Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
File:                     SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json)
Hash identifier:          pjI1l6fI944KDdP8ZtuLOyTOMvVmeQUBucdRHXG9jtY=
Subject key identifier:   A2:93:AC:D6:B7:65:68:73:D6:10:70:B2:38:8D:10:F9:7E:15:C7:0E
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Certificate issuer:       /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
Manifest number:          02
Signing time:             Wed 25 Mar 2026 04:16:55 +0000
Manifest this update:     Wed 25 Mar 2026 04:16:54 +0000
Manifest next update:     Wed 01 Apr 2026 04:16:54 +0000
Files and hashes:         1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: QAeDFb7yQnFoSpRCpKxBiVHhQaOB3eY1wWVH21hACoQ=)
                          2: 712388E4280111F1A83DAB9AB3833773.roa (hash: K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
                          rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
        Validity
            Not Before: Mar 25 04:16:54 2026 GMT
            Not After : Apr  1 04:16:54 2026 GMT
        Subject: CN=69c361b7-bbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:0c:34:ef:e7:75:5f:b1:ef:81:11:f2:23:
                    40:49:9c:e9:ec:54:a5:dd:94:bb:d7:1f:47:6f:d8:
                    8e:59:7a:dd:5a:97:9f:9f:2c:e1:f9:39:64:71:92:
                    c7:f8:5e:41:0e:71:45:bd:9e:00:bb:e2:a1:aa:01:
                    21:6c:7a:62:93:ea:cc:62:ed:17:b0:72:8e:50:fe:
                    69:07:c8:4c:11:07:68:f1:e8:a2:97:d4:88:84:34:
                    fd:9e:af:e1:c6:c3:f8:38:b0:5f:69:87:3b:26:6e:
                    0c:e0:30:44:c9:fd:18:07:60:99:98:8c:46:64:5b:
                    b8:a1:8c:8b:88:c9:74:bf:7a:0c:9a:ca:29:20:a1:
                    be:72:41:9e:0c:1d:1a:ca:9c:8d:6f:76:d2:d1:00:
                    86:ea:11:1e:29:64:6f:69:b7:e0:45:3a:6a:53:16:
                    41:b2:d2:f2:65:a6:5b:4a:12:c9:ed:87:00:81:79:
                    e3:7a:48:cc:60:01:43:ff:c7:dd:2d:7e:5f:3c:d1:
                    e4:1f:ba:82:ce:26:98:58:f0:be:c1:45:c2:9c:87:
                    cd:65:3e:d9:75:20:1a:e5:eb:93:9e:4d:ec:35:6f:
                    83:26:89:18:1a:38:f9:e9:11:1f:5e:2e:66:1f:76:
                    93:99:f8:2f:de:4b:f8:03:20:b5:03:9a:86:3f:bc:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:93:AC:D6:B7:65:68:73:D6:10:70:B2:38:8D:10:F9:7E:15:C7:0E
            X509v3 Authority Key Identifier:
                keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:71:77:5c:01:e2:e1:17:7a:44:97:06:2c:5b:70:f2:b6:
         4b:91:d9:7a:6a:ff:5d:89:d3:f3:ac:2c:61:d2:34:ff:2a:55:
         30:f8:9d:88:02:f7:66:e4:6e:98:67:ae:e4:73:ab:3a:12:5e:
         aa:cd:50:99:43:de:77:f7:93:e0:2b:9e:53:65:b2:4c:58:3a:
         75:7a:4f:d1:cf:4b:be:40:e7:b0:c1:5a:71:93:f4:14:23:6c:
         b7:a1:38:a6:44:98:85:98:bd:f2:ae:20:b1:39:13:cb:94:fa:
         6c:8b:14:e4:e7:46:54:e7:d7:f7:7d:c1:74:f4:c3:40:9f:de:
         29:07:a7:09:83:79:cc:23:e3:7c:92:82:ea:a1:23:d5:20:90:
         22:e3:33:fa:7e:6b:9b:80:b1:e5:1b:16:62:8a:60:4a:41:17:
         27:39:5e:89:95:21:b1:d7:5a:6c:d2:82:1f:d9:13:36:ba:44:
         90:e1:a5:08:6f:21:9e:47:49:94:60:f2:ae:4d:21:35:d3:03:
         b8:a7:0a:39:44:99:89:e2:89:d4:26:c2:1f:e7:ab:58:0f:67:
         93:de:16:af:ca:a7:74:ea:68:8e:59:cb:0c:14:09:10:87:66:
         2d:04:84:ed:bb:06:e1:f3:90:b2:98:7e:1c:09:25:c4:1e:8b:
         3d:6f:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:12 2026 by rpki-client