0c:ae:
         4e:4d:6f:64:99:43:ce:c3:33:c7:d9:41:22:9d:35:78:d5:0d:
         31:f0:f2:a1:29:ce:37:03:32:9b:ef:0c:67:3c:cf:73:1c:7f:
         34:8c:b8:02:79:a2:55:56:fc:ed:7f:14:b4:04:e6:28:e5:4f:
         d9:fc:c0:4e:de:f3:a6:d8:1f:c6:fb:e0:4c:eb:b8:b0:f7:52:
         ae:e3:32:73:d4:23:0e:b7:98:8a:cc:fd:b4:8a:e1:3d:98:93:
         4a:b2:b1:27:61:59:55:ac:5f:52:d8:c6:cd:5e:d1:a2:32:1f:
         49:f0:28:c3:13:4f:a1:2c:8e:33:c9:a1:b9:2f:d5:3b:e7:63:
         63:91:d8:2e:9a:3a:5f:0b:ca:49:4c:a9:76:25:bf:5b:f8:7f:
         52:8d:10:23:14:41:25:b1:45:6b:ee:8f:f4:39:9f:19:a1:f6:
         b4:4b:0d:62:0f:25:44:f6:20:8b:56:05:7d:1a:3f:1a:b4:49:
         70:f7:b8:0e:08:17:02:6b:c8:b6:7b:e6:74:9f:58:32:2b:e3:
         f0:82:84:11:45:d0:86:99:4d:18:1f:c9:85:63:7f:fb:96:a6:
         08:56:86:14:13:93:b8:b3:19:91:6d:21:47:e5:00:63:11:aa:
         36:ef:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:10 2026 by rpki-client