Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
File:                     usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json)
Hash identifier:          Erq6oPTVfD03LIa+wjsjIcmKF5t4kI7V+DJ/DVYqSBM=
Subject key identifier:   3F:06:2D:8D:22:8E:5E:A7:8E:BE:AC:3D:A0:6C:F3:57:E6:32:8B:DB
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Certificate issuer:       /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
Manifest number:          96
Signing time:             Wed 25 Mar 2026 06:40:30 +0000
Manifest this update:     Wed 25 Mar 2026 06:40:30 +0000
Manifest next update:     Wed 01 Apr 2026 06:40:30 +0000
Files and hashes:         1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: 53ZwYyD3Ga7cVAUNA7B1GG/t6ZFsPkDl8gDn06hMvyk=)
                          2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: TDS7qbzkjns0lb3qBIPlOIfh7gAVrC0ccm+ewwA1wN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
                          rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
        Validity
            Not Before: Mar 25 06:40:30 2026 GMT
            Not After : Apr  1 06:40:30 2026 GMT
        Subject: CN=69c3835e-79ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:99:f6:91:a1:24:3e:ba:68:ee:67:89:12:
                    51:95:61:d8:94:f1:24:c4:1b:98:89:4a:81:2d:0c:
                    90:8f:dc:2e:e0:5d:11:8a:1d:85:d9:b5:c4:06:eb:
                    b5:3c:05:55:ff:5a:08:16:3b:11:c0:d9:78:25:e2:
                    c7:0d:61:5b:a3:36:4f:32:61:27:48:4d:e8:36:9d:
                    63:2e:bc:93:c6:a0:14:a3:9f:bf:a0:33:d6:9f:d7:
                    2f:eb:08:69:17:80:76:e3:29:c4:8d:6d:4c:8a:44:
                    f5:b8:3d:8b:83:04:96:90:57:11:c7:75:71:92:70:
                    93:c8:b2:cb:53:66:67:fd:3d:33:8d:77:58:62:be:
                    3e:b9:f5:cf:00:24:b7:85:de:33:7a:0f:9d:31:fd:
                    d3:c8:85:7f:e9:59:97:a8:ab:2a:d5:3d:80:16:2f:
                    f6:12:e2:fa:77:d1:f0:e0:9a:5d:6f:22:a8:df:09:
                    7c:06:8c:3a:7e:b7:ec:3c:05:e5:86:5c:96:75:16:
                    cf:bb:3c:59:1e:99:9a:26:9d:ae:5e:8f:29:a0:3c:
                    02:cf:b5:c6:91:03:16:81:1a:05:c2:82:ad:84:6d:
                    48:02:d7:c7:67:f2:48:94:3b:e9:2e:d2:d3:24:1f:
                    2a:e1:f9:96:0d:d7:53:a5:82:85:48:e8:f9:ee:db:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:06:2D:8D:22:8E:5E:A7:8E:BE:AC:3D:A0:6C:F3:57:E6:32:8B:DB
            X509v3 Authority Key Identifier:
                keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:79:4d:d9:b4:3f:4f:2a:47:93:bc:60:d7:91:0b:28:40:
         25:29:f9:98:86:06:97:d3:1d:49:5a:fe:2f:0f:c8:10:ab:43:
         e8:8b:e6:4a:25:a7:58:1a:8e:4e:02:9a:fb:68:5b:df:77:fe:
         fb:c9:44:c2:78:19:66:06:f0:47:e8:bb:3d:63:3b:90:a7:0e:
         33:c2:14:93:41:17:e0:84:4f:8e:02:84:a4:59:e4:ac:e5:62:
         75:e7:63:94:04:02:23:06:0a:3a:7e:2a:5f:e9:8b:9d:0a:fc:
         2b:4a:8c:ac:1b:30:db:ba:1c:59:63:07:31:06:87:dd:06:bf:
         72:ef:c2:11:e4:9c:56:a2:87:67:9b:d2:bf:e3:9b:5c:55:15:
         96:2c:5c:9c:a8:cc:9a:a0:a1:cf:f0:6b:c6:ea:c4:c3:43:0f:
         8b:b6:e0:4c:ca:65:f4:59:95:79:63:ff:90:a5:b1:f5:6f:d0:
         f6:42:5c:6b:c5:56:f1:c7:af:84:ef:b4:ab:92:68:06:51:03:
         fd:f1:23:6f:1a:44:1d:66:f7:f6:f3:42:ad:7e:22:13:0a:50:
         c8:a1:49:2a:b0:dd:c5:eb:ac:37:06:9e:03:14:22:ce:9b:ad:
         36:20:37:aa:d1:67:4e:eb:3d:91:d3:2e:5c:6c:24:32:45:84:
         af:a0:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:45 2026 by rpki-client