Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
File:                     H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json)
Hash identifier:          J8fwbVYQYMV2Sp2Y+t3x2x/Ywbx/HWT5/Dtb4bJjnF0=
Subject key identifier:   EF:4F:DA:B2:FC:A2:AE:33:28:0C:01:F2:57:54:14:AE:CD:A1:3B:AA
Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A
Certificate issuer:       /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
Manifest number:          86
Signing time:             Wed 25 Mar 2026 06:53:35 +0000
Manifest this update:     Wed 25 Mar 2026 06:53:34 +0000
Manifest next update:     Wed 01 Apr 2026 06:53:34 +0000
Files and hashes:         1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: cpN4dJgUDK+JMpz8DJQ/tWtzpWd7hLCKrTh/WoaAQp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl
                          rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
        Validity
            Not Before: Mar 25 06:53:34 2026 GMT
            Not After : Apr  1 06:53:34 2026 GMT
        Subject: CN=69c3866f-baa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:b2:69:9e:78:1c:b5:e7:c8:78:e0:44:4f:
                    68:ab:03:8f:80:10:bb:4c:55:5e:5a:2d:a1:84:10:
                    68:e9:e7:74:44:d2:5e:1a:a4:1b:a9:5a:04:9f:d7:
                    5a:05:5a:71:12:29:51:dd:be:e2:bd:10:be:83:f6:
                    65:52:e1:92:cc:6c:f1:3d:6b:a7:3b:07:ba:42:0b:
                    42:42:24:a1:ea:52:00:ff:f3:a0:7f:55:60:0a:da:
                    05:eb:f1:07:4c:fe:14:20:56:a3:1b:11:df:3e:03:
                    95:13:16:b4:88:f4:8a:bd:18:e2:8c:e6:9e:7b:65:
                    ff:28:a1:86:00:dc:79:fc:5e:e1:36:af:9b:16:ff:
                    b4:b1:08:62:d3:4c:00:d0:eb:0f:29:98:da:45:e7:
                    e3:22:19:f2:f1:f2:cf:f1:c5:2c:c9:ee:74:13:2a:
                    fd:2b:fe:a5:a1:8c:40:8e:22:df:67:ac:0f:71:83:
                    a6:67:86:83:5d:52:24:82:36:e2:74:b2:8d:2c:c3:
                    d5:82:9f:eb:ee:cd:eb:02:c8:8e:14:19:11:b7:7a:
                    02:c1:f2:66:37:b4:30:39:2b:99:c8:71:f6:80:43:
                    df:3b:8d:24:49:47:00:7f:82:6a:3f:56:a0:70:53:
                    ab:70:a2:c7:f4:06:4c:d2:c0:4f:92:8c:3a:b9:1f:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:DA:B2:FC:A2:AE:33:28:0C:01:F2:57:54:14:AE:CD:A1:3B:AA
            X509v3 Authority Key Identifier:
                keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:6c:4d:c0:11:8e:d6:67:58:c7:71:18:76:bf:f3:a3:0f:
         09:33:27:b0:3f:0c:7c:fa:0c:dd:66:d0:5e:23:ca:f1:ca:ba:
         7a:9b:d2:e6:ef:ad:39:a2:c7:89:d8:63:de:b1:b0:3e:1e:ed:
         6a:14:36:fe:4c:77:5b:3f:62:bb:27:64:e3:93:d2:e9:c8:ea:
         f0:bb:69:c6:f9:1f:e7:8d:a2:72:e9:d6:32:1d:f7:ad:db:c0:
         11:21:da:bd:00:7b:c7:cd:69:df:01:9f:52:ef:59:a6:a4:90:
         fa:fb:c2:73:b4:f8:d6:6b:70:b3:5c:3d:80:97:40:ce:4d:75:
         ff:89:47:88:3e:79:d0:1c:d2:2a:28:e0:24:11:de:3c:e9:a3:
         31:ee:a2:c6:95:e5:44:db:17:c6:d7:7a:22:a6:ed:39:09:29:
         14:72:ea:da:e6:39:0c:79:d7:18:3c:eb:b9:79:af:c4:9b:0a:
         f3:58:00:87:82:26:09:53:62:a0:d3:84:0c:da:2c:f0:f6:84:
         f6:b6:11:83:4c:93:e1:1f:0d:ac:8c:b6:26:3a:8c:00:e1:0f:
         b0:ab:3a:02:13:7a:67:88:9f:eb:b8:c6:c7:1d:b9:d2:05:d6:
         b6:b6:fb:7d:6b:ad:36:89:43:91:d4:df:69:13:2b:84:96:74:
         80:e9:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:11 2026 by rpki-client