Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File:                     E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier:          IN3QH3HgT7eOhSVhvRFkFjzDB/vM8zHeoID1lW/kR6w=
Subject key identifier:   D2:A3:2D:99:E4:AE:02:D8:45:C6:E6:10:CA:04:8E:15:38:03:FA:1D
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number:          0146
Signing time:             Wed 25 Mar 2026 04:26:14 +0000
Manifest this update:     Wed 25 Mar 2026 04:26:13 +0000
Manifest next update:     Wed 01 Apr 2026 04:26:13 +0000
Files and hashes:         1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: x+zupMpOcXKoKEITtwFQd6g8/ps+FnOK0kApL4DHqok=)
                          2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: HlUO0ONie9spEM92jusEyJRYy9zRFqGpZ3NndsommrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Mar 25 04:26:13 2026 GMT
            Not After : Apr  1 04:26:13 2026 GMT
        Subject: CN=69c363e6-73a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:7f:43:3e:52:47:75:2f:04:53:4a:d4:4c:
                    b9:e9:35:0a:7c:a9:b5:00:9e:74:76:12:1a:f8:51:
                    98:dd:c4:38:3a:92:10:be:06:6e:17:b4:0a:b2:ff:
                    50:c7:65:b6:27:69:4d:83:a8:0e:40:02:45:20:da:
                    d3:1d:7d:34:ae:9e:95:fb:b3:c2:d6:21:e0:8d:11:
                    41:f9:b5:af:96:98:60:fa:b0:77:da:f1:74:5e:d4:
                    6f:de:a0:cf:ee:b4:5f:a4:77:cb:55:10:2d:45:1e:
                    55:f4:06:41:a0:52:07:b9:5d:bd:4f:77:95:e4:19:
                    c0:4e:3d:ea:71:0f:b6:41:68:85:13:93:3e:2e:ef:
                    0e:1f:79:bc:5b:2e:1b:a6:20:12:02:04:93:5b:63:
                    f7:aa:b5:1d:9c:09:ca:0f:85:87:2f:b2:9d:b6:56:
                    13:41:01:93:c2:4d:69:60:7b:cc:37:25:b7:c1:cf:
                    14:0f:ef:27:4d:f8:4e:84:a1:21:1f:9a:c3:cc:1b:
                    5b:6d:4e:e8:0e:a9:73:fd:4d:95:c4:23:61:04:6c:
                    d4:78:00:06:24:0a:dc:fe:56:a7:d0:8e:c7:b6:d1:
                    ea:1e:c2:97:a5:b1:2f:74:86:e0:75:54:1b:82:db:
                    a2:fa:c4:75:ca:cc:5b:78:52:45:40:da:7f:ae:57:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A3:2D:99:E4:AE:02:D8:45:C6:E6:10:CA:04:8E:15:38:03:FA:1D
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:96:6c:d3:00:1b:16:5c:40:7e:28:ab:27:73:54:92:4e:3e:
         ac:ab:5d:e2:44:34:e7:79:ca:c9:5f:e0:85:b3:9d:2f:ac:51:
         1a:8a:22:3b:20:8b:13:ed:2e:0b:38:9c:cb:02:4f:9a:08:8e:
         60:1a:8b:41:51:cd:77:a2:2f:61:84:bd:c9:69:14:7d:f9:12:
         43:0b:e5:a1:fc:65:d4:e2:d0:99:22:4a:11:5b:1d:a7:95:84:
         37:21:28:25:4d:d1:f4:b3:f9:11:a6:4f:b7:08:93:19:e5:3c:
         c4:b1:42:61:75:cb:11:bc:0b:76:87:f2:e8:26:fc:55:21:e5:
         63:32:b2:09:6e:77:ad:98:0d:09:3c:60:c3:97:25:91:16:28:
         22:4a:f9:02:6e:e2:dc:07:20:a6:82:87:51:10:32:f4:cf:47:
         2c:00:3d:06:59:11:16:df:29:ad:60:16:ab:a8:cf:b0:7b:c5:
         40:1e:78:56:ee:e0:13:e7:71:74:1c:37:fa:9c:ed:97:d8:5e:
         97:fa:4e:6e:d0:8c:02:4b:6b:29:27:25:26:a1:67:f4:fa:84:
         89:e1:44:f1:a6:63:d3:b3:a6:98:6d:6b:5e:8d:90:c2:11:20:
         01:b6:1f:6f:c4:4b:ed:2d:05:03:0a:a0:f0:76:86:11:ad:56:
         07:ae:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:03 2026 by rpki-client