Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
File:                     B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json)
Hash identifier:          TITBTbbNd0Fg4mI1IGy2388d+wDU6ngwU4icPuOlY3o=
Subject key identifier:   4F:A7:87:15:89:D6:AF:B7:6F:01:47:04:6A:27:FA:B9:DB:18:E4:E0
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Certificate issuer:       /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
Manifest number:          75
Signing time:             Tue 24 Mar 2026 23:01:25 +0000
Manifest this update:     Tue 24 Mar 2026 23:01:25 +0000
Manifest next update:     Tue 31 Mar 2026 23:01:25 +0000
Files and hashes:         1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: 5rr+6MH6Gl353P0QN2EL0+AJXCE/hG07K9K1zhNFrow=)
                          2: 889930E805E011F18AD458A9133D8C67.roa (hash: gNdtveZEpCizlmdSaRRT7PFk1kOLRVTddyti60NdCY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
        Validity
            Not Before: Mar 24 23:01:25 2026 GMT
            Not After : Mar 31 23:01:25 2026 GMT
        Subject: CN=69c317c5-a1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:4f:de:88:fa:4d:c4:cd:89:12:2c:8b:86:
                    65:73:14:85:d2:43:55:10:65:8f:df:17:c1:a9:ed:
                    79:e9:9d:9c:72:41:38:af:21:28:c1:a2:b7:86:8d:
                    4e:e9:aa:a4:80:13:aa:28:34:7b:e0:35:70:e3:3a:
                    07:a3:a5:87:58:4b:1e:7d:00:67:cd:23:a9:fe:5b:
                    eb:ff:6e:78:05:52:fb:11:45:e3:e3:5f:db:48:3e:
                    28:1a:56:55:62:12:f2:ed:b0:ee:e1:f3:c5:6d:02:
                    62:9e:ea:d8:bc:52:b9:42:c2:7b:97:0b:60:93:85:
                    5c:0f:ce:78:35:71:d3:51:6a:00:19:1d:98:ff:22:
                    e5:0e:fe:41:ba:d3:8c:37:00:99:8b:3e:9c:37:51:
                    51:0c:d6:8a:dc:da:9f:ac:25:b4:39:44:cf:2b:ef:
                    40:ea:09:76:5e:62:a6:a7:27:8e:da:e8:14:42:7b:
                    1b:c8:4b:5f:bb:8d:fd:c1:6c:e3:4f:05:65:3b:2e:
                    36:5d:41:49:23:e2:8a:fc:7e:a1:35:c1:fd:ae:e9:
                    0b:de:b2:12:3b:b5:82:d3:53:f5:30:5a:af:6b:2a:
                    6e:37:34:8f:ef:e3:68:d0:06:ff:2a:de:42:1d:90:
                    4e:bd:15:69:7e:e0:94:e7:22:e9:ac:25:5e:39:64:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A7:87:15:89:D6:AF:B7:6F:01:47:04:6A:27:FA:B9:DB:18:E4:E0
            X509v3 Authority Key Identifier:
                keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:65:f0:08:a1:e5:1b:5b:72:c2:4f:d9:a3:57:f5:c6:d8:72:
         31:69:a2:bd:4d:fa:9c:47:ce:82:2c:78:0f:a7:d1:d8:14:91:
         13:56:99:a0:63:26:33:77:f0:69:f0:55:ff:94:ab:06:d9:94:
         47:53:a6:6f:1a:10:c9:a6:1d:2a:c9:88:a6:d5:90:14:9f:54:
         12:95:db:79:b8:7b:01:7c:4d:15:d8:48:ea:69:2e:7b:f1:f6:
         d8:93:a4:cb:2d:db:a4:6b:30:25:b2:68:09:cc:3f:a6:d8:32:
         49:c9:b7:08:86:be:28:06:49:51:ff:47:b6:90:b1:d4:09:c5:
         1b:86:8a:49:00:96:dd:fd:43:fa:28:88:12:b8:a4:8d:be:3d:
         99:09:bf:f8:a5:f6:bb:6b:76:6c:20:b9:ca:f3:f5:b5:1b:81:
         6e:11:85:1b:c4:da:4a:9c:74:4b:d3:f7:d6:00:25:e3:88:ff:
         ae:84:f1:91:db:a4:d9:79:4e:12:67:da:a1:ca:2a:07:ba:aa:
         2f:75:b7:f8:2b:37:5c:39:c1:5c:02:3a:e6:b6:03:ef:20:ae:
         c3:5b:f8:23:99:9a:1e:0f:f0:a6:4f:55:78:a9:f2:28:af:e4:
         c6:55:fe:f4:7d:13:f2:35:4a:79:e6:f0:87:42:4b:93:37:52:
         54:82:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:34 2026 by rpki-client