Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
File:                     NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json)
Hash identifier:          aZQzdkkfIWIou4MEYj5pxUTZXJmtBMeYXelgU/PMiPs=
Subject key identifier:   F3:08:B6:C3:8C:ED:F3:59:49:CA:96:5B:B8:E8:1A:E1:86:1A:1C:0F
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Certificate issuer:       /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial:       1843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
Manifest number:          182B
Signing time:             Tue 24 Mar 2026 16:26:22 +0000
Manifest this update:     Tue 24 Mar 2026 16:26:21 +0000
Manifest next update:     Tue 31 Mar 2026 16:26:21 +0000
Files and hashes:         1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: jPo6GtmZ4FSOEua6ApTVVfn6TR3xq1ADn/kjFFJVXMY=)
                          2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: vMFDHmT3Cr0URSEHVxnjw0fdQ9sbaEgQ2dVomCT14d0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
                          rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6211 (0x1843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
        Validity
            Not Before: Mar 24 16:26:21 2026 GMT
            Not After : Mar 31 16:26:21 2026 GMT
        Subject: CN=69c2bb2d-c413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:1a:fc:38:67:e2:cc:a1:9b:d6:de:cd:16:
                    e6:72:f3:2a:a9:e7:6e:0e:b7:3c:32:9d:84:30:70:
                    0a:6c:c3:84:e2:f5:38:68:59:5b:14:4d:2d:6c:5c:
                    7b:2e:91:17:3c:91:9b:2d:88:54:dd:cb:08:c3:d9:
                    6d:cd:c7:f6:d7:9c:7c:e2:c1:20:d5:21:1a:6e:65:
                    3d:11:d6:e2:21:eb:a4:5c:17:06:f8:59:94:b2:99:
                    59:1f:86:9c:2e:37:1e:d1:2f:fa:65:fa:42:35:2a:
                    42:59:b5:d2:5d:bf:ab:70:82:4e:d2:b1:dd:4b:62:
                    73:02:69:58:ee:22:10:e0:fc:8b:18:bd:bb:72:44:
                    df:d7:ab:fc:dd:03:57:02:46:f1:3b:15:24:d5:20:
                    01:a7:98:d1:b1:0b:48:b7:34:89:d5:02:b6:11:19:
                    44:d5:e2:89:a9:01:d2:f3:cb:0d:b4:82:31:33:9d:
                    eb:b6:bb:df:ab:ae:27:96:48:11:c3:2a:51:b8:97:
                    a6:f0:67:9f:7a:16:6a:8f:73:df:c2:96:03:e8:f2:
                    4b:ec:28:94:33:33:0a:05:d3:0a:54:9d:16:67:91:
                    54:3a:4f:9b:f7:94:11:25:73:6f:48:dc:e0:f8:13:
                    0f:a9:06:aa:38:ef:47:b0:d2:51:bc:cc:92:f2:32:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:B6:C3:8C:ED:F3:59:49:CA:96:5B:B8:E8:1A:E1:86:1A:1C:0F
            X509v3 Authority Key Identifier:
                keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:4e:c1:51:8b:68:21:d7:2d:e5:44:1e:3c:53:d1:23:20:0a:
         71:83:0b:4c:7e:56:27:fb:2f:d7:7d:70:ec:95:da:e6:76:6e:
         87:85:d1:94:81:7b:34:50:11:5b:44:cf:ed:3c:1a:32:10:76:
         c3:bd:f4:f6:3c:c1:ae:a5:c9:e7:21:8c:33:60:83:1a:28:d8:
         48:dd:89:91:b9:3b:a4:4a:e4:20:25:b3:0c:02:b0:ac:ac:af:
         82:10:fa:3d:0f:13:82:c4:38:0a:eb:6e:fe:b9:10:16:4b:91:
         61:8b:9f:45:69:bf:fe:81:4b:55:ed:c2:31:48:75:1c:da:cb:
         f7:d2:dc:f0:54:89:c6:60:77:c0:4b:78:ce:bd:7d:43:ab:ba:
         17:04:66:c4:85:f0:80:71:68:b2:4e:d6:c1:af:58:f6:ec:36:
         81:25:82:69:82:60:73:f7:b4:1b:33:62:4a:15:ae:2b:4d:f6:
         e4:8b:99:db:b6:da:cd:18:e3:13:ba:ae:75:86:51:71:ad:f8:
         ff:32:57:f7:6a:29:f7:41:52:1f:14:fc:3b:d2:f3:59:5f:32:
         3a:73:c1:c8:aa:71:8d:4b:a9:38:74:8f:97:50:0a:48:5d:30:
         0f:23:50:f9:a4:0c:0b:00:f6:ff:f9:60:88:cb:d6:1a:93:35:
         78:f5:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:19 2026 by rpki-client