Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          g6DmeypFXWdggqjAwSOV5UwQO15NDXgdgwd0/jCkUmA=
Subject key identifier:   A2:92:4D:64:D7:E8:64:5D:E8:62:66:96:28:93:63:61:A3:B6:74:25
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          0206
Signing time:             Tue 24 Mar 2026 15:08:54 +0000
Manifest this update:     Tue 24 Mar 2026 15:08:54 +0000
Manifest next update:     Tue 31 Mar 2026 15:08:54 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: R7jt6MfqhWh5thvVx6RYbDEkdQEQzKnJvrRgUesHqHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Mar 24 15:08:54 2026 GMT
            Not After : Mar 31 15:08:54 2026 GMT
        Subject: CN=69c2a906-c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:9d:ef:a0:c5:c6:53:50:2a:d5:eb:2a:0d:
                    3e:a2:23:29:7f:5e:41:d4:14:2f:ae:be:40:f8:2b:
                    bb:7e:1d:81:0b:48:64:77:31:de:b8:1f:35:47:d5:
                    44:3b:81:2e:30:c2:8e:19:7d:64:c5:34:c9:f9:c6:
                    c7:b9:d6:de:79:0e:42:5b:ad:af:f2:31:20:b3:1b:
                    10:fe:73:b5:b2:82:56:17:2a:02:41:f4:bf:b4:68:
                    1b:73:ef:98:e8:d5:cb:94:f9:24:03:2d:86:4b:03:
                    43:86:a3:c4:19:ac:2e:b6:5a:b4:7c:66:78:71:cc:
                    a2:d2:e4:b4:c3:3d:eb:8d:45:fc:46:83:53:a3:0c:
                    9d:43:8a:ab:6b:a0:a9:1e:b1:06:4e:95:a4:5c:69:
                    aa:06:81:01:21:a7:8c:12:d3:cc:63:fd:9f:5f:61:
                    2d:19:f7:ba:f4:2d:47:a1:12:17:35:97:1e:92:8f:
                    4f:5d:f4:92:40:2a:39:b7:1b:ec:6e:9d:2b:e1:05:
                    bd:42:9f:3f:91:09:a1:22:f8:e8:fb:18:2d:07:78:
                    37:6b:23:17:81:0d:fb:5d:f3:db:bd:e6:40:da:4b:
                    16:06:ba:99:0a:b4:c5:fb:78:03:54:18:e9:d8:4c:
                    96:a3:51:3c:52:3c:07:de:2c:e4:e2:43:5e:48:83:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:92:4D:64:D7:E8:64:5D:E8:62:66:96:28:93:63:61:A3:B6:74:25
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:56:68:3f:47:c8:e1:11:d9:83:89:c9:f6:3a:6d:53:34:
         d5:3d:99:09:3a:00:07:33:07:87:f0:57:ad:01:fd:b2:b3:94:
         5d:08:d6:15:ae:cb:d0:c1:a2:a2:2c:43:91:c6:fe:c1:1c:da:
         df:18:cb:25:30:bc:ad:05:2a:90:80:ce:fc:85:63:6e:fe:5b:
         4b:ee:f8:79:47:97:ef:36:5c:1e:63:ab:cb:a6:12:c4:29:fd:
         b6:a7:aa:d3:7e:5c:63:0d:36:15:54:9b:d3:64:d8:13:86:5f:
         01:cf:f5:44:3c:f0:f4:5a:77:e3:53:cd:dc:96:d6:df:a9:a1:
         71:3e:b6:ea:85:ed:a1:c9:51:81:99:fb:10:15:3c:33:54:fb:
         53:88:67:6e:4c:f1:cf:9d:e4:1a:b6:47:1a:c7:a4:be:92:57:
         21:9a:a0:ad:60:e8:0e:e6:1f:c5:3d:c4:5e:01:d6:df:a0:58:
         3c:db:73:c6:36:ba:a3:1b:76:22:a0:99:f1:a9:d5:d1:c1:41:
         d6:5e:2a:53:6a:4c:68:93:fc:a4:f7:2f:82:4e:b8:dc:f1:9f:
         37:f4:30:14:68:9b:e2:ea:00:b1:db:c4:11:7d:bc:ba:27:78:
         8f:0b:cf:59:0c:12:60:97:3e:7b:a7:13:4f:3a:df:3a:70:6c:
         ce:8a:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:55 2026 by rpki-client