Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
File:                     cFeff18bId_J3mZ8azwh8W-H1XI.mft (raw, json)
Hash identifier:          X2VCrRx0VTXd6N4TbvvJdcsnf5oPYPHsDHH0LPV7wdI=
Subject key identifier:   DA:84:62:FF:AB:D3:42:99:42:D1:70:DA:E0:7F:01:0C:5F:96:35:F6
Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
Certificate issuer:       /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Certificate serial:       0CDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
Manifest number:          0CCC
Signing time:             Tue 24 Mar 2026 18:14:19 +0000
Manifest this update:     Tue 24 Mar 2026 18:14:19 +0000
Manifest next update:     Tue 31 Mar 2026 18:14:19 +0000
Files and hashes:         1: cFeff18bId_J3mZ8azwh8W-H1XI.crl (hash: ydRdChk7ilT6uW/y9i2uFGyKgbWKCRuRq5AZOHaOQvs=)
                          2: DEABC3F619C411EFA1A8677DC4F9AE02.roa (hash: 8tkkl6lhiYhqYdLO3UVOSM4D9OeTsXNmgBLsQxqUjjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl
                          rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295 (0xcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136655, serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
        Validity
            Not Before: Mar 24 18:14:19 2026 GMT
            Not After : Mar 31 18:14:19 2026 GMT
        Subject: CN=69c2d47b-6112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e8:d5:b5:b9:a0:7c:88:7a:e2:d9:91:20:fd:
                    a3:83:d9:6f:bb:2a:39:0a:0c:52:e8:91:5e:9c:87:
                    da:64:be:73:17:6b:f7:7d:a6:c1:bb:8e:72:f5:85:
                    5c:b6:f1:5e:3e:27:13:b0:18:c6:3e:a0:e2:75:8a:
                    a7:70:80:d4:bc:11:37:5c:ee:3a:a8:df:48:21:23:
                    a1:c0:6f:d8:c7:c8:e7:59:31:46:1e:5d:51:6f:9a:
                    40:dd:0d:13:07:9d:ac:77:2e:fb:88:24:58:5f:78:
                    92:e7:eb:17:8a:f0:2d:3e:67:b7:93:9b:f9:c8:e2:
                    fc:47:76:cb:fd:ab:0e:37:2b:22:9f:7e:7e:26:92:
                    2f:22:e1:d3:30:98:75:c2:71:10:d0:e0:7d:83:75:
                    0a:03:f8:63:01:ae:52:a2:af:22:c7:2a:3e:62:0e:
                    73:ff:8d:b3:d1:06:c7:3c:89:dd:ec:b1:e8:c8:86:
                    66:4d:58:1d:9f:36:8f:e2:28:10:83:4d:01:0e:8b:
                    e2:30:dd:de:f0:d1:fc:16:2d:b5:b3:ee:c8:32:30:
                    1c:0a:1f:16:00:88:5e:cb:44:10:f3:08:8f:e9:02:
                    88:ee:a7:78:e5:3e:60:45:e2:63:3c:ad:2c:3b:6c:
                    fb:9b:17:c8:1e:fe:62:c2:88:7b:97:79:28:91:18:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:84:62:FF:AB:D3:42:99:42:D1:70:DA:E0:7F:01:0C:5F:96:35:F6
            X509v3 Authority Key Identifier:
                keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:a4:6b:a9:7a:18:a2:ad:b1:49:b5:96:ea:2a:87:4c:5d:
         10:2c:ee:9f:ed:ec:81:d0:80:09:14:d5:13:b3:2a:f3:85:ae:
         9e:93:d5:5e:34:d7:e0:ff:d3:89:ea:2e:1f:ff:54:d8:e7:1f:
         ae:15:38:9e:92:96:47:50:1b:7e:b2:b6:c3:74:7d:ea:01:d5:
         4a:13:33:ab:48:8e:9b:04:7f:85:11:36:7b:53:7c:e5:ef:08:
         e0:b7:0b:c2:64:f9:30:23:c1:6f:95:8f:bc:37:82:48:ca:51:
         da:09:28:91:a6:71:d5:1d:0e:be:b5:f0:20:a7:b6:04:bd:07:
         63:c4:da:39:64:87:02:f8:69:bc:92:19:96:5d:8c:cf:04:6f:
         fd:28:a3:d2:66:70:c5:51:1a:e2:8d:57:c2:73:8b:19:70:04:
         d1:52:0b:36:c5:b0:11:2b:12:6c:ae:e6:68:10:27:0a:61:c6:
         50:79:39:a0:ef:46:81:f2:e1:6c:66:62:99:15:b8:bd:82:46:
         e3:bd:04:3f:e0:a0:0c:d2:5e:c4:25:62:05:b6:7e:f5:e3:42:
         9a:3d:7f:7b:b2:11:b4:45:10:5c:b7:dd:bc:6a:d8:3c:b1:8e:
         35:aa:70:93:bf:30:f2:29:f8:74:7b:6d:dc:d5:5c:91:fb:ee:
         08:25:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:11 2026 by rpki-client