Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          mrANqe+IjPoftHTJevIKiajS9moGVjh4/XqKu17ml48=
Subject key identifier:   C3:59:C8:D1:19:9A:EC:9B:E5:21:66:6A:F0:A4:C8:B0:2F:2F:7A:7E
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1DA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1D51
Signing time:             Tue 24 Mar 2026 16:03:28 +0000
Manifest this update:     Tue 24 Mar 2026 16:03:27 +0000
Manifest next update:     Tue 31 Mar 2026 16:03:27 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: 8xhBcOmeNtD2xoMJmVDL9wC6yX8vHgHsj9/aNX5/K9M=)
                          2: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=)
                          4: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: EU6Bls9JhzMquHgi7kBWPHJD6CubZtnsE/4pW2Mw0IM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7585 (0x1da1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: Mar 24 16:03:27 2026 GMT
            Not After : Mar 31 16:03:27 2026 GMT
        Subject: CN=69c2b5d0-229f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:ec:ce:18:a8:b2:ae:8e:b4:45:ba:e8:e8:
                    28:2a:82:25:66:14:10:6e:22:bf:3c:03:f1:e6:84:
                    38:be:4b:28:ed:74:3a:94:85:06:3a:e2:08:09:f2:
                    64:0f:bb:8e:41:50:ba:83:39:eb:7c:7e:29:18:44:
                    41:c0:4f:0a:1c:1c:0d:ba:83:8d:94:1e:11:c2:df:
                    a1:8f:ae:63:91:17:df:b9:62:2d:fd:16:69:cd:b2:
                    f5:cd:bd:32:72:b9:72:8e:cb:3d:49:28:08:66:a3:
                    11:98:fa:99:ed:95:15:bb:25:4b:44:4f:db:02:b2:
                    5d:9c:14:75:91:c3:8d:d4:14:ab:f8:3b:19:41:a3:
                    74:4f:a1:b2:9f:ca:1b:49:da:82:ae:3a:7b:2d:ff:
                    6e:79:e2:fa:82:7e:b7:96:68:73:9c:75:cf:86:d9:
                    8a:66:4f:27:1e:10:51:03:1c:44:df:40:ca:61:c1:
                    24:e4:0c:8a:9e:cc:97:3f:e4:82:b4:07:a0:ce:08:
                    9b:80:4f:c7:41:7c:fb:33:9b:33:f2:eb:76:76:dc:
                    36:05:c3:68:5a:e7:9b:46:ba:70:e9:de:60:56:5d:
                    9d:94:e0:34:2b:73:b4:ae:7e:01:14:72:1a:1c:de:
                    f4:75:7e:6c:27:42:b9:a2:29:97:a4:c0:d1:d2:d5:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:59:C8:D1:19:9A:EC:9B:E5:21:66:6A:F0:A4:C8:B0:2F:2F:7A:7E
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:a2:de:55:bf:56:87:03:88:2e:dd:71:ca:e4:ba:9e:c6:
         07:c1:5b:66:d8:93:ac:58:f5:f6:f6:e9:b1:e0:b1:c5:26:a7:
         f6:86:5e:8a:73:13:33:53:77:95:36:a9:50:9c:98:86:26:3c:
         72:9e:85:21:1c:e0:05:29:22:5b:88:16:58:af:bc:b9:ec:8a:
         d8:fd:39:55:c0:bd:73:8a:7d:9a:e8:18:d8:44:53:8d:ac:29:
         9d:6d:20:f9:dc:2e:e0:1c:b2:c3:fc:b5:7f:d8:43:93:dc:48:
         e2:bc:21:e4:ab:59:b1:54:db:e9:6d:4a:9b:c3:5e:f9:65:90:
         2a:04:dc:fe:c1:b7:5b:84:ef:dd:20:c1:4e:bf:3a:2a:94:0b:
         5b:25:3d:01:e6:40:c3:08:8f:04:4a:b1:32:59:db:fd:18:35:
         6e:b6:1b:d9:6d:df:c1:14:91:53:08:a6:3f:7b:91:fb:52:16:
         30:07:69:12:0c:b4:2e:5b:bf:86:52:d1:f1:e2:63:70:e8:11:
         5d:30:39:10:5a:03:88:f3:d1:cf:00:f8:d8:9c:48:75:1b:2b:
         4d:9e:8c:d4:a7:96:75:a8:e6:0f:0c:c1:72:2e:14:15:59:fe:
         a1:84:32:1e:2a:7e:cd:74:16:9b:b3:fa:46:9f:13:04:ac:87:
         09:ff:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:17 2026 by rpki-client