Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
File:                     8znaYdk6SUE-kH_FvRavlo3-mtA.mft (raw, json)
Hash identifier:          PhFwQoRf1e1fh6GNn0P+gSunc3c2OWW/y4sKv05But8=
Subject key identifier:   41:48:74:4F:50:37:6A:3D:99:FB:62:A2:F5:A1:A2:42:F6:80:0B:3B
Authority key identifier: F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
Certificate issuer:       /CN=A913277C/serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
Manifest number:          0284
Signing time:             Wed 25 Mar 2026 01:58:46 +0000
Manifest this update:     Wed 25 Mar 2026 01:58:45 +0000
Manifest next update:     Wed 01 Apr 2026 01:58:45 +0000
Files and hashes:         1: 8znaYdk6SUE-kH_FvRavlo3-mtA.crl (hash: YDhoM74glFhykWSDEsvnYImOcBGPIaLhA86rsqc1W24=)
                          2: 9292DD74FDED11F086DAA842746F56BC.roa (hash: Yzu3pWH4y9GuCGb9TT6hX9lZELNP6IotPZy2pUaOnf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
                          rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913277C, serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
        Validity
            Not Before: Mar 25 01:58:45 2026 GMT
            Not After : Apr  1 01:58:45 2026 GMT
        Subject: CN=69c34156-dbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:a3:a9:68:06:e4:e7:88:53:a9:a8:7a:e6:
                    1b:cd:aa:a2:2c:d9:0a:ec:b1:fd:f9:31:d5:ac:c4:
                    69:4d:58:87:bf:0e:6e:de:b7:13:d7:2b:e8:9d:b9:
                    13:75:2b:a2:04:4b:9c:80:63:09:45:88:25:3c:41:
                    64:9b:4d:07:fd:df:36:b7:81:d8:d5:bc:d5:63:7c:
                    06:7e:6e:50:3e:bf:b1:26:38:e8:af:48:4c:6e:b1:
                    11:31:7c:f0:87:d0:97:da:7e:13:4a:6d:53:96:7a:
                    19:d4:58:06:4e:76:46:79:4c:36:6e:fa:c6:80:03:
                    7b:56:cb:0f:7b:f7:79:bb:97:5f:ac:cd:8c:95:8b:
                    55:17:e8:de:72:d9:9c:86:47:5e:ce:dd:8a:df:62:
                    8d:72:7d:a4:b5:64:d6:8c:a4:04:26:e5:fa:07:94:
                    cf:dd:0b:a6:04:35:d3:22:29:3a:ad:67:fa:a0:12:
                    79:14:83:17:b5:56:dc:85:11:84:5e:69:44:f2:9d:
                    9d:a5:8f:0a:b0:1b:98:d1:47:83:ab:8b:10:f2:cf:
                    9c:8e:17:96:34:da:2b:d6:e9:e7:a7:e3:49:42:77:
                    b1:b4:4b:d7:3f:4c:85:73:7d:16:08:0d:f1:77:28:
                    c3:14:47:69:aa:14:49:0c:57:c1:6f:84:46:dc:34:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:48:74:4F:50:37:6A:3D:99:FB:62:A2:F5:A1:A2:42:F6:80:0B:3B
            X509v3 Authority Key Identifier:
                keyid:F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:c9:24:36:b1:c2:e1:ab:52:2a:58:a4:c6:c2:48:b8:72:
         b9:ac:19:60:e5:ff:f1:ca:a7:c2:03:81:4f:60:81:b6:e7:be:
         55:fc:5a:35:31:28:bd:13:0d:50:cf:4c:08:81:b5:3a:91:55:
         44:01:d4:6e:10:7b:b6:e9:d5:fb:54:ab:ad:d9:db:bc:65:00:
         47:3a:b9:b2:16:f3:9f:86:0a:ef:43:0b:9d:77:67:af:0c:7a:
         df:91:f1:e6:b4:b5:27:10:74:6d:db:a6:5a:b7:6a:48:bf:34:
         39:24:6a:56:06:27:b5:76:85:52:ab:81:fd:18:cb:83:77:56:
         5c:29:c5:28:a3:b5:2d:bd:90:d9:19:8e:a9:8e:c0:74:36:1c:
         40:0d:f6:0a:c2:88:8b:c0:86:03:0a:fb:97:f7:61:1e:2c:9c:
         30:68:be:05:20:4f:6a:f5:64:80:da:b9:ef:b6:c7:94:02:c3:
         ed:e5:21:d5:90:eb:68:df:8a:6e:bb:c9:6b:e8:60:90:cd:48:
         d5:24:af:34:3a:81:88:32:05:f4:f8:8c:aa:3d:13:90:0f:f0:
         af:ec:37:f8:8b:8c:44:a8:fc:15:97:9d:02:93:55:ed:8c:0f:
         6a:42:ce:fb:d8:e8:73:05:a8:68:98:4c:65:b2:8e:25:19:8a:
         19:a5:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:42 2026 by rpki-client