Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
File:                     fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json)
Hash identifier:          /a5hqD/HpRfNRpy/QCe23MSUf4P1b+V6+Km5e/wp8og=
Subject key identifier:   3D:8E:37:95:D4:F2:0C:EC:B5:76:8B:12:AD:74:1F:6D:0B:56:29:49
Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
Certificate issuer:       /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Certificate serial:       351E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
Manifest number:          351D
Signing time:             Tue 24 Mar 2026 15:10:02 +0000
Manifest this update:     Tue 24 Mar 2026 15:10:02 +0000
Manifest next update:     Tue 31 Mar 2026 15:10:02 +0000
Files and hashes:         1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: z8NZ8nXevhbGTpE4YB8BtiA23yJqzZb7OinDS6sbjTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
                          rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13598 (0x351e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
        Validity
            Not Before: Mar 24 15:10:02 2026 GMT
            Not After : Mar 31 15:10:02 2026 GMT
        Subject: CN=69c2a94a-0c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:c2:4f:c0:5a:c7:30:49:72:21:e9:8a:58:
                    8b:b7:01:3c:4e:48:67:be:36:59:ec:78:f3:02:0a:
                    7c:fc:b2:97:f1:a7:72:b3:c5:1b:49:d6:71:56:db:
                    de:2f:a4:09:d6:00:59:4a:3d:62:78:66:fb:38:89:
                    c7:d7:7c:f1:7d:e5:07:20:dc:5d:0d:c9:84:22:6d:
                    40:cb:c2:03:1c:0e:2d:6b:5e:74:43:b4:16:56:19:
                    9d:d9:19:ac:19:c3:6f:76:69:db:73:6a:66:09:84:
                    87:3d:13:fc:05:36:f0:f4:a4:90:d6:93:3d:f4:79:
                    0e:ff:25:86:ea:89:ab:f7:34:3d:23:a7:db:cc:09:
                    cf:38:88:5e:0f:bd:4b:cf:f6:94:75:fb:45:7e:59:
                    8f:f6:50:f1:4f:1c:01:92:da:63:67:d3:d8:85:7d:
                    24:f2:1c:3d:c2:6a:f6:8f:61:12:db:f8:7c:29:60:
                    f6:5e:b6:35:2f:5a:db:0f:c5:38:25:f2:10:bf:a7:
                    71:2c:82:12:7b:42:6e:c4:e9:12:a5:3d:b4:cb:06:
                    66:f6:3f:5b:76:7e:53:16:25:59:6e:de:cb:e2:d0:
                    61:37:c7:49:0f:00:fe:12:68:40:11:b1:e6:df:95:
                    3a:90:6f:15:87:23:e4:b3:9f:fe:f6:80:93:9c:83:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:37:95:D4:F2:0C:EC:B5:76:8B:12:AD:74:1F:6D:0B:56:29:49
            X509v3 Authority Key Identifier:
                keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:93:82:d1:9b:e9:1b:0f:ad:47:93:21:07:e5:ca:49:9c:
         0e:d2:84:97:50:fd:3a:63:e5:75:c6:a5:d9:cf:9d:19:9f:a3:
         b1:b8:26:a4:85:b3:30:c2:f1:df:79:be:33:ac:b9:90:ed:c0:
         ec:c8:4a:1d:60:45:0d:4f:45:f4:e1:d0:42:eb:17:5b:1e:c4:
         52:3c:64:a8:82:9f:f1:a8:fd:2f:47:14:6e:97:8c:50:77:6e:
         24:dc:5a:76:cd:38:20:ad:e4:40:6f:96:c3:76:29:83:44:be:
         8a:79:6c:ac:8d:0d:5c:be:10:6f:68:ca:30:db:6a:a9:f9:dd:
         8e:e7:68:06:8e:6e:c5:ef:8e:74:d0:83:be:59:db:d6:b0:8a:
         73:bb:2d:ac:df:e9:c8:09:7c:21:64:1b:49:85:f4:f9:27:87:
         2a:4e:c2:95:f3:98:c3:19:7f:7d:c0:f3:ea:e2:b0:c6:2a:8d:
         04:03:08:17:0c:d0:81:3e:60:e9:fa:de:9b:bb:5f:0b:c8:08:
         d5:ca:1d:19:63:98:9c:c6:c2:fd:5c:cb:87:82:d8:1c:bf:ac:
         52:23:74:47:17:29:b3:3f:90:c1:ac:6c:3c:ae:0e:a3:79:e8:
         21:dd:5d:7e:e9:41:a7:bc:df:15:57:27:64:80:b8:b7:77:44:
         2a:bc:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:46 2026 by rpki-client