Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
File:                     86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json)
Hash identifier:          DBPlutoIjQSA0J3LAY3wCfBerOVFMTt1u2sfmwdh504=
Subject key identifier:   18:15:C2:E3:B4:CE:D0:E8:08:09:E5:A9:F4:3A:93:B9:4B:5A:A8:E2
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Certificate issuer:       /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
Manifest number:          0276
Signing time:             Wed 25 Mar 2026 01:23:48 +0000
Manifest this update:     Wed 25 Mar 2026 01:23:47 +0000
Manifest next update:     Wed 01 Apr 2026 01:23:47 +0000
Files and hashes:         1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: mAzgykuYZmEnn6TyTPktxpznirzKKIYMmjg0IcnI/uI=)
                          2: 5F0ACC76962011F09F73D036C4F9AE02.roa (hash: zxI7VE3eg0TasmD62sh1djQSdFuNkWLF/C/+dkz7utI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
                          rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
        Validity
            Not Before: Mar 25 01:23:47 2026 GMT
            Not After : Apr  1 01:23:47 2026 GMT
        Subject: CN=69c33924-2274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:52:10:f5:76:0a:04:f3:d4:6b:3b:18:a1:
                    3c:2b:b0:da:77:9f:fa:e4:b4:52:7b:cc:c0:4d:bf:
                    e0:fb:48:b9:d0:29:f2:c9:44:0f:ab:89:d3:51:09:
                    66:27:95:24:e2:ee:a9:6a:66:7b:ec:53:33:61:d3:
                    c9:55:81:a4:4c:f1:c2:80:04:6e:f7:57:a5:ca:32:
                    e3:e8:56:27:e3:19:28:4a:72:b8:cd:ed:5e:e1:c4:
                    4e:2d:8e:e9:c4:0f:32:35:ec:a7:a9:5e:f1:37:63:
                    a3:af:1c:17:09:fa:7b:b4:05:69:fa:d9:52:7c:3c:
                    26:7b:cf:32:93:36:21:e2:94:a5:09:31:23:a7:d6:
                    30:dc:c0:fc:de:40:07:9f:88:31:79:c4:a4:88:c1:
                    4a:1e:81:c9:ff:e6:29:dc:6b:73:a3:27:ca:06:f3:
                    af:0d:35:65:07:61:2b:3a:ce:60:e7:cd:e9:66:a6:
                    dd:2f:12:76:cf:1c:49:68:54:bf:d5:4e:4f:dd:3c:
                    7f:99:e2:2e:75:63:93:e5:98:56:95:f9:b1:81:3e:
                    34:00:08:6c:5a:f6:3b:31:ff:37:c4:f5:c8:d2:e6:
                    90:72:90:72:d5:1e:43:4f:55:d1:24:5a:20:d6:e6:
                    ac:76:f1:47:47:54:ad:b1:a7:fd:c8:3c:1e:dd:29:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:15:C2:E3:B4:CE:D0:E8:08:09:E5:A9:F4:3A:93:B9:4B:5A:A8:E2
            X509v3 Authority Key Identifier:
                keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:03:ee:c2:39:4c:04:60:a1:5f:08:a2:5f:93:a7:d3:95:2a:
         a7:cc:72:14:57:bc:3a:57:d8:f8:be:f5:73:c3:1a:73:9c:de:
         55:b4:47:7a:9c:57:57:d1:56:76:f4:13:36:bb:d7:7f:45:69:
         72:02:49:1d:3a:33:b6:3b:4a:f9:8f:c7:b3:c7:76:25:ec:d7:
         6e:94:14:0f:3f:11:49:4f:38:17:c4:8c:a3:83:d6:2c:f2:fa:
         60:cb:76:f3:dd:4f:14:61:bd:c5:ad:13:fd:fc:18:21:56:94:
         72:6e:b6:68:6c:52:b4:0c:dd:fe:36:e3:44:42:fe:3b:37:6d:
         80:99:1c:c8:53:5c:47:23:de:07:7b:3a:e1:3a:c9:a0:3d:c8:
         a4:28:58:81:7e:05:e6:a2:47:c0:fa:ef:ed:47:00:57:25:49:
         a2:26:b8:5e:f5:83:a4:ad:99:c2:8f:43:c9:3f:8b:78:18:4a:
         51:b7:d9:92:b5:eb:f4:28:97:c3:83:09:6e:19:8b:bf:c8:08:
         4f:36:88:c8:19:c0:4d:68:49:57:35:c2:15:e0:f2:87:10:d2:
         69:45:63:d1:da:b3:48:3c:88:61:ca:dc:17:af:a0:9e:4c:35:
         23:fb:c6:33:70:5f:8e:c8:2d:73:95:eb:74:4c:9b:08:90:20:
         54:c6:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:07 2026 by rpki-client