Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
File:                     b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json)
Hash identifier:          dWkzEDQ+loVyVrh7vmSZbeAeEl8XgUM7mvd7wq3NBkg=
Subject key identifier:   1C:24:82:7C:92:E6:C9:AE:2A:AD:68:C6:E1:FA:25:05:55:A3:3B:08
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Certificate issuer:       /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial:       1D19
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
Manifest number:          1CF8
Signing time:             Thu 26 Mar 2026 16:08:30 +0000
Manifest this update:     Thu 26 Mar 2026 16:08:29 +0000
Manifest next update:     Thu 02 Apr 2026 16:08:29 +0000
Files and hashes:         1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: M0fR+5J5n++9JhdhxnTtQrHVY7HYimdnDiJgXytsqUk=)
                          2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: FVNSKaXDdy0CaXltkNWY4bF0klXSYM3BzCHdZ56uQag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7449 (0x1d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
        Validity
            Not Before: Mar 26 16:08:29 2026 GMT
            Not After : Apr  2 16:08:29 2026 GMT
        Subject: CN=69c559fe-3bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:dd:b8:bb:29:54:f0:6d:3b:17:c2:bd:b5:
                    fd:27:77:4f:6e:31:0b:5d:03:c2:cb:6a:49:35:ee:
                    17:a7:11:ef:ec:8d:2b:33:36:d6:66:a8:af:69:88:
                    66:41:56:ec:1b:5a:e9:e9:ce:20:a3:a1:44:78:c4:
                    56:e8:28:9b:3f:3b:77:0f:b6:e6:c8:9a:7c:a4:73:
                    08:5f:49:d5:85:24:e0:dd:8b:42:4c:26:51:71:0e:
                    e6:a9:6a:7f:e2:c6:03:05:07:b5:cf:c5:1c:f6:3a:
                    f8:6b:11:41:9f:5a:19:88:aa:83:01:cb:97:9e:db:
                    27:02:a4:9e:4c:d7:99:97:45:08:03:30:f3:71:78:
                    47:34:78:0d:4a:a2:8a:63:ec:74:e0:23:e9:64:3e:
                    47:6f:ed:18:9b:e9:27:7f:84:52:f4:46:81:5c:02:
                    a1:30:ff:a1:82:73:13:61:4c:61:b9:f6:b3:74:8f:
                    b7:f3:23:04:c1:fb:2c:35:81:94:9b:16:fa:7b:1a:
                    83:e2:4b:dd:e2:09:96:78:4d:69:52:16:ad:07:21:
                    5a:fc:86:af:02:2d:db:d5:04:64:a0:99:1a:d4:2a:
                    1e:2c:88:39:f2:42:66:db:5e:28:22:8c:ad:b8:94:
                    55:10:1b:3d:de:ed:eb:00:f7:2c:64:58:76:82:ee:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:24:82:7C:92:E6:C9:AE:2A:AD:68:C6:E1:FA:25:05:55:A3:3B:08
            X509v3 Authority Key Identifier:
                keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1c:0b:35:a0:b2:48:2c:fa:b4:e9:b7:18:30:f4:e0:71:ca:
         49:bb:34:b2:38:a8:49:47:d8:e2:ce:15:c8:7a:fa:f7:6c:b6:
         99:e1:c2:b5:d4:23:54:3f:94:8d:d6:0a:77:37:a4:6a:e6:a8:
         95:63:cf:af:e5:58:44:32:1e:69:fb:dd:fe:94:0f:dc:9b:0c:
         7c:98:1c:3e:bb:e3:96:24:58:56:c8:f5:4b:c1:39:42:93:51:
         05:06:6d:43:54:d9:cb:5c:63:40:6b:45:3e:6e:14:0b:bc:d0:
         b6:64:b9:cf:01:27:78:3a:c0:4f:7f:2a:4e:e7:10:fd:f2:66:
         37:58:ac:b3:f6:93:c2:92:4b:18:7b:b2:04:99:b2:9b:d3:41:
         88:d0:bd:8c:1c:5c:80:48:95:87:c3:f6:ca:40:6c:09:08:de:
         e5:e8:af:ed:ac:76:c9:cc:68:55:fb:c8:de:cb:11:38:4e:c6:
         6f:42:cc:45:1c:22:cf:3a:2e:b1:93:93:24:1d:25:b7:53:c3:
         9c:2a:e3:74:37:a7:7a:c3:55:fd:dd:c9:80:a2:ef:dc:ca:8f:
         a2:8b:ac:1c:22:40:ad:1c:f9:d3:15:ff:0c:5d:ec:65:12:35:
         49:8d:7b:3e:31:d5:1b:84:c5:aa:c5:75:e1:c7:9f:9b:8c:46:
         30:fb:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:55 2026 by rpki-client