Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
File:                     atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json)
Hash identifier:          ZdQoXzOjevJ2IyjqAtWjIVHdtCbMfUc4n3NGhp0WolA=
Subject key identifier:   D2:81:57:C1:73:26:2C:F0:CC:31:47:1D:D6:26:20:CB:3E:51:EB:36
Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
Certificate issuer:       /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
Manifest number:          01AA
Signing time:             Wed 25 Mar 2026 03:36:48 +0000
Manifest this update:     Wed 25 Mar 2026 03:36:47 +0000
Manifest next update:     Wed 01 Apr 2026 03:36:47 +0000
Files and hashes:         1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: qk6D6pWd5qRvYRhBX4iQrR+dggGtAdQhwTluTK4Px9k=)
                          2: 36172D6200E911F18D21A14F396F56BC.roa (hash: 77EbUdBXNscTbPDQ5ZvSP6ndeE2Lqe+veg3a/HAELsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl
                          rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
        Validity
            Not Before: Mar 25 03:36:47 2026 GMT
            Not After : Apr  1 03:36:47 2026 GMT
        Subject: CN=69c3584f-bf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:40:8e:d7:96:f8:db:9d:51:bd:71:15:a1:
                    7f:06:c3:c5:51:2b:df:71:b8:df:1a:50:6a:46:b2:
                    0d:e5:46:cd:e1:b7:2d:4b:81:27:6a:63:b9:73:70:
                    c4:c3:3f:2f:6c:f5:7a:ac:78:15:9d:93:55:0c:dc:
                    0e:73:d1:af:a6:e0:eb:fb:ea:19:33:9c:3a:09:f0:
                    18:b7:89:5d:37:a4:6a:a7:17:cd:8a:f5:27:ad:11:
                    6f:63:7e:c6:7b:ae:84:1b:9d:95:35:7d:02:72:21:
                    63:d5:a1:b8:9e:0f:41:ec:f9:d7:3b:ec:7f:86:ed:
                    95:db:de:c7:d5:4d:27:c0:70:a6:12:c5:de:07:ba:
                    1b:da:2c:24:a6:eb:c7:27:38:23:c0:6b:4d:9a:20:
                    aa:95:7b:65:94:9d:0d:78:31:37:e9:8b:58:e0:e9:
                    34:aa:54:2d:60:cf:25:ea:05:dc:02:fe:bf:20:c4:
                    2d:47:99:a5:f5:6e:aa:e9:de:cf:90:0f:f2:75:8c:
                    13:24:0f:71:67:e9:3e:37:1b:f2:58:64:69:66:48:
                    3f:72:c6:16:04:87:2a:d5:84:03:ca:24:19:e2:49:
                    74:40:75:12:8e:3f:ad:dc:b8:03:66:aa:54:ec:b9:
                    1e:28:2f:c1:f4:aa:09:d9:b9:40:6c:b3:73:fd:99:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:57:C1:73:26:2C:F0:CC:31:47:1D:D6:26:20:CB:3E:51:EB:36
            X509v3 Authority Key Identifier:
                keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:c6:2c:97:67:b9:a2:7c:e5:80:4f:fa:9a:40:27:57:68:
         33:57:3a:93:5f:7d:07:9f:e4:f0:f9:e6:63:36:52:e1:31:db:
         fb:0b:5b:c0:dc:39:9c:ba:7d:f7:0f:eb:9b:e4:51:ee:c3:ad:
         85:ea:19:d4:7d:1a:d9:09:df:bc:ff:20:0b:16:01:1d:3a:38:
         bf:8d:3d:e1:a5:39:7c:a7:99:8f:51:80:69:6c:7d:f6:ee:f0:
         60:a5:10:b8:90:55:74:38:b4:d0:0e:7d:fd:95:a9:ea:4e:25:
         d2:4d:bc:57:f7:78:41:5a:75:12:c3:20:08:c1:04:26:a6:ac:
         6f:01:2a:b9:b3:3a:ba:d3:93:6b:50:43:fb:ee:0d:a8:87:72:
         5c:19:42:0d:db:7b:d8:e3:0b:9b:2a:dc:67:bb:ca:17:af:f0:
         61:8e:54:87:d5:c4:fe:f2:bd:7a:cb:8c:f7:19:58:4b:dc:58:
         65:5d:54:19:12:70:58:b4:97:ca:b0:2f:fb:4b:d7:fb:5d:86:
         d6:fa:c7:c8:1c:da:f8:31:13:9a:bc:3a:73:12:e2:d7:84:02:
         aa:79:bc:a8:74:97:7a:be:65:b0:40:83:72:6e:ee:39:e8:f1:
         ba:e3:fa:3d:9f:3a:a2:df:9c:92:b7:02:92:b0:90:fc:f2:dd:
         ef:16:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:43 2026 by rpki-client