Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File:                     u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier:          tg8rvUYrt2K/PbwlUEbVJN8NKsBCi++6HCz/oq9Ijd8=
Subject key identifier:   C9:10:1B:10:8E:BD:C5:2D:FC:3B:D5:AC:6E:7A:A2:82:55:16:06:41
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number:          34D0
Signing time:             Tue 24 Mar 2026 15:17:26 +0000
Manifest this update:     Tue 24 Mar 2026 15:17:25 +0000
Manifest next update:     Tue 31 Mar 2026 15:17:25 +0000
Files and hashes:         1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: lTnFiPXd62LuIw2BYPl8naIdsuUsuuC1XQqLEsUAOj0=)
                          2: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: iQdIuaUMuJcF2onwS3TeBSuOGdNYATp5ejyadzH8sdo=)
                          3: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: TQPhUWYhjKBybCMF/ltQleriSuPoahtvCLQkK5Pbjoo=)
                          4: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: 0GbAe36Xi3CSSVCPQ6G6b1jv6acfQvNWdewkvoM0LEQ=)
                          5: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: OM8xYjix5BpTenQFceihKnz+ZzULefe8W+rKIx/xtTo=)
                          6: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: p+YtMji1ywLGS5VmdLQr37tdaqlqpoOHjmbxnxuF4zk=)
                          7: DD1805369A8311F0A54CE65CC4F9AE02.roa (hash: 3Bkcl0apkWbXfGR99qsJXU6VqvjmBqHCWfSuTWMfIpQ=)
                          8: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: 5C7Vjo9ZrpnCqMiRKdVhkwXoaKRObjzjmSQhfHx8G+c=)
                          9: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: LbZfg3P6/o8xOyAoPL9G7kZTdmyj4ji4KzlTMeshpYc=)
                          10: 26E8E0566DF011F0B88F3F58C4F9AE02.roa (hash: PMf4Xpy/YsqlmBGw0JRbWJs+qfNHbsNDX3mqYk2qal0=)
                          11: B91BEB86943711F08A09E30CC4F9AE02.roa (hash: k7p+ZchiNAkSWN7tKFyw8dNj+B5NMg26X/KffCVDFC0=)
                          12: A2239B14782011F0A1950D84C4F9AE02.roa (hash: 5DzMHobT3fixkjq5oY5EZAc6t2lRyOkthuLjkofacKs=)
                          13: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: uHul35NCUbB4UEQOk6EyMvoIT00rTAvYI9EMgmdhOJc=)
                          14: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: ZVfQRdbA4pOFLD7vkz9jZ+BWwdhLO3fiEcIvKUIFNFg=)
                          15: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: u//bg8do6wGJR//RWIQr//0c769DD8aYzL3FdOvaldk=)
                          16: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: QC5NYSSW8rTfzylS7O9VIr7rCdcEzEW4j7g4v/u1tVo=)
                          17: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: LqwC+ir4rsOu+Tvi4no23qzidOgWMd4/5GJgpDbizMA=)
                          18: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: td041Yc+Pe/XPeQ/WWnK8VEpG64gCeW8JdDFRixxhNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13753 (0x35b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 24 15:17:25 2026 GMT
            Not After : Mar 31 15:17:25 2026 GMT
        Subject: CN=69c2ab06-0897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:b9:5f:7a:6a:15:06:bd:6e:c7:86:aa:8f:
                    17:d9:e7:8c:ad:a1:ad:2b:d1:97:36:8a:cb:72:23:
                    45:26:f9:89:86:73:40:04:99:41:d8:d4:13:93:a5:
                    70:55:8d:52:1c:5b:55:f4:c6:5f:ad:9f:f7:74:e0:
                    3f:57:7a:cc:6a:c3:ea:01:67:07:b5:20:03:ec:63:
                    70:a8:50:32:bd:1c:7b:37:11:b4:4a:16:ea:e7:59:
                    9d:04:4e:97:76:f1:b1:95:a3:42:43:0f:bb:cc:2b:
                    da:63:ee:8e:a3:73:4f:21:5b:b3:02:e0:ef:ab:e8:
                    98:0e:0d:f4:5d:51:12:e6:c8:cd:0b:6d:b3:bd:a4:
                    87:b8:11:36:a1:91:39:33:6d:a0:e4:c6:13:97:f1:
                    2e:d7:f6:6c:8f:ca:90:f5:61:e6:70:ad:a6:a2:5b:
                    52:00:fd:fc:ed:e2:03:0e:ba:bc:54:32:1c:37:1f:
                    42:40:de:36:05:b4:30:09:1e:22:a3:22:f3:b3:94:
                    d5:2d:fd:4d:ac:f0:29:7c:de:05:01:e6:9e:f8:69:
                    6d:11:0e:89:b0:cb:ea:d8:d6:05:22:b7:e4:23:6a:
                    34:b2:75:f4:d8:95:7d:47:fa:4f:b6:24:ea:f5:7e:
                    c9:f8:01:d9:b9:8b:6b:4d:2d:78:fa:ee:bc:4d:21:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:1B:10:8E:BD:C5:2D:FC:3B:D5:AC:6E:7A:A2:82:55:16:06:41
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:66:ea:32:81:0e:8d:99:f2:e5:7e:e1:18:1a:40:3e:91:
         b0:d7:e1:26:7a:d7:87:fc:d6:69:df:59:a7:d2:7b:9a:30:67:
         67:f2:8e:50:d3:a1:f7:c3:1e:dd:32:d6:83:ac:47:d9:b2:39:
         1f:29:ac:3e:4f:fd:13:15:76:a1:3d:79:22:18:c4:e3:5d:fd:
         d9:37:7c:be:5f:d1:c1:1e:a3:85:2a:6a:57:85:ed:4d:d0:17:
         7f:2c:e6:7b:32:7d:4a:22:be:80:46:43:81:57:a9:22:d6:7a:
         e4:38:0d:91:9e:d6:04:6b:ab:4b:79:64:af:fd:53:f1:3a:10:
         18:7e:60:ff:48:e2:c2:d5:af:6d:83:2f:31:8e:44:a2:14:75:
         d9:e8:18:17:70:1b:f8:a5:ab:b6:04:47:bc:59:ce:e7:d4:54:
         c0:2e:90:88:ba:b1:b3:40:88:81:3f:12:f5:e4:6f:fe:d0:73:
         6f:f6:2f:10:0e:44:09:09:af:c9:9a:90:24:fd:16:5e:6d:aa:
         34:52:cf:ac:a7:29:a9:0e:d0:af:a1:d3:ee:5b:11:87:ac:ad:
         34:52:4c:11:70:8a:3e:2b:a2:d7:3a:00:0a:66:fb:8d:66:6d:
         b9:bf:a8:e2:0a:b5:2f:07:67:b0:d9:cd:3c:e8:5e:45:0e:b6:
         b0:e4:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:41 2026 by rpki-client