Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
File:                     3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json)
Hash identifier:          mkE/eLMZJBFn4cG8Yx6CYLYvaMqDXJkiIjCH+QjaIrQ=
Subject key identifier:   EB:32:9F:9C:F3:43:EE:C5:2E:2B:DC:80:43:47:ED:72:9D:D1:C1:1F
Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
Certificate issuer:       /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Certificate serial:       0EA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
Manifest number:          0E9A
Signing time:             Tue 24 Mar 2026 17:35:14 +0000
Manifest this update:     Tue 24 Mar 2026 17:35:13 +0000
Manifest next update:     Tue 31 Mar 2026 17:35:13 +0000
Files and hashes:         1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: /wwqecrPbT87cvQ41mFRzPGoHA7IzisSt7bo1ogrCi0=)
                          2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: o9Abyi/MKdfpzHukIV0+6UFoiozAzGZP2RU3WmijfSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
                          rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3751 (0xea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
        Validity
            Not Before: Mar 24 17:35:13 2026 GMT
            Not After : Mar 31 17:35:13 2026 GMT
        Subject: CN=69c2cb51-89aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:d7:46:84:fe:90:a6:3b:7e:d2:26:61:dc:
                    07:22:3c:3d:33:91:da:e4:a6:af:a1:db:35:05:2a:
                    7d:0a:d8:02:32:f8:d2:42:44:28:7b:33:83:eb:65:
                    63:94:f4:6f:f1:b9:3a:90:79:b3:6e:5e:ce:cb:d2:
                    3b:ba:40:96:44:63:cb:ed:bd:64:4f:b2:9a:0b:af:
                    2f:78:8c:29:81:ad:1a:cc:04:9b:f2:bb:24:6b:f9:
                    40:d1:a3:2e:36:5a:dd:8a:2d:6b:93:2f:5c:c2:a6:
                    c8:fe:06:9a:dd:3c:97:29:1c:ef:2f:71:ed:93:7a:
                    11:3d:63:00:09:46:5c:15:be:be:fe:be:ab:c9:ad:
                    ab:e7:9c:b6:28:10:68:fe:7c:84:df:51:61:fa:b4:
                    91:cd:ef:96:b9:aa:54:60:6c:84:22:a7:de:5a:3a:
                    5d:85:ed:a4:91:ce:2a:70:68:75:08:98:de:75:55:
                    3c:82:73:5d:9f:a1:b7:d2:84:96:13:77:1d:d3:de:
                    17:8f:14:ee:ea:1c:ae:17:ba:cd:e4:2d:d0:05:f4:
                    34:95:23:dc:d4:4d:0c:01:a9:28:fc:3d:36:09:2a:
                    96:00:8c:f6:03:b2:f6:22:bf:e8:ea:36:3d:df:7e:
                    0c:f4:9c:17:d0:82:fd:8f:2c:52:3f:af:fb:34:52:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:32:9F:9C:F3:43:EE:C5:2E:2B:DC:80:43:47:ED:72:9D:D1:C1:1F
            X509v3 Authority Key Identifier:
                keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a0:38:7e:3d:95:73:ff:00:1f:77:9a:0d:1d:9e:3d:6d:73:
         98:d4:0b:b8:5f:dc:18:53:ae:03:11:4c:f5:91:6a:e4:fb:40:
         18:04:72:ac:9b:b0:5b:25:75:aa:c6:b5:e7:aa:83:08:de:60:
         c6:9d:2e:aa:63:47:f4:03:71:b8:83:ed:79:f6:d4:80:b9:b8:
         46:5d:ee:60:47:79:b3:c5:53:d6:7c:d5:6e:6c:eb:90:e7:dd:
         6f:29:f2:32:4f:73:15:95:5c:11:d9:ec:a4:55:b7:8e:f8:ed:
         16:e2:db:98:92:c1:24:7f:9f:2b:f4:ee:12:4e:1e:f1:fc:e0:
         5a:e8:24:d1:05:b2:4c:fa:c2:26:a7:d0:3d:fb:db:60:1b:46:
         a8:a0:99:fd:b7:28:22:ff:9c:d5:2f:66:49:93:04:4f:1a:d1:
         c6:d8:86:6d:1d:22:5e:6e:01:4e:64:bd:d9:72:8d:d8:f8:89:
         e0:46:1c:5c:4f:16:93:81:03:f8:f4:49:b5:47:10:44:35:23:
         56:b0:4c:55:6a:73:5b:82:44:97:ec:b8:16:3a:58:bd:b8:5f:
         ab:e4:68:fc:7c:62:df:b4:14:e4:8e:a2:79:27:c5:3c:e2:11:
         f7:51:ec:f7:f9:48:7b:6b:b8:49:63:a3:e9:e4:30:c9:62:6b:
         38:d9:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:29 2026 by rpki-client