Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
File:                     Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json)
Hash identifier:          iLVepfmeqOaJKiV1aYd9N+Ja//Tuj2kfKG1mz+YfKCA=
Subject key identifier:   A7:81:F0:12:C9:84:F9:1E:E1:DA:03:F9:01:19:9B:EF:75:9E:07:47
Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58
Certificate issuer:       /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
Manifest number:          025F
Signing time:             Wed 25 Mar 2026 01:36:40 +0000
Manifest this update:     Wed 25 Mar 2026 01:36:40 +0000
Manifest next update:     Wed 01 Apr 2026 01:36:40 +0000
Files and hashes:         1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: o6r/kn9xDRCDCAiqxNsf4YbVsxTSDV6kW4ff1Enzjtk=)
                          2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: mpFx+GVvx2W568CfIz+VjIPScWb9y6xnHlbKs64HIb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl
                          rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158
        Validity
            Not Before: Mar 25 01:36:40 2026 GMT
            Not After : Apr  1 01:36:40 2026 GMT
        Subject: CN=69c33c28-8d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:8d:32:6f:c8:d4:90:a7:08:a4:60:3b:5e:
                    b8:a6:e6:56:49:44:07:d9:5e:fb:13:8c:2e:ee:ef:
                    a2:4c:dd:14:ee:b9:2a:67:24:c7:6c:58:fa:5d:82:
                    6f:cb:95:d0:a5:32:5d:e2:bd:0a:51:05:42:ca:65:
                    f9:cc:f2:39:a2:db:3f:2f:22:5c:bc:b2:5c:55:bb:
                    42:cd:10:88:ea:56:21:50:c7:4b:d3:af:1f:fb:36:
                    1a:89:7a:ef:ce:d6:6c:cd:82:77:20:04:a6:0c:64:
                    bc:d4:86:6d:5a:5f:88:fa:82:45:d3:c7:70:ea:6e:
                    3d:aa:db:08:01:27:5f:78:20:f5:99:9b:2a:6e:a0:
                    bb:e7:fe:99:9c:ef:49:a5:1b:d0:4d:f2:9c:e5:33:
                    04:a0:44:a6:2f:5d:be:0c:6f:e9:62:03:cd:df:81:
                    11:9f:eb:e1:82:91:d8:cd:22:dc:9c:18:83:70:16:
                    f0:85:fe:09:cd:fb:89:90:54:f2:7b:61:ba:62:57:
                    c6:fb:66:c8:94:ac:91:04:b1:8c:75:ba:e8:14:73:
                    dd:1a:8e:77:02:f8:65:be:86:75:72:c1:6d:5c:42:
                    35:4c:05:8c:bb:99:f8:af:01:e8:de:89:e8:40:be:
                    ef:bd:04:3b:35:44:a3:29:98:06:0b:06:05:3d:8b:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:81:F0:12:C9:84:F9:1E:E1:DA:03:F9:01:19:9B:EF:75:9E:07:47
            X509v3 Authority Key Identifier:
                keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:66:bc:29:e6:e7:7d:19:5a:65:49:45:ee:7d:a9:ef:5c:df:
         76:68:0f:1c:ea:b6:80:b3:a2:7d:4c:41:af:a5:61:8c:7c:90:
         7f:9c:e8:80:fb:3a:14:64:42:13:eb:69:b6:3d:54:d8:4a:6e:
         81:ef:6b:19:32:c7:3a:ea:e4:c4:79:41:78:b9:79:36:97:50:
         39:e4:16:ca:65:44:70:b6:98:d7:cd:58:b4:cf:15:a3:6f:d3:
         8b:d2:6f:77:38:07:61:75:da:44:04:4f:0e:11:6c:ba:2e:7d:
         f6:4e:e7:a4:4d:0f:c3:05:12:d4:16:6f:62:e9:a9:fd:12:6e:
         c4:75:d7:bb:35:c8:ba:b4:56:ee:80:46:16:e9:90:ad:98:ce:
         88:f3:ca:ac:ff:0c:f6:54:10:2f:30:4d:68:d1:dc:85:07:28:
         8c:4a:36:a4:05:6e:bd:a4:26:8b:2f:87:51:2d:a5:72:d1:e0:
         62:6e:8b:e2:7f:12:26:c6:26:c1:cc:90:76:16:47:bb:a9:3b:
         78:a9:2c:27:ce:09:be:89:d0:71:a8:60:68:12:46:33:b2:10:
         de:53:5a:d1:66:74:05:a2:93:85:9d:b6:5c:0c:f0:32:45:a9:
         c4:2b:80:ef:f3:c5:62:08:55:64:83:02:83:a5:e5:3e:85:3b:
         2e:16:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:47 2026 by rpki-client