Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File:                     1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier:          aaeMe8+qSmpy7iFyLCDfwfHZUsW+piEXE0+0JUtx6DY=
Subject key identifier:   D7:93:49:2A:A5:D5:4C:F7:B2:A0:2C:7F:18:76:98:D7:78:02:85:42
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer:       /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number:          0131
Signing time:             Wed 25 Mar 2026 04:49:08 +0000
Manifest this update:     Wed 25 Mar 2026 04:49:08 +0000
Manifest next update:     Wed 01 Apr 2026 04:49:08 +0000
Files and hashes:         1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: ChJ3YB0DinW+HC9t7vbNoZN+FQ6BoLK3VLZizr3Sd8c=)
                          2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: lDQFfJvg8sN9IbyOUgeEIh9zzBtKTvvIBaVemnoUUzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
                          rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
        Validity
            Not Before: Mar 25 04:49:08 2026 GMT
            Not After : Apr  1 04:49:08 2026 GMT
        Subject: CN=69c36944-a1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:92:ea:ce:10:d8:42:56:c9:8a:2a:c0:bd:
                    91:2e:fe:dd:b2:e2:6e:70:91:8c:c2:7e:1f:07:bd:
                    b9:b5:f4:0c:60:b0:a6:87:70:47:61:0b:72:c5:8a:
                    e8:ca:fd:9b:22:ff:90:6a:e9:84:42:22:82:72:c8:
                    29:e3:3b:73:dd:70:62:60:dd:68:b0:06:f3:61:ad:
                    05:2b:56:50:8d:61:69:a8:73:fb:92:41:c0:1b:43:
                    07:39:b1:eb:3b:f5:f9:6f:15:1b:69:d8:17:04:02:
                    c1:dc:60:c2:70:64:f4:93:1e:7c:90:3d:66:84:ac:
                    e2:7d:d0:29:64:62:f2:8c:aa:82:24:ba:41:e9:7c:
                    7d:ea:da:d3:af:8f:f1:f6:25:b6:ff:61:a7:88:4f:
                    73:fa:d7:8a:fe:3f:f1:9a:31:2a:42:7f:c3:b4:ba:
                    85:0d:c7:b4:b7:29:f1:1e:e0:a2:84:b7:e6:ee:de:
                    70:aa:a7:55:fd:b2:b7:8c:27:14:b9:f9:23:02:a4:
                    e0:27:9b:55:61:92:49:1f:18:cc:c8:c2:61:75:87:
                    44:47:3b:4c:0b:5a:50:76:3f:8f:cc:03:30:97:69:
                    91:ac:3c:ab:64:49:30:ca:29:1c:7b:2c:05:bc:20:
                    2e:98:73:ec:a9:bb:b2:9e:a7:e5:c4:d1:d6:19:f1:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:93:49:2A:A5:D5:4C:F7:B2:A0:2C:7F:18:76:98:D7:78:02:85:42
            X509v3 Authority Key Identifier:
                keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:7d:d7:24:1a:9a:f7:2e:14:27:f1:13:b0:d1:f9:20:01:
         df:9a:50:5f:3d:3c:a3:ca:aa:e5:66:14:e6:28:85:53:95:20:
         ab:12:1f:1a:b2:5e:b4:16:65:84:ee:b8:74:4e:c6:32:25:2d:
         87:b6:1b:3f:1c:14:53:f5:4d:3a:1f:9f:91:50:85:41:d6:d6:
         5f:d5:fd:67:ac:b7:53:5b:5e:94:f6:16:37:3b:64:9e:3b:a5:
         8d:99:44:67:11:75:52:b4:d5:a1:af:50:29:5c:9e:0f:44:71:
         f2:0e:a5:60:84:26:57:81:4f:c6:d7:59:cc:d3:d2:dc:8e:bc:
         11:ab:29:8f:8c:02:70:d2:ff:7d:19:78:f2:41:7b:14:41:10:
         bf:85:c1:91:81:76:5b:cc:0f:d3:89:92:04:cb:9b:75:37:9e:
         4b:a0:51:b6:74:4a:9c:7c:ec:1e:79:22:dd:73:1d:96:d5:10:
         36:3a:72:2d:e3:d4:c7:f8:16:01:b4:1d:f6:c6:12:0d:fa:8b:
         35:a7:dd:0f:01:b2:47:bf:72:0a:c6:32:5b:7e:89:be:3a:87:
         07:c0:4d:00:65:97:f6:6d:79:1d:d4:1a:5b:73:ff:18:d0:7a:
         14:8b:57:ff:fc:74:ea:c9:e5:b9:1c:3d:30:fd:06:2f:e7:12:
         37:7b:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:25 2026 by rpki-client