Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
File:                     fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json)
Hash identifier:          b5w9bOS9lRBT+zQh8/Y6A0qAQjOcnhdBBwj0g/ucpcI=
Subject key identifier:   CA:A6:F3:5D:CB:F8:9E:9A:62:A8:D4:BD:38:DB:E3:8C:8E:2F:6F:F3
Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F
Certificate issuer:       /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
Certificate serial:       0494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
Manifest number:          048D
Signing time:             Tue 24 Mar 2026 23:40:53 +0000
Manifest this update:     Tue 24 Mar 2026 23:40:53 +0000
Manifest next update:     Tue 31 Mar 2026 23:40:53 +0000
Files and hashes:         1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: Qo/6Ps1/DJqId3eiVQjwdCB3zGyT6GhVB1UuF9eoSlg=)
                          2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: fEICKXxhcMhgodlecCtySeHQZa+ZGIRq7EvZ78I9IQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl
                          rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F700, serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
        Validity
            Not Before: Mar 24 23:40:53 2026 GMT
            Not After : Mar 31 23:40:53 2026 GMT
        Subject: CN=69c32105-75da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:51:cf:f8:12:03:ac:e7:39:3a:f2:62:1b:
                    dd:04:2b:e2:99:fe:90:eb:5a:d7:3d:82:13:c7:79:
                    20:c9:ef:0e:ac:db:25:c6:18:79:5d:49:95:31:4a:
                    f9:83:01:71:a6:3e:65:01:8e:3f:db:db:84:59:bc:
                    e2:3d:f8:ff:27:9e:4c:2e:cd:ba:14:3d:b6:71:d7:
                    20:51:a5:db:98:3b:9a:b2:2a:3a:bc:a9:58:5a:f9:
                    5d:bf:93:8d:6b:b6:d6:54:cd:86:bd:de:19:2b:2c:
                    2c:15:34:73:b5:c2:e3:76:a9:d2:94:5b:9b:7c:a6:
                    a6:65:f1:a0:26:d1:43:b1:92:ea:d0:dd:1b:12:24:
                    4b:09:d0:c3:60:3c:47:06:2c:a9:1c:58:d2:3c:1c:
                    94:dc:c4:dc:58:3a:e5:46:c1:4a:6e:18:9a:f4:54:
                    34:02:18:9c:d1:0d:93:0a:1e:eb:11:e6:e8:d1:27:
                    8b:7d:82:d6:2e:89:c8:d9:fc:fa:30:5e:6c:66:d7:
                    8c:70:13:86:7e:95:d9:a2:60:4c:03:50:bd:86:59:
                    72:82:f8:e5:10:a8:e5:63:aa:ba:1b:a8:48:44:cf:
                    ba:dd:0f:75:e3:77:cb:9c:b8:69:c6:26:07:b3:ee:
                    fd:b0:58:d6:07:ab:27:e8:95:bf:65:6c:3e:76:7f:
                    a7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A6:F3:5D:CB:F8:9E:9A:62:A8:D4:BD:38:DB:E3:8C:8E:2F:6F:F3
            X509v3 Authority Key Identifier:
                keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:5b:ab:44:df:61:a2:00:c8:ab:27:e8:fe:6a:5e:90:af:
         d1:a5:03:3a:b5:14:f1:52:23:bf:b3:0c:85:d1:4e:67:9d:aa:
         e7:ba:ac:bd:f6:f8:75:cd:c1:f3:71:85:c3:c4:e4:c3:58:7a:
         fa:b9:3a:c3:a9:d6:d6:6e:c4:6c:af:05:04:c2:38:be:06:00:
         5f:f0:7f:4b:d0:76:61:24:1d:9c:c4:61:78:1f:ae:74:b5:02:
         ba:be:3c:48:52:a8:de:67:e2:99:21:e2:21:54:63:ce:69:22:
         34:70:56:e1:63:58:54:fe:d7:9e:00:85:dd:94:7f:0b:8b:40:
         7d:ba:d3:f8:f0:6a:02:31:30:79:48:87:ee:bb:3b:90:c6:34:
         f3:7e:73:12:60:93:d0:1d:0a:14:8c:26:bd:c2:a0:26:9d:16:
         d6:b1:fd:46:de:0b:74:41:0e:ee:0f:f6:39:77:88:af:b8:d8:
         a0:3c:6a:3f:19:81:38:d5:fa:a8:f2:38:dc:81:e2:c7:01:36:
         c5:6e:a9:fa:25:5e:a0:4e:23:d4:c2:1f:8a:f4:94:ca:6a:3d:
         03:36:d7:a4:35:6b:e2:61:a2:24:98:11:0a:1b:b6:21:ea:bb:
         b1:96:2d:91:52:1d:b9:f3:e0:cb:6f:34:04:b0:94:ce:e3:62:
         0a:47:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:57 2026 by rpki-client