Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
File:                     skC8cHDxvddkqwCyJosol1s1H4E.mft (raw, json)
Hash identifier:          bWo7Mje+tkMAAbMX7He0H6OEy6F5t+ZuhGl2Sel7kzw=
Subject key identifier:   AF:AE:FC:78:2E:53:37:03:57:96:BC:06:86:8D:6F:6A:93:C8:72:85
Authority key identifier: B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81
Certificate issuer:       /CN=A9134E06/serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
Manifest number:          73
Signing time:             Wed 25 Mar 2026 07:05:13 +0000
Manifest this update:     Wed 25 Mar 2026 07:05:12 +0000
Manifest next update:     Wed 01 Apr 2026 07:05:12 +0000
Files and hashes:         1: skC8cHDxvddkqwCyJosol1s1H4E.crl (hash: mJ0Pcu9T77DjLrfPaEroZYyI0X0Sy/uKn3NejrMKwjA=)
                          2: 2E280FE4839511F0A13CF851C4F9AE02.roa (hash: pXdxwU3JcRxbPH57PatDpKhFrfdZSD0WRfFJQ/Ap7H0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl
                          rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E06, serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
        Validity
            Not Before: Mar 25 07:05:12 2026 GMT
            Not After : Apr  1 07:05:12 2026 GMT
        Subject: CN=69c38929-00a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:61:d8:c5:ce:a0:74:21:ec:67:e4:1f:81:
                    51:57:17:f5:99:65:26:51:e9:a5:a6:f2:4f:bc:42:
                    78:3e:e2:ce:bb:09:14:37:98:da:6a:1b:f6:17:46:
                    16:36:fa:87:18:ec:7c:d4:85:fc:5d:42:b2:ed:ed:
                    e0:9d:cb:38:af:41:eb:1a:55:61:df:72:f5:16:3d:
                    56:22:e3:4a:c2:1f:6d:f9:63:4d:fe:c1:fc:4b:37:
                    5b:fb:ba:76:22:35:72:91:30:79:74:e6:bf:51:4b:
                    62:8d:26:17:98:b1:d9:18:02:b4:39:64:0a:43:a7:
                    c0:e1:d3:36:9c:91:b3:9e:f2:7d:a9:fb:27:63:9e:
                    a0:8a:05:07:7f:14:96:73:de:ce:05:4f:26:d6:52:
                    9f:e9:1a:3d:dd:1a:1c:f5:c1:04:49:ee:66:74:65:
                    a3:13:2d:da:7b:2c:4a:25:cc:d0:e2:b9:07:ce:2a:
                    1d:c9:1e:16:85:e7:5e:52:a8:9f:6c:98:e2:20:7d:
                    91:46:5d:c4:75:12:09:01:12:a2:26:eb:bd:bd:a9:
                    a7:36:26:98:fb:e5:24:09:2e:27:6d:da:ce:30:18:
                    b3:b8:fd:f6:81:06:b8:4b:e7:b0:e5:19:4b:b5:41:
                    d6:54:87:e3:95:ef:d9:d7:38:71:46:59:09:9a:aa:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AE:FC:78:2E:53:37:03:57:96:BC:06:86:8D:6F:6A:93:C8:72:85
            X509v3 Authority Key Identifier:
                keyid:B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:18:46:93:8d:bd:f2:17:73:a6:e2:9c:79:ce:84:e4:f9:8e:
         fa:d1:60:dc:e4:fe:b1:59:cb:19:0e:37:d4:fe:1b:80:fd:07:
         2b:33:cd:25:0e:99:0b:bb:16:77:47:29:3b:5d:16:0f:6f:9c:
         f7:40:94:f9:02:27:0f:82:8a:84:c3:37:d2:74:92:3d:87:a1:
         84:5d:24:66:67:88:65:19:ab:7f:ad:bd:9d:c5:ab:21:f0:12:
         da:f7:88:09:ff:5e:ca:69:fd:74:c4:54:5a:c1:32:cd:a1:aa:
         de:81:d2:55:e1:fd:02:89:4c:f7:73:dd:ce:3c:f0:ad:c7:12:
         68:7f:09:85:85:a0:19:e1:0b:4f:82:11:50:08:ee:bb:eb:d5:
         fd:88:4e:05:aa:9d:61:40:8a:6c:8e:21:b5:e7:f9:98:16:52:
         6e:bc:31:71:31:59:a0:5a:f6:69:c2:dd:ac:d5:b9:c1:78:9f:
         f7:5e:c2:43:ac:15:10:07:a8:b4:ab:f1:2c:89:86:12:a6:c4:
         35:26:a4:8e:41:d2:b6:05:fd:f8:a9:b1:da:c4:a6:b2:dd:31:
         66:71:e1:06:87:d7:61:da:67:b1:76:6c:d6:1a:af:d8:fe:c4:
         db:62:c9:68:04:50:7c:04:09:05:2a:f3:a3:1a:ea:83:59:e1:
         64:33:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:45 2026 by rpki-client