Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
File:                     VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json)
Hash identifier:          qtcdkX+4MLSkhL7Q996nq1ze4F/RMaVMK5cDZ4M3SGI=
Subject key identifier:   C2:9D:E8:BC:F4:A2:94:1F:9D:E5:88:4C:24:AD:F7:67:BD:61:CE:CE
Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
Certificate issuer:       /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
Manifest number:          01A1
Signing time:             Wed 25 Mar 2026 03:27:18 +0000
Manifest this update:     Wed 25 Mar 2026 03:27:18 +0000
Manifest next update:     Wed 01 Apr 2026 03:27:18 +0000
Files and hashes:         1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: kmQEmU1g0tgGyxcew59fRfabWtzgrCxb176s806GpWQ=)
                          2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: +OOhEY2QYuVlJmHHeuO6Y/MNu74VTT7JnqNLcwMg9F4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl
                          rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB
        Validity
            Not Before: Mar 25 03:27:18 2026 GMT
            Not After : Apr  1 03:27:18 2026 GMT
        Subject: CN=69c35616-1143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:66:16:85:19:4e:c7:27:02:43:a3:c2:43:
                    45:dc:af:42:59:03:a3:5e:34:dc:de:65:4e:9c:20:
                    aa:91:a1:b6:8a:df:f8:2f:73:94:85:d9:09:b9:00:
                    20:a4:33:11:b2:b1:ea:77:7b:90:2a:11:94:49:57:
                    0f:de:71:28:f8:a9:1f:a0:75:71:6c:6a:95:50:20:
                    5d:9f:68:94:2c:dd:79:e5:b1:23:11:2c:19:3c:86:
                    e4:86:29:b8:08:b9:76:df:7d:92:c3:f4:7d:b3:30:
                    69:c3:b2:0d:36:bb:bd:ba:87:12:ab:8d:fe:54:b8:
                    bf:35:59:47:54:74:32:57:1d:c0:a5:bc:4b:a3:8a:
                    84:31:5a:c8:00:38:a3:4a:c9:4a:c6:13:27:b5:cd:
                    c2:03:e1:da:c9:e9:a9:4b:e2:51:85:43:cc:a9:f3:
                    6b:54:5c:02:b5:9c:33:bf:9d:66:71:a4:ec:10:e6:
                    ae:15:96:35:13:cb:ba:27:2b:20:42:63:1f:3d:d1:
                    cd:d6:fc:41:9a:81:19:cd:56:f8:12:9e:d6:7f:de:
                    67:ad:90:98:2a:68:b4:00:f6:68:7e:e1:02:4d:a8:
                    8e:e6:3b:b0:16:58:a5:b3:36:5a:d8:78:e1:30:10:
                    eb:a9:0e:f4:22:7b:a3:90:05:e4:78:ed:1d:d1:3e:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:E8:BC:F4:A2:94:1F:9D:E5:88:4C:24:AD:F7:67:BD:61:CE:CE
            X509v3 Authority Key Identifier:
                keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:b5:12:3c:a2:41:70:d8:5a:8b:a4:41:65:22:df:d3:4f:
         1a:d4:ac:30:17:47:86:22:8a:86:43:ac:c6:1d:78:e5:66:28:
         99:c8:8d:f9:ea:6a:5c:6e:f5:e1:ec:85:58:a7:6c:36:76:c6:
         fa:5b:b3:de:ae:66:b5:5f:e7:1c:ea:19:a7:65:5a:fc:79:eb:
         cd:70:97:59:a4:36:74:14:4c:8d:f8:95:7c:f6:1d:3a:34:92:
         9a:95:07:b7:96:35:33:fc:83:a0:b3:b4:0e:08:c4:2d:de:91:
         ec:f8:24:51:7e:9e:7d:b8:c8:60:bb:54:1e:23:61:49:47:51:
         95:aa:ca:9a:45:8f:e5:63:65:fa:bd:1f:54:fc:36:fe:1c:dc:
         ca:66:37:e1:ae:52:95:9e:ed:7c:10:5a:ff:68:33:a1:7a:f9:
         84:64:b1:1b:3e:39:71:3a:ee:9c:d3:71:9f:b0:d4:e1:f1:1c:
         89:2a:b4:96:8b:23:b1:91:fc:7e:01:62:97:07:ba:d3:fb:7c:
         c9:22:00:55:b8:85:7d:3d:70:e8:f9:46:e4:59:f6:4b:34:f8:
         34:9f:86:5d:02:46:ac:57:5c:c7:50:be:41:ce:ea:31:fa:74:
         79:c9:41:53:ec:f2:41:27:57:fb:10:0c:0f:73:39:0c:83:af:
         8f:80:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:11 2026 by rpki-client