Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
File:                     8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json)
Hash identifier:          JBAOs5Ni09d1dh7W+JVlh7FgCKvE5HU61xVBrL1cFHw=
Subject key identifier:   04:C8:6C:31:D2:20:A3:1B:4A:E3:25:0D:A2:73:FF:00:4E:7B:41:A7
Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84
Certificate issuer:       /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
Manifest number:          01AD
Signing time:             Wed 25 Mar 2026 03:22:43 +0000
Manifest this update:     Wed 25 Mar 2026 03:22:42 +0000
Manifest next update:     Wed 01 Apr 2026 03:22:42 +0000
Files and hashes:         1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: xmNJ1riOTiaefVG9qUksXGXb4JKXtZY0v5TAomVfZoo=)
                          2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: 7bHHLIgES8ByM7fP5YN9h2I6mW2n114NAaaCpRW1pN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984
        Validity
            Not Before: Mar 25 03:22:42 2026 GMT
            Not After : Apr  1 03:22:42 2026 GMT
        Subject: CN=69c35503-28bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9d:cf:c6:f7:6b:fa:e2:e3:92:cc:f5:e4:d6:
                    10:41:7c:08:90:b9:c7:cb:9c:6f:16:1e:03:d1:3d:
                    1b:30:1a:5e:45:43:39:2c:e4:5f:44:ad:16:0a:49:
                    50:8a:74:4a:ee:8d:46:af:74:83:73:8e:8f:5c:03:
                    19:b6:6f:79:9a:61:ec:ce:24:45:74:c9:8e:44:bd:
                    d0:2b:96:3b:6e:1b:54:39:af:02:67:41:31:e2:01:
                    10:4e:71:ef:ae:83:88:b0:cf:c2:c1:ab:c5:62:a8:
                    a1:71:8f:cf:fe:3f:b4:a1:4b:a2:70:66:cb:f4:75:
                    73:fc:46:f3:70:d1:ab:dd:cb:20:89:d6:b6:7a:48:
                    70:16:99:44:28:da:c3:d5:5b:1e:88:e6:ea:cf:8c:
                    c9:ef:47:33:1f:8b:50:85:76:16:fe:aa:5f:83:4d:
                    e1:56:76:ab:61:8c:c0:7a:24:51:05:1c:c9:da:64:
                    aa:0a:e1:1f:85:e6:0a:00:02:de:e3:94:f2:d5:01:
                    4d:3b:87:56:de:6c:a6:94:2a:ed:a0:ab:a7:80:da:
                    b1:b7:17:b6:2b:3a:d1:5b:f1:4e:e8:bc:f3:95:3b:
                    f2:cb:5c:c2:ef:2c:83:68:a5:62:e4:f6:7f:ea:e9:
                    13:4c:9c:6a:0e:1a:21:ba:57:63:30:80:f7:0b:9f:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C8:6C:31:D2:20:A3:1B:4A:E3:25:0D:A2:73:FF:00:4E:7B:41:A7
            X509v3 Authority Key Identifier:
                keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5b:aa:5d:74:e2:1c:fb:4f:ff:c3:4f:af:4a:ae:cc:0b:c0:
         eb:70:84:cf:2e:d5:d7:92:e8:42:bd:09:cf:82:23:ad:cb:89:
         0f:ca:cd:2f:01:76:47:df:5a:df:60:a2:a4:ee:ef:39:ca:49:
         60:66:89:0e:ac:c9:99:18:1a:bd:4e:c1:3b:b6:69:88:20:c6:
         fe:a3:0e:c6:77:4e:6b:7a:b6:c9:5c:b8:43:65:99:a0:3b:52:
         53:d8:04:db:73:3f:43:a7:3a:a9:6e:5e:c4:56:bc:d3:45:69:
         41:63:35:32:a0:b8:05:df:6f:76:25:87:90:b0:f6:49:5b:e3:
         80:21:77:ff:d0:27:ad:05:ad:c5:85:a9:02:ea:44:f8:f5:5a:
         3d:7f:09:63:98:67:fd:19:c9:24:9f:9d:b6:f2:3d:1d:c9:81:
         f0:4d:3e:f3:de:c6:cf:64:b2:58:ce:65:a5:67:a7:2a:2c:9c:
         df:cf:4b:58:6e:ab:ec:b4:26:d1:27:5a:26:95:72:fa:28:27:
         f0:f5:8b:77:80:04:91:c7:3c:a6:96:69:60:46:49:e2:97:3e:
         82:72:8a:ce:79:ac:8d:fd:64:c5:67:e6:60:f8:4b:e5:0d:9a:
         ee:a7:d6:2f:21:9f:5a:e1:e5:b8:5d:72:a5:c0:5c:a7:8c:8d:
         b4:dd:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:48 2026 by rpki-client