Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
File:                     yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json)
Hash identifier:          QsKPDzH1NLeL+FK1YLzDvO/Q4yA6hTIV4TJWj52KmRk=
Subject key identifier:   8C:58:BA:E0:07:7B:99:63:E1:83:63:90:EC:B3:C1:B6:D6:B6:86:55
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Certificate issuer:       /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial:       1517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
Manifest number:          1512
Signing time:             Tue 24 Mar 2026 16:43:45 +0000
Manifest this update:     Tue 24 Mar 2026 16:43:45 +0000
Manifest next update:     Tue 31 Mar 2026 16:43:45 +0000
Files and hashes:         1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: k9cxCZhLm8rjfz0LGLPrJQPvlEwNbdO6tZGdOnNSeGg=)
                          2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: hJT4usZf+BKSETDBQrM6NJ4ciacXvVznmaEzi+BU4ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
                          rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5399 (0x1517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
        Validity
            Not Before: Mar 24 16:43:45 2026 GMT
            Not After : Mar 31 16:43:45 2026 GMT
        Subject: CN=69c2bf41-03a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9c:a7:11:31:20:07:d4:64:90:d7:c7:27:18:
                    7f:4a:37:6c:d1:78:5a:c7:f1:09:64:c7:90:e4:37:
                    fa:3a:0e:13:10:59:ac:22:40:97:38:b0:25:3b:f9:
                    9e:34:6d:f6:51:72:f6:60:4d:9c:b0:66:2a:7d:c0:
                    0f:36:69:d8:91:82:37:fc:4b:d8:18:7a:23:8f:dc:
                    37:63:ec:e4:a4:0b:02:dd:e0:2d:da:46:d6:ae:41:
                    73:fb:5e:e7:b4:b5:b1:bc:95:f9:07:1d:a5:0e:13:
                    5d:8e:8a:c6:ff:48:4a:a9:75:30:f9:5d:56:15:b9:
                    c1:56:f2:b3:df:71:29:a7:a1:eb:ce:14:73:8c:76:
                    45:00:9a:d9:14:14:f3:08:4b:63:d9:9b:ea:f3:f2:
                    16:c0:23:42:43:0c:1b:03:79:6e:ab:69:a2:52:38:
                    4b:7f:9e:f3:06:7c:4c:c5:d2:04:2b:2e:02:c8:8e:
                    6d:81:d8:34:58:eb:5b:01:1b:45:89:cf:06:c5:e3:
                    20:ca:cf:d0:fb:58:f1:cb:f6:a1:1a:fe:c8:ff:88:
                    a5:c0:d6:30:e6:33:77:c9:ee:5c:a0:0d:2c:39:aa:
                    81:99:f7:02:a9:99:75:49:70:e2:e0:fc:2b:1d:31:
                    78:cd:a6:cd:6b:a9:19:ca:b2:47:cd:81:7d:92:16:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:BA:E0:07:7B:99:63:E1:83:63:90:EC:B3:C1:B6:D6:B6:86:55
            X509v3 Authority Key Identifier:
                keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:bc:5b:7c:0d:3d:b7:cd:1a:2a:6d:42:18:2d:eb:f2:bc:
         e2:ed:d8:76:3b:1e:f9:68:7c:4c:82:15:45:a5:a7:2b:e1:62:
         ae:96:bc:eb:13:29:08:e2:12:9b:dc:18:7a:13:f3:c2:74:d6:
         1f:c8:af:8a:1b:b9:58:0c:ec:e5:89:a1:9e:93:85:ed:25:00:
         e3:49:af:c7:23:32:b2:5f:9d:ac:93:a8:ca:50:5e:cd:17:83:
         3d:c7:32:13:ca:26:57:6f:a4:95:bf:08:d7:6f:57:0a:65:5e:
         29:4e:db:8e:1f:d7:d5:4a:bc:e7:7e:79:4b:4e:b9:ae:72:f5:
         24:05:39:e5:52:86:a5:34:ca:5c:b6:ef:c4:34:1d:a4:70:62:
         00:b4:00:22:47:b8:46:90:63:cf:0e:da:65:7d:89:bc:c1:41:
         48:9a:7a:54:7c:ac:95:74:94:24:96:1b:71:52:e5:2c:0e:4a:
         15:4e:04:d7:4f:9e:7e:e0:5e:93:1e:1d:63:11:12:a9:38:b4:
         01:2a:1f:80:20:b3:9e:20:2f:74:8f:b6:10:e7:ff:d5:e3:db:
         d6:31:54:54:5f:ed:92:03:97:01:33:98:66:27:7f:f9:b8:c7:
         2c:2e:76:dd:ac:2a:2f:8b:44:c1:bd:c8:32:e5:53:8f:78:ff:
         ce:4b:5d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:20 2026 by rpki-client