Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
File:                     55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft (raw, json)
Hash identifier:          1z79x2YrN6JA/yCDT7UISKP4X4tmV1YnMsvm3hG6lGQ=
Subject key identifier:   A8:B2:1E:B7:24:09:CF:7B:F5:BE:38:A6:30:CC:07:F1:72:B8:FC:4F
Authority key identifier: E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73
Certificate issuer:       /CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
Manifest number:          0240
Signing time:             Wed 25 Mar 2026 01:58:00 +0000
Manifest this update:     Wed 25 Mar 2026 01:58:00 +0000
Manifest next update:     Wed 01 Apr 2026 01:58:00 +0000
Files and hashes:         1: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl (hash: BNppfIG4qfdp+yIsIJOzGePEByLAEiP5po0FmLBDyjQ=)
                          2: 0B361848BC4211EF86E55A27C4F9AE02.roa (hash: GEiGFVj7iZWfLwJkWUzsrbq8ChoLJyOmN6jevKNFxe0=)
                          3: F1AA5BA0BC4111EF8F383127C4F9AE02.roa (hash: YOqxFO1tVF6+LN43G8TnGo+tbKJA22iLwXTimkV4klQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl
                          rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141796, serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973
        Validity
            Not Before: Mar 25 01:58:00 2026 GMT
            Not After : Apr  1 01:58:00 2026 GMT
        Subject: CN=69c34128-9ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:94:e9:de:a5:e4:a5:9b:84:55:0d:19:6b:
                    72:46:d7:4f:7e:16:07:00:4a:8e:c0:db:80:bd:d4:
                    f5:56:83:38:1c:3b:9a:e1:36:7b:ad:8b:18:f3:5f:
                    48:c1:c4:54:22:86:4d:5c:00:e7:5b:20:57:78:0c:
                    8d:7f:30:43:44:2a:43:6a:5b:c7:a5:c0:bb:8b:ba:
                    f4:27:54:38:83:30:fd:2e:b5:67:8e:77:26:a7:19:
                    4b:f3:2f:92:c5:d7:da:81:0b:29:51:41:96:7e:c2:
                    2a:36:58:80:d9:f3:07:7f:aa:b2:af:e8:61:e8:e2:
                    85:ca:ff:e7:3e:f5:6b:87:c4:37:41:d3:06:78:6b:
                    44:3a:7d:f1:7f:1e:7b:bd:9b:4d:de:88:86:75:12:
                    ea:ca:2d:82:36:c7:a7:ce:81:cf:3b:02:b0:ac:8a:
                    7e:c7:3a:95:32:5a:f9:04:b3:05:be:4b:c7:0d:2e:
                    c4:d3:a7:c7:d7:be:95:91:a8:62:88:14:68:f6:f3:
                    4b:76:23:63:1d:00:6a:aa:3a:6f:1d:69:14:10:80:
                    1e:e0:92:3f:8b:da:3b:37:5c:1c:87:bc:ac:ee:71:
                    82:2d:b5:34:2e:32:cc:11:56:92:f0:ad:1e:a2:0b:
                    01:3f:43:11:0d:a5:73:fc:fb:37:e7:97:20:38:a5:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B2:1E:B7:24:09:CF:7B:F5:BE:38:A6:30:CC:07:F1:72:B8:FC:4F
            X509v3 Authority Key Identifier:
                keyid:E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:05:c9:a5:ff:09:da:8b:2c:38:d7:89:89:16:e4:f5:22:7a:
         ff:d3:79:fd:d3:89:92:e5:32:88:b4:a7:ce:d8:64:a8:ee:ec:
         8a:81:36:81:d9:cb:19:0f:ca:a3:b4:fe:53:5c:7b:66:74:c9:
         f7:33:fa:d2:44:1e:ea:26:09:0e:cc:13:2d:0f:10:a7:fb:cf:
         de:a7:66:4f:81:dc:45:70:9a:cc:d1:a7:02:fc:1d:99:6d:bb:
         0f:a1:73:4d:cc:17:86:6f:f2:a3:1f:39:e0:7a:85:57:11:9d:
         71:44:08:ea:70:e5:c7:ec:fd:b8:d8:06:60:7f:24:65:dc:b1:
         95:42:4c:55:b7:d5:a9:66:ff:81:85:0a:63:a6:89:d6:52:fa:
         4d:91:74:c7:2e:4f:6e:05:9c:a3:a1:80:4b:00:0d:6c:2c:5c:
         e3:c1:2f:ec:04:07:0d:0b:11:fc:ba:7e:f6:9d:92:e3:52:8f:
         6c:b2:4b:14:33:53:2b:02:4d:e3:f5:8c:bd:31:3c:46:89:c8:
         ed:0a:7f:86:30:ef:9a:7f:11:88:71:fb:49:a0:9d:13:5d:53:
         91:ee:a3:4a:c0:60:c5:a0:60:38:5a:d5:91:8d:a9:36:0a:cb:
         a2:b7:9e:a3:03:07:a8:11:d6:4f:79:a7:05:61:cb:21:cb:fe:
         42:64:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:51 2026 by rpki-client