Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
File:                     ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json)
Hash identifier:          IBzKJ6LCzAqRN40a2sevhzLenfxIkCYQjZyvo5DKsDs=
Subject key identifier:   C6:6B:F4:CD:E1:CA:8A:90:E3:88:3E:13:AB:22:84:17:F3:1C:4B:55
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Certificate issuer:       /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
Manifest number:          9F
Signing time:             Wed 25 Mar 2026 06:44:50 +0000
Manifest this update:     Wed 25 Mar 2026 06:44:50 +0000
Manifest next update:     Wed 01 Apr 2026 06:44:50 +0000
Files and hashes:         1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: U2NtFmgVyK/ugExfN71RhNSbYG1iBQy2Yp+jq1USANY=)
                          2: 4567CDC2A0EE11F081D8CB27C4F9AE02.roa (hash: E/vUBHVij2zyQs9vE2Sy1xRfjJiKYDLGYJR32qs4mDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
        Validity
            Not Before: Mar 25 06:44:50 2026 GMT
            Not After : Apr  1 06:44:50 2026 GMT
        Subject: CN=69c38462-efa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:8d:3f:08:99:87:1c:81:05:bd:c0:54:d5:
                    5e:53:f8:c7:b0:2d:ee:b7:63:cd:1f:c4:e6:db:14:
                    5d:58:98:fd:16:04:00:a8:cc:58:14:79:47:c7:9c:
                    ff:da:a7:70:36:47:03:e5:e4:f0:72:c1:1d:b5:af:
                    6e:da:a4:ec:09:bc:78:97:b4:e9:f4:61:0a:44:02:
                    69:1c:f8:3a:74:c4:2f:2b:7b:07:71:8a:6a:d1:c2:
                    c3:b7:0b:c4:83:fd:2e:a3:c2:94:b4:c3:c9:0a:d9:
                    a4:97:26:66:50:5f:a9:19:5e:27:e1:39:a8:c9:4b:
                    0c:aa:2f:e9:d9:47:fd:24:a2:32:95:a2:60:8f:78:
                    dd:b0:ed:36:b2:65:0b:9f:d3:60:12:f7:6a:8b:e6:
                    c8:79:0a:d5:15:d8:8f:59:5e:70:43:dd:77:32:ee:
                    d6:c0:15:c6:14:fa:ff:43:42:53:c9:19:49:96:69:
                    60:4d:47:b8:b6:01:fb:5d:ad:38:3c:50:57:9d:e0:
                    4a:c7:5b:3d:20:bd:ea:e8:15:3f:e0:4c:93:13:18:
                    43:19:9c:37:e3:57:74:85:5d:3d:51:87:70:00:f9:
                    38:c5:29:cd:59:08:24:84:51:52:fe:11:7f:34:69:
                    18:9e:34:b0:a8:80:04:c9:4a:1a:02:a9:2e:9b:f2:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6B:F4:CD:E1:CA:8A:90:E3:88:3E:13:AB:22:84:17:F3:1C:4B:55
            X509v3 Authority Key Identifier:
                keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:01:a3:3f:32:35:a8:bf:70:f7:19:c8:e4:be:5e:1d:ca:f9:
         df:ea:9c:a5:da:f0:2d:4d:20:6f:de:9f:b6:47:cd:e4:10:bb:
         28:96:23:1a:1e:ef:b1:94:f0:6d:6b:f1:97:54:26:c9:da:57:
         49:83:50:93:62:2a:28:56:89:a7:66:67:9e:51:40:7d:d2:0c:
         de:16:9a:76:25:19:5c:00:e8:de:2e:64:7c:03:e3:32:1f:e8:
         d4:68:91:a6:1d:7f:7a:6e:9d:ab:59:fd:05:d7:d4:c5:db:e7:
         9c:6c:41:cd:c3:d8:b3:48:4d:f3:1c:ee:5a:ad:06:f7:14:f1:
         3e:5f:25:94:8b:f3:44:08:3b:22:bb:cb:cb:05:81:fb:7e:fb:
         46:8f:76:37:6b:30:4e:49:75:7f:74:24:c9:56:26:5c:9a:3b:
         e9:81:0b:e7:b0:5d:a4:8a:26:42:d2:e8:a0:05:b5:fb:1a:b3:
         83:6a:5b:07:39:71:ec:21:0f:f1:e6:06:ef:2c:35:41:61:2b:
         0a:07:04:22:75:72:c9:b5:01:64:43:24:51:22:d6:f0:ef:45:
         ea:93:0f:8e:8b:b4:01:ba:bc:53:48:a5:ae:c6:7e:e9:8b:19:
         7c:bd:4e:9c:6f:8f:59:71:6d:f9:73:75:bf:14:96:1e:02:bf:
         ab:52:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:30 2026 by rpki-client