Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File:                     s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier:          a9Clu9ukb//jA+z8nla0ZWHkJXPjgkaQxTEzum6pdOQ=
Subject key identifier:   B6:D3:4B:F5:37:77:5B:2B:BA:58:36:B7:A2:AC:47:3E:19:CF:BF:0D
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer:       /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number:          0272
Signing time:             Wed 25 Mar 2026 01:22:55 +0000
Manifest this update:     Wed 25 Mar 2026 01:22:54 +0000
Manifest next update:     Wed 01 Apr 2026 01:22:54 +0000
Files and hashes:         1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: u7XozO7+KZmul5OrJtSzaGLFVxdYhSo+0OIzj/gb9t0=)
                          2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: euANKi0FBonGo36Nw13/+KNAEhPHHNlMgJqTV7qix5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
                          rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
        Validity
            Not Before: Mar 25 01:22:54 2026 GMT
            Not After : Apr  1 01:22:54 2026 GMT
        Subject: CN=69c338ef-502b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:6c:8f:ce:35:bf:dd:29:6c:bf:25:5d:dc:
                    28:0a:ed:3b:c1:b8:7e:5f:e9:24:36:65:1f:69:a7:
                    0c:96:c4:74:ba:1a:fd:7e:e4:ff:f8:6e:bb:1d:4d:
                    1f:62:23:0d:00:14:56:ba:41:c5:f9:89:3c:a0:58:
                    a0:d6:66:89:93:7b:53:11:f5:00:2d:1e:67:85:f4:
                    51:21:6c:4a:7c:c8:1d:c7:b6:94:ca:3f:40:2c:e9:
                    e6:31:0c:ef:a6:09:e0:32:a0:8e:3b:eb:0e:14:17:
                    83:64:4c:86:21:2e:93:2f:ce:56:24:85:c1:e4:47:
                    ae:3c:7d:ca:6c:6f:b3:4a:10:21:8c:bc:70:16:b8:
                    2d:20:11:87:5e:c0:a9:6c:58:5e:b2:1e:ad:18:64:
                    a7:60:ff:72:45:08:90:20:b2:9e:e9:db:36:8a:79:
                    23:e7:05:7e:7e:8f:87:5a:d1:8a:36:d5:83:8f:76:
                    b0:51:96:ee:65:7b:99:7d:95:16:16:40:81:fc:f9:
                    81:f1:0d:9a:73:9d:34:be:cd:ef:c8:ea:1f:a6:ba:
                    9e:35:ba:a7:fd:f5:30:73:d7:08:dc:aa:bd:0d:05:
                    18:81:a8:55:75:fc:86:0c:cf:0f:1a:ed:07:fc:b2:
                    5d:7a:6c:60:67:c3:c1:2f:c5:2f:48:67:fa:ef:98:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D3:4B:F5:37:77:5B:2B:BA:58:36:B7:A2:AC:47:3E:19:CF:BF:0D
            X509v3 Authority Key Identifier:
                keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:78:48:a0:32:f2:89:0e:95:00:92:75:85:84:dc:f3:1b:
         d7:04:37:a6:43:e0:f4:6e:d4:f1:fb:7e:eb:a2:1a:06:5e:58:
         e4:00:a9:e4:df:ab:ee:b7:a7:f0:de:8f:d6:9f:09:e6:30:5a:
         bd:49:3a:0c:29:c5:36:6e:db:92:c1:65:93:bc:aa:7c:05:33:
         a3:36:bd:6d:d5:a7:97:14:07:da:59:e1:56:81:94:d2:df:64:
         32:ac:c1:2a:31:66:d5:9c:92:c4:51:b1:c6:3f:05:0c:53:7a:
         6c:07:06:a8:43:54:b5:74:75:ad:2e:fb:69:47:fb:09:25:a2:
         2e:23:91:38:87:dc:9b:6e:c6:c2:39:2a:b3:35:e9:3b:a1:bf:
         aa:c9:89:a5:02:0e:c8:13:1e:81:98:c3:3d:4a:66:14:dd:f4:
         51:ac:01:e8:a1:b9:ed:3a:63:76:e1:56:bb:dc:62:9f:27:f1:
         54:09:d6:6e:35:91:99:dc:f6:13:77:c3:92:58:53:60:a6:c6:
         04:29:ee:1a:df:09:3d:bf:86:03:2f:49:a8:56:6d:5a:f4:f9:
         5e:86:19:db:ef:fa:84:a8:a2:b8:8b:67:b1:19:14:b4:3b:62:
         be:b0:f1:09:de:9e:bb:eb:fb:af:91:f1:dc:5e:3d:d0:e4:e0:
         10:5f:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:29 2026 by rpki-client