Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
File:                     sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json)
Hash identifier:          9p40j1H5b+/rzbyhIUc1IHTzQyfwLHqRLJfHGLn2UdI=
Subject key identifier:   EE:F0:C3:F0:2F:B6:B6:01:81:13:78:34:77:D4:CA:8A:17:B2:FF:76
Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD
Certificate issuer:       /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
Manifest number:          01A8
Signing time:             Wed 25 Mar 2026 03:25:18 +0000
Manifest this update:     Wed 25 Mar 2026 03:25:18 +0000
Manifest next update:     Wed 01 Apr 2026 03:25:18 +0000
Files and hashes:         1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: YzeNlQtD0p29sJX6c1ZOAPUXrPZgGUhPWaKrUx5uzhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl
                          rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD
        Validity
            Not Before: Mar 25 03:25:18 2026 GMT
            Not After : Apr  1 03:25:18 2026 GMT
        Subject: CN=69c3559e-531f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:ff:7f:4f:33:9d:c4:87:67:0b:a0:06:a9:
                    76:a9:af:01:f1:f7:c6:04:f5:17:aa:8f:10:2d:ef:
                    6a:60:aa:79:d9:ec:88:f8:da:08:f7:a2:41:56:89:
                    b2:6c:73:6d:68:1d:c2:2d:3f:0e:6b:37:b2:c1:3a:
                    31:93:6f:fb:77:ea:b5:6a:58:87:02:fa:1a:f8:79:
                    1f:23:fd:5b:96:6d:78:9c:d0:fb:7f:1a:40:a4:18:
                    be:13:86:5f:ad:46:d7:1e:99:22:6f:b1:9b:5e:22:
                    10:66:1f:fb:da:6c:fe:10:91:5f:8c:bc:b8:6d:5c:
                    58:4f:64:76:1f:d8:af:47:e9:f9:d2:73:44:63:d4:
                    95:1c:9c:00:52:24:e9:ed:44:53:67:13:bb:26:fa:
                    84:02:73:ca:56:27:ac:0c:56:71:9a:c1:8a:ce:6b:
                    88:e1:d8:78:b1:c7:35:a9:8f:d6:2a:48:89:56:84:
                    6f:27:ab:f5:5f:8a:5d:8e:07:00:91:d5:3d:f9:52:
                    ab:f2:a1:63:3e:62:3a:b8:d1:40:cd:79:ec:1c:2e:
                    e9:35:81:52:8a:6a:83:fd:c7:51:d5:d6:8c:fc:26:
                    b1:15:74:25:c2:7a:ea:3b:84:fb:97:6c:a1:19:be:
                    7c:dc:f2:5a:f5:24:81:5a:62:62:68:e2:d6:7b:d9:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:C3:F0:2F:B6:B6:01:81:13:78:34:77:D4:CA:8A:17:B2:FF:76
            X509v3 Authority Key Identifier:
                keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:16:85:dc:c0:5f:89:e4:83:00:99:f1:d3:cb:40:dd:88:
         cb:7a:fa:dc:eb:49:d7:e2:a7:11:72:02:0d:f1:44:59:26:1b:
         24:00:16:d7:74:db:8d:ab:45:e0:f2:34:2b:82:53:12:4d:20:
         26:b6:f1:30:fb:88:17:07:77:57:28:6e:08:a0:a2:f3:36:75:
         13:98:f0:f4:6f:4e:bb:48:3a:dc:a3:76:b6:15:0e:30:92:bb:
         84:c8:0c:78:25:b6:54:42:89:dd:82:a5:39:0d:8f:e6:11:53:
         bf:e3:0f:fb:e6:8e:a5:72:0e:34:f9:0f:3b:7a:a1:ab:de:ee:
         ac:e4:b8:fe:4f:34:78:f1:59:e7:d0:a1:75:9d:36:cb:96:f8:
         20:22:ba:1e:0f:e1:07:98:bd:9d:64:dd:8b:61:fc:63:05:1c:
         11:16:c3:b7:31:db:0f:8a:ff:80:49:d0:fd:7f:5e:15:75:40:
         e4:3c:59:7c:25:31:6a:8c:c1:fc:df:87:9b:bd:3a:65:41:ba:
         d4:a9:1b:7f:16:26:c2:a6:65:1e:6b:97:f1:6a:7e:47:1c:e9:
         59:8a:83:8a:45:fc:21:1f:de:4a:56:a1:3c:8f:47:7a:19:b9:
         c5:3c:f3:20:76:a4:a4:40:42:3b:39:fa:6f:5b:e4:54:3d:61:
         6e:e7:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:51 2026 by rpki-client