Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File:                     madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier:          59LURtT1d2/15eQ2NeelnFvl/zcLF2goPgGcmsCRfdI=
Subject key identifier:   4F:C4:86:FD:B4:F5:A8:DB:35:F9:F0:74:E6:0C:C6:AE:BF:7A:23:30
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer:       /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number:          0129
Signing time:             Wed 25 Mar 2026 04:52:00 +0000
Manifest this update:     Wed 25 Mar 2026 04:51:59 +0000
Manifest next update:     Wed 01 Apr 2026 04:51:59 +0000
Files and hashes:         1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: cZv0HTYrzE4I18UP9pUahinMxJ3A7naZUqUiHT5VboM=)
                          2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: VOUYAm4vUARPOBx8hzx51ITs/3U+Tn4nx1d9cHtgB/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
                          rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
        Validity
            Not Before: Mar 25 04:51:59 2026 GMT
            Not After : Apr  1 04:51:59 2026 GMT
        Subject: CN=69c369f0-ae8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:a1:30:63:5d:63:9c:09:14:10:5d:00:ef:
                    c4:f1:8b:7b:ec:8b:91:1c:f6:e0:ed:c8:ef:77:12:
                    a7:67:54:61:26:08:a0:d3:d7:88:49:c0:34:63:6e:
                    9e:4a:b0:e7:4d:cb:3a:10:4f:91:7a:0c:37:24:2c:
                    b3:74:93:75:ab:bf:ea:57:9e:f0:ea:a5:af:98:e7:
                    1e:55:90:7a:5c:0a:12:33:22:42:b7:dd:19:2c:f5:
                    7d:83:ee:4a:53:10:59:96:9c:c1:d0:7f:88:9a:33:
                    23:c4:e3:5b:bc:d9:5c:dd:d7:6f:24:b1:71:08:07:
                    db:bf:01:50:d2:9e:9f:2e:aa:ec:f6:67:3b:45:6e:
                    a8:38:a3:4d:a5:f2:a9:2e:b7:a7:6c:77:ef:25:1c:
                    a8:1a:3c:2b:ab:8c:0a:4c:5b:71:83:c2:3c:89:b6:
                    d9:ff:98:74:14:88:fe:1c:fb:96:5a:97:76:1a:8e:
                    a4:32:f1:ac:e8:79:4e:0a:3d:73:05:65:87:ed:ed:
                    62:7d:ca:23:a2:2d:aa:6f:d7:51:3f:ca:75:4c:aa:
                    92:b9:64:49:d1:27:16:65:15:6c:9a:69:cb:b8:c9:
                    d8:6c:06:d7:99:41:6e:e7:2b:f7:57:ac:37:7d:8d:
                    7c:99:2d:f2:c0:a0:e8:59:3b:e8:ba:7f:bb:e8:a4:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:86:FD:B4:F5:A8:DB:35:F9:F0:74:E6:0C:C6:AE:BF:7A:23:30
            X509v3 Authority Key Identifier:
                keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f9:b1:0a:63:2d:a3:2e:e5:71:dc:66:50:9f:30:74:5d:b5:
         e9:b9:d4:74:1d:c0:62:96:2e:94:24:ce:b3:e3:70:fb:17:52:
         d2:a0:57:9b:c4:a0:9e:97:6a:91:16:27:57:5a:39:d4:f8:50:
         dd:d6:57:f4:60:39:71:e9:07:41:e6:96:f7:94:e9:2e:5e:27:
         7e:ef:2c:f7:64:35:7c:9a:1f:a1:54:bf:43:59:bd:b1:62:83:
         77:3a:b2:0f:7e:2a:16:ce:61:14:e9:a5:f0:ee:2f:13:7e:1d:
         36:14:ea:23:a6:d1:53:b8:07:24:a5:55:e8:d9:5a:c0:c1:8f:
         12:1a:f9:34:b2:8a:8c:41:7e:61:af:38:7e:31:99:03:f8:72:
         bd:85:2b:b1:8a:67:78:9b:03:51:cd:69:f3:d4:ea:de:31:8a:
         2f:ed:16:63:67:0f:4c:66:07:05:17:81:08:25:bc:b2:83:94:
         06:75:58:96:db:c9:fc:67:70:bc:b2:75:a1:6c:30:b6:69:f4:
         53:2c:27:b7:41:ed:f7:72:5a:66:bb:1a:04:36:a0:ef:57:0e:
         74:b9:4c:fa:57:6a:16:ea:10:11:fa:25:66:50:bc:2f:20:e6:
         30:b6:05:71:e4:14:9b:fc:fb:6e:7b:a1:69:f9:5d:dd:1c:6f:
         a9:56:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:10 2026 by rpki-client