Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File:                     nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier:          2llBiE6uUXMR+0sS44eGsQZV0YKc2vnKq3BP27lXwWQ=
Subject key identifier:   5B:B4:79:A1:48:5A:23:EC:99:5D:1B:47:86:ED:34:8C:B8:F8:52:0F
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer:       /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial:       1E97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number:          1E87
Signing time:             Tue 24 Mar 2026 15:59:13 +0000
Manifest this update:     Tue 24 Mar 2026 15:59:12 +0000
Manifest next update:     Tue 31 Mar 2026 15:59:12 +0000
Files and hashes:         1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: KN6vopQE74R+tBTeP4OZee5uGaM9fyTotuC7EC48BJw=)
                          2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: eCYFvmibmPBlkZfZuVIvvu3GZJAAha/tKB/Zp7DAtUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
                          rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7831 (0x1e97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
        Validity
            Not Before: Mar 24 15:59:12 2026 GMT
            Not After : Mar 31 15:59:12 2026 GMT
        Subject: CN=69c2b4d0-2dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:4b:9d:3c:69:ae:27:42:b5:c9:fe:10:7a:
                    bc:7a:5b:9b:31:4d:73:97:17:b0:a9:40:0b:35:55:
                    ac:7a:d0:f4:64:a0:d4:91:f9:8c:c5:ca:a4:16:b8:
                    6d:35:4c:ed:ba:7b:b5:99:a9:cc:93:de:e8:e0:0c:
                    ed:06:f7:4e:b9:94:4b:a3:aa:ad:c0:be:df:49:8d:
                    86:82:d9:bc:03:4f:4f:bf:36:a0:53:16:33:a7:f6:
                    a5:7f:53:e0:ac:11:92:07:be:31:d6:e8:77:e1:9d:
                    86:a2:34:f1:b0:1a:44:15:9e:22:72:b4:76:d2:0d:
                    f7:87:95:f8:f0:25:52:3c:18:22:00:e1:bc:07:19:
                    c7:0d:2a:9b:86:7c:2f:6f:00:60:92:a9:f4:9e:a6:
                    a6:dd:9d:0b:b4:f8:3f:1f:89:a5:98:ba:9a:cc:11:
                    5e:d7:dc:c9:c1:db:31:f1:87:b5:74:89:f0:d8:e8:
                    23:7e:35:23:b4:f6:94:f7:b7:9c:d9:be:cc:21:20:
                    48:22:f3:b3:92:d1:68:d6:37:59:86:79:4f:12:7c:
                    1c:ed:79:8d:68:a4:58:b9:b6:63:53:15:a8:af:ff:
                    15:36:4b:20:6e:26:f2:86:aa:79:c9:52:f5:37:8f:
                    ca:b1:51:00:9e:0b:ab:72:3a:a4:d6:f4:13:e7:4c:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B4:79:A1:48:5A:23:EC:99:5D:1B:47:86:ED:34:8C:B8:F8:52:0F
            X509v3 Authority Key Identifier:
                keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:d2:0b:ed:cc:e6:81:74:d6:b0:4b:6b:f4:c6:c1:5a:49:2b:
         22:42:9c:2d:6d:4a:47:5f:58:9e:47:98:e2:a0:97:ec:30:e1:
         b5:f0:e7:7e:7f:20:63:fe:a6:e2:16:ff:01:ca:38:c0:64:08:
         13:ba:97:42:d4:c7:9b:1b:5e:2d:8c:26:eb:0c:aa:61:c0:f0:
         af:72:6c:48:99:67:36:19:95:37:fb:0a:33:f7:01:31:b0:0f:
         d4:2e:d9:55:2f:b5:66:5e:b1:bd:e7:b1:6c:34:ed:58:e1:8a:
         85:3d:39:df:c7:98:41:98:67:e7:0d:ce:58:03:9c:b6:64:01:
         d4:fb:e7:b3:3c:8a:d6:c2:90:61:6a:a9:84:1b:3f:4f:80:41:
         6d:a9:c4:ca:1e:3b:38:f5:5c:40:af:50:66:0d:12:69:0c:b9:
         4f:25:75:48:ab:96:2a:5d:39:1c:05:4d:17:4e:29:44:5b:bf:
         5b:8b:d7:66:18:e2:52:68:57:83:13:c8:4f:52:85:5b:43:f1:
         95:3a:21:3a:2c:49:2c:ba:36:0d:47:68:6f:11:01:91:39:a7:
         24:43:1a:3f:47:52:7b:d6:3d:7d:5d:b0:28:74:09:6d:96:59:
         54:24:a7:5b:9f:e9:45:fa:82:1a:55:ae:c1:25:62:10:04:f0:
         ea:b3:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:23 2026 by rpki-client