Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File:                     CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier:          RRm3W20tPR3a++OfFtWGRECB7WZ1piErTAWhIVxqawo=
Subject key identifier:   CE:E0:58:F1:5F:60:C6:87:79:99:91:51:EA:06:23:EB:1E:90:37:17
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer:       /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial:       0850
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number:          0846
Signing time:             Tue 24 Mar 2026 20:34:39 +0000
Manifest this update:     Tue 24 Mar 2026 20:34:39 +0000
Manifest next update:     Tue 31 Mar 2026 20:34:39 +0000
Files and hashes:         1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: SxbH03e19RloHGu3tJRYqjmtSJU/cPhnRWut11V1VEU=)
                          2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
                          rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
        Validity
            Not Before: Mar 24 20:34:39 2026 GMT
            Not After : Mar 31 20:34:39 2026 GMT
        Subject: CN=69c2f55f-c783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:53:10:fb:33:25:d2:e6:ef:48:a8:05:3f:0a:
                    4b:72:46:e2:a2:75:35:ed:da:2f:0f:b7:86:c8:fb:
                    c2:48:b9:93:57:1d:e6:a1:75:74:56:2f:aa:7d:b6:
                    3a:59:7b:be:11:6e:c1:fe:dc:a5:34:d5:c4:97:b8:
                    da:80:30:c8:a1:13:69:f2:e6:f4:3f:13:4d:6c:66:
                    6c:e7:33:03:d4:a4:41:58:0d:86:5b:98:a2:04:d0:
                    85:58:59:5f:1b:2e:d4:1b:14:97:7b:cc:59:97:b9:
                    69:b2:c3:d5:ab:6a:21:59:7e:98:3d:39:82:40:35:
                    86:ca:5d:e6:b7:76:51:fe:36:ca:22:7f:a8:b9:43:
                    77:cb:6e:8e:17:f4:93:32:7d:77:d6:5a:70:9f:26:
                    59:b2:c6:ec:35:82:e2:2a:0a:cb:29:41:4c:8b:dd:
                    63:a3:f6:da:3d:b6:c1:c7:17:d4:31:c0:a6:c5:08:
                    0f:f0:53:e7:0f:9f:5b:09:5c:ae:5b:2c:a5:dd:14:
                    7f:14:38:8b:3a:ea:b7:34:1c:60:81:3a:40:1b:7a:
                    3a:48:71:e5:f9:89:e4:29:8f:f8:38:d5:72:a3:d5:
                    16:61:0e:ee:57:70:d5:f9:53:8f:14:e0:5a:36:32:
                    44:0a:69:0f:aa:a6:09:e7:65:91:d5:4c:bb:f4:6d:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:58:F1:5F:60:C6:87:79:99:91:51:EA:06:23:EB:1E:90:37:17
            X509v3 Authority Key Identifier:
                keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:53:70:fd:84:43:0a:13:18:75:20:18:7a:5e:56:26:d5:12:
         ea:3c:aa:d4:e1:d0:7e:ae:34:ed:b2:aa:aa:c6:58:a0:ac:20:
         6c:b4:47:58:8f:6e:47:bf:f3:3b:93:14:96:9c:2b:3c:0e:1e:
         a8:03:ed:e4:42:12:96:c8:15:27:74:86:b1:96:c4:bb:d0:54:
         49:69:39:d3:e8:23:c5:d6:00:56:2d:62:7e:99:df:5e:bb:85:
         0c:86:21:bf:6b:a4:a4:e8:bb:ce:0e:d3:c2:3c:c3:d9:51:63:
         58:10:9c:f7:76:ba:59:83:07:aa:8f:05:e3:3b:2a:0d:ff:c9:
         c4:a8:a0:d9:bd:63:b3:f5:80:4a:43:cb:00:d9:9c:95:9b:59:
         cd:48:35:16:1a:da:7e:60:33:a9:63:94:df:03:8a:00:04:2f:
         c0:8b:f6:81:f7:87:e5:cc:a8:78:8b:db:c9:0a:c1:71:69:6d:
         d8:9f:56:b8:b8:82:44:80:fe:7f:2c:78:93:eb:6a:c6:cc:5b:
         ea:94:7e:fd:5a:ad:a3:b6:a4:c4:b1:b1:5b:a3:4a:4d:33:91:
         9f:33:07:b8:df:92:9f:fa:96:f0:48:75:e5:80:39:fe:7f:2c:
         75:f0:41:22:16:1d:2d:d7:00:4e:d6:3a:f8:d3:88:81:52:03:
         74:ab:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:51 2026 by rpki-client