Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File:                     -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier:          tSCZelkhWoUe/J2bBwfHZwCr39KpY8Vdx0L6E9L6wmY=
Subject key identifier:   3C:C1:13:3A:8F:9B:3D:F9:9B:B8:DE:21:D2:DB:24:BB:DB:C2:7A:B1
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer:       /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial:       359A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number:          3564
Signing time:             Tue 24 Mar 2026 14:17:36 +0000
Manifest this update:     Tue 24 Mar 2026 14:17:35 +0000
Manifest next update:     Tue 31 Mar 2026 14:17:35 +0000
Files and hashes:         1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: IWwmgRDeuaHAt1ubCBdGv66DiWepGtOPdrANz1bnxgs=)
                          2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
                          rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13722 (0x359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
        Validity
            Not Before: Mar 24 14:17:35 2026 GMT
            Not After : Mar 31 14:17:35 2026 GMT
        Subject: CN=69c29d00-bab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:0c:44:da:8d:1c:0e:86:94:d5:6e:18:55:
                    27:f2:b3:dd:b8:76:c5:5f:53:db:48:97:e0:80:68:
                    98:76:4e:e0:cf:da:41:25:ce:8a:87:f3:38:d3:37:
                    f1:c8:86:01:f1:d5:77:22:7a:3b:f8:f0:64:f8:27:
                    9c:8e:09:ac:64:d5:88:96:08:ca:2e:56:f1:d1:6d:
                    e5:47:ff:69:2e:00:b1:e7:96:87:a4:6a:ab:ae:b0:
                    f4:24:29:d3:bf:27:a6:97:66:07:8b:66:f8:b8:4b:
                    c1:f0:56:ff:b9:de:61:24:fd:ee:b8:6e:a5:c2:a3:
                    82:fb:67:da:8c:08:ae:92:73:01:0b:e8:ce:2e:8f:
                    e8:79:aa:64:42:cb:ae:af:9c:d6:a4:a3:f2:20:f1:
                    55:98:57:30:e6:06:09:84:36:10:07:29:73:9e:0c:
                    4d:72:9b:50:a0:6a:63:9d:6b:fc:0e:5b:80:a2:85:
                    8e:63:ae:a4:0d:dc:88:68:f4:bf:9a:6b:58:27:91:
                    6d:59:46:41:93:e3:02:6b:d8:b7:14:d7:e4:c2:42:
                    9e:97:a0:bc:74:a2:53:7d:5c:9f:d5:7c:b1:4b:3a:
                    09:3e:8c:28:cd:65:a9:ef:4c:87:0b:be:e1:89:7c:
                    f1:21:8d:a0:7a:db:db:4d:bf:80:59:ae:fd:53:ed:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C1:13:3A:8F:9B:3D:F9:9B:B8:DE:21:D2:DB:24:BB:DB:C2:7A:B1
            X509v3 Authority Key Identifier:
                keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6d:54:cf:da:a6:fc:d0:3d:5f:9b:a7:09:e8:79:e9:49:aa:
         44:5b:10:1c:cb:22:76:47:18:23:a8:39:f2:ef:e9:13:a7:ce:
         a1:5c:69:2a:83:f2:41:88:4a:01:a5:4c:91:6f:f8:e3:1b:37:
         c4:26:df:8a:e1:24:6d:77:a7:1a:fa:ee:da:27:bd:17:8c:9f:
         65:02:a2:67:66:92:cd:03:0a:4d:5c:35:5f:6f:5d:8c:a2:b9:
         84:34:86:af:89:07:8d:01:34:fb:4e:3c:3c:36:f4:8f:b0:4b:
         28:3b:bf:c3:ac:30:df:28:f2:df:cf:21:42:b2:80:23:b5:8d:
         d9:28:6b:f8:62:57:61:ac:de:4a:2e:e2:1e:1c:2f:9d:be:61:
         58:f5:0f:4c:58:d6:cb:dd:05:f3:6c:4e:35:24:c4:59:24:e6:
         e7:32:c0:6d:36:fc:a9:f9:3c:dc:d6:3e:45:6f:5c:93:28:b5:
         ec:bb:c0:ef:ee:c5:c4:0c:3b:15:e6:d3:dd:04:31:8e:71:d3:
         81:95:de:46:fc:ba:fc:18:42:2e:d8:56:ce:fa:26:e1:3f:8d:
         c3:7c:88:de:eb:7d:73:19:cf:3c:66:44:d6:de:05:dd:38:18:
         a2:49:fd:e8:03:32:f6:6f:0c:4f:99:dc:8c:2b:c5:2f:e8:b3:
         af:d6:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:45 2026 by rpki-client