Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
File:                     RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json)
Hash identifier:          V9OO2/K9g9DVhBsa22BE6zoowaqwcn651TBBHLSBiro=
Subject key identifier:   CC:43:FE:8F:CE:48:83:42:F6:FA:17:86:6A:BA:29:18:C3:22:9A:34
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Certificate issuer:       /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial:       03CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
Manifest number:          03C4
Signing time:             Wed 25 Mar 2026 00:18:28 +0000
Manifest this update:     Wed 25 Mar 2026 00:18:28 +0000
Manifest next update:     Wed 01 Apr 2026 00:18:28 +0000
Files and hashes:         1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: Y0lBKGU4e/rUMmVEx0vOQVwCDX3wb4TkBqKiHP9/zfk=)
                          2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: rol65H4iGTTFfmq9kasVZNiNTALZvQ+Yh45rrzp/W9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
        Validity
            Not Before: Mar 25 00:18:28 2026 GMT
            Not After : Apr  1 00:18:28 2026 GMT
        Subject: CN=69c329d4-413a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:6b:c7:e9:98:a0:9a:54:3a:23:ce:bf:26:
                    86:c0:d6:41:cc:55:f9:9b:c8:e1:32:e9:17:bf:b4:
                    db:ae:ac:49:c7:00:4a:23:71:59:09:87:ad:9c:ab:
                    20:60:ec:75:3c:cd:af:16:49:d7:3f:b1:f5:f1:aa:
                    8d:85:d1:fd:de:c2:57:d7:da:1f:63:c5:bb:bb:15:
                    40:9a:ea:70:ad:93:9c:cc:80:80:cb:aa:68:18:80:
                    cc:f5:a8:76:98:cc:36:f0:01:ed:bb:bc:53:5e:31:
                    de:c3:63:c9:5f:9f:98:db:fa:c7:64:88:f3:d1:6b:
                    2f:26:0d:35:84:79:eb:d4:3b:a2:93:8f:02:b0:c8:
                    d0:27:67:aa:5b:51:dc:bb:3e:bd:15:a7:90:e4:f5:
                    6b:a0:4b:45:1c:a9:ae:80:a4:67:c6:70:52:2f:c0:
                    3b:7b:6e:58:c8:70:95:5b:a9:16:fa:cd:00:0c:9e:
                    2f:e1:dc:3b:ec:51:b9:1f:cf:78:69:3b:76:31:c5:
                    af:f8:6b:f4:f1:26:9b:83:fe:a3:90:1f:08:fa:4e:
                    00:34:f9:0e:af:61:d6:aa:7e:6d:a0:a9:64:ba:65:
                    26:36:45:a0:e3:74:98:f4:a8:b4:0e:7a:05:bc:b4:
                    4f:fc:8f:e0:ba:56:56:39:d6:74:ce:ff:ed:6e:f3:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:43:FE:8F:CE:48:83:42:F6:FA:17:86:6A:BA:29:18:C3:22:9A:34
            X509v3 Authority Key Identifier:
                keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:26:b7:fa:d0:21:f0:ca:a3:8f:b4:d7:e4:27:36:ab:b9:
         ad:59:07:b1:4b:be:84:c5:c4:23:e9:3c:3e:a7:35:21:f4:e3:
         fe:33:09:65:76:5c:66:f8:90:b5:c5:cc:63:71:2c:e3:e3:c6:
         45:45:55:ad:23:f7:0a:16:5b:cd:b5:db:36:6e:89:61:67:9e:
         4e:f4:18:6c:7b:82:0b:4e:de:1c:22:ee:43:19:6a:69:af:5f:
         d6:5a:6f:42:60:48:08:be:a2:dd:d4:4b:37:58:42:5e:7a:5d:
         fc:7d:86:83:f1:0d:37:86:dc:45:30:02:c6:b7:95:f5:e3:9c:
         99:f6:96:72:3f:cb:25:bb:30:73:d3:c5:17:49:b0:5a:f7:1e:
         fc:a9:96:ed:9f:25:ce:a2:7d:ef:56:ff:6c:58:b6:9f:19:77:
         75:59:69:f2:7e:55:aa:7f:ad:96:62:4f:0f:7a:f1:7b:ed:61:
         01:5c:e3:24:50:d8:af:db:4f:4b:b3:35:71:d3:3f:57:23:f6:
         7c:38:08:25:92:06:c8:fb:ab:6b:f2:39:d0:fc:05:56:84:bf:
         5e:72:8e:37:28:53:26:65:8d:af:51:f1:86:20:27:ab:31:5d:
         bb:a1:c7:5c:35:bb:bf:5d:50:6b:8c:5d:e7:9f:39:7c:97:36:
         bd:93:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:40 2026 by rpki-client