Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
File:                     9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json)
Hash identifier:          b95879ycGq2cmqqJUj76o1dTmNd1IHB7dWcvFFFM+hk=
Subject key identifier:   0E:0D:1F:63:1E:74:88:AF:13:41:A6:D9:57:20:98:49:7D:1C:8A:1D
Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
Certificate issuer:       /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Certificate serial:       0505
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
Manifest number:          04FC
Signing time:             Thu 26 Mar 2026 23:28:35 +0000
Manifest this update:     Thu 26 Mar 2026 23:28:35 +0000
Manifest next update:     Thu 02 Apr 2026 23:28:35 +0000
Files and hashes:         1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: 45yxtx5pn3rQcZNvX+H20B+SxwBViSC+o90JYKTVvVU=)
                          2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: wQRuE7hZR60ASbUdyxn7Q1yzJfs0TbeVvhz27sSwJvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
                          rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
        Validity
            Not Before: Mar 26 23:28:35 2026 GMT
            Not After : Apr  2 23:28:35 2026 GMT
        Subject: CN=69c5c123-9e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:45:a3:10:ad:b1:ee:58:06:28:55:a3:c3:
                    49:26:e8:f4:28:de:d8:ea:3f:d7:1f:9a:14:e3:5a:
                    88:97:05:4b:cc:0f:19:4c:cc:a4:db:83:e9:7c:e2:
                    51:ee:b9:ad:07:f8:61:ce:25:bc:43:59:39:8a:5f:
                    5f:50:0b:ee:f2:2e:39:f8:bd:55:5c:52:15:07:70:
                    08:6a:f9:a7:05:44:fa:0c:e9:09:5c:17:fe:6c:09:
                    e2:d8:ec:32:18:88:87:c0:46:1b:8a:44:81:ff:96:
                    97:15:21:03:02:08:1d:f0:c4:7a:94:9e:4a:27:f4:
                    3e:fa:fe:dd:35:d9:78:4f:58:14:c4:f5:5b:9d:14:
                    c3:c4:17:a4:08:5c:b0:a8:6a:f9:eb:24:28:17:1b:
                    f1:d2:c7:74:a8:94:e7:9d:4d:a8:f7:de:61:b0:9b:
                    33:4b:cd:81:54:d8:57:0d:c0:48:36:3c:60:80:2a:
                    c1:3b:74:79:70:d1:1d:e5:cf:ac:f8:94:4c:d0:f4:
                    d8:2e:8f:4c:84:82:df:e4:25:dc:a7:29:1c:fd:85:
                    0e:3b:85:ea:b7:81:6f:44:51:f9:88:c4:41:20:6e:
                    97:cf:44:62:7e:49:0a:4d:ca:dd:a6:7c:53:d6:ba:
                    03:5e:9d:0f:30:e6:61:f2:df:eb:2b:68:f2:24:da:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:1F:63:1E:74:88:AF:13:41:A6:D9:57:20:98:49:7D:1C:8A:1D
            X509v3 Authority Key Identifier:
                keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:80:f1:87:0f:ce:05:10:4d:81:7b:a8:ec:15:d5:3c:b9:55:
         fe:f9:10:96:91:3f:8c:95:c6:92:b9:23:32:a1:d8:74:f6:66:
         45:6a:58:a1:43:e2:ee:e1:61:31:a8:09:4c:4b:4a:ea:92:5f:
         3b:ea:18:f4:97:43:c2:92:cc:a6:53:79:f7:57:25:d6:a9:48:
         bd:e0:5a:b9:cb:7c:c1:09:3f:03:13:71:67:19:30:e7:34:35:
         0a:ca:93:b4:90:e0:82:a1:84:71:da:f6:8c:07:60:3a:ba:9c:
         13:3a:ec:73:3e:70:de:a0:8e:72:87:3f:0c:56:12:16:17:1a:
         62:3f:e3:9a:18:92:d5:d8:0e:2d:6a:07:e4:e4:94:98:6d:02:
         4e:f2:1c:ea:19:8d:8b:02:7c:9a:0c:75:1a:49:5f:3f:b8:dc:
         b0:6d:9c:c4:31:94:2d:0e:55:5e:30:29:ed:3c:95:cc:89:97:
         48:59:13:a8:ce:e7:7b:7a:95:66:26:8c:79:18:91:3d:11:48:
         f3:46:5c:fc:88:80:bf:50:b9:91:13:f2:e6:be:ca:ae:80:51:
         5a:21:09:c1:ec:99:0c:ff:dc:a1:3c:46:03:90:85:5b:44:ec:
         2e:df:cb:8c:a8:4c:6d:43:e5:18:58:c9:3b:a8:95:05:2a:91:
         2a:e7:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:21 2026 by rpki-client