Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File:                     jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier:          vVcIXPutbhVeb6pi8y8mle3O9yY974yRfDqEmUrF82A=
Subject key identifier:   F4:08:11:4B:A9:9E:52:8F:7B:3E:4D:F1:2C:97:63:AB:22:9E:7C:E7
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer:       /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number:          0197
Signing time:             Fri 27 Mar 2026 03:52:56 +0000
Manifest this update:     Fri 27 Mar 2026 03:52:55 +0000
Manifest next update:     Fri 03 Apr 2026 03:52:55 +0000
Files and hashes:         1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: hFc3K8qKIXiaJi+I56F5ABYqklDRlA93fXqFqOAOFek=)
                          2: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: owQYw9h+uccODUhkikEdlCDKK/hYVX6MWumcBf31Hrw=)
                          3: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: 0E4qYTpBck7zqd7XOVsdpYAiDLiP6vH0ev4CSQjnfXI=)
                          4: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: /8Gd5gZ758sNArtTS8yRpNug05q/Okyd5D7W2BUqcNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
                          rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
        Validity
            Not Before: Mar 27 03:52:55 2026 GMT
            Not After : Apr  3 03:52:55 2026 GMT
        Subject: CN=69c5ff17-65b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:3a:70:6e:e9:05:69:32:f4:3d:8d:a3:bf:
                    c6:1c:90:43:20:26:17:a2:99:67:40:43:f4:88:95:
                    a7:87:30:d1:f7:cd:61:ff:3c:df:58:a3:62:cd:99:
                    dd:f8:96:76:bc:f7:c5:42:d9:2c:e6:82:d4:24:a4:
                    7d:c8:1b:b2:d1:8a:bc:b3:bc:ae:8c:9c:3b:24:75:
                    f1:30:e6:bf:48:e8:12:6c:62:73:08:ca:08:14:ba:
                    ac:93:07:8e:62:f5:7b:51:4f:81:7e:bd:94:4c:24:
                    48:1e:e6:92:a0:00:5b:5e:33:d4:88:08:e6:9f:f4:
                    14:3f:f9:c4:b5:1d:a4:96:13:e7:d0:97:37:10:4e:
                    3e:5f:b9:8b:75:ac:75:7f:31:38:09:d3:55:ec:06:
                    3c:8d:bb:e1:61:c3:64:06:e1:4f:51:c4:e6:ce:9e:
                    a3:cb:f5:70:00:26:50:b0:5d:83:c4:70:f5:9c:42:
                    26:33:b1:eb:c2:6e:97:1d:86:1a:e9:df:6a:65:5e:
                    4f:63:f5:b1:ff:9f:a9:76:af:d7:23:22:9a:2f:1e:
                    3c:ab:f6:59:45:72:a5:49:58:51:b8:fb:72:8a:69:
                    d6:da:5e:b2:63:19:10:f6:99:b1:13:08:10:9e:93:
                    7f:ca:a4:ab:4d:2d:fa:e7:31:c0:61:8c:df:d9:26:
                    93:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:11:4B:A9:9E:52:8F:7B:3E:4D:F1:2C:97:63:AB:22:9E:7C:E7
            X509v3 Authority Key Identifier:
                keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:8a:af:8a:52:55:9a:70:b3:00:43:27:90:74:9d:c0:07:
         62:36:49:6f:cc:f4:44:45:54:e0:05:42:40:8f:f4:ae:dc:d8:
         11:f9:ab:18:da:00:1a:5e:16:5e:7f:74:32:7d:b8:2d:5d:77:
         d3:6b:cf:dc:6f:a8:01:6e:3b:4b:ab:df:a1:65:32:7e:09:b8:
         4b:56:0e:9f:27:4d:1e:1a:4d:bb:82:3a:ee:cf:5a:c1:be:01:
         a7:2b:b9:fd:bf:50:37:d2:b8:75:e4:71:eb:3b:85:19:01:1a:
         56:a5:a7:e0:9b:06:0c:94:dc:2d:b1:57:b3:95:f5:c9:62:31:
         72:1e:9a:00:2f:58:e8:aa:e1:f7:0a:b8:be:5e:fb:9a:72:6f:
         27:7b:7a:72:21:fa:43:7c:23:1e:88:9f:a1:24:75:53:61:3c:
         e4:d4:a8:d9:ec:ed:1c:f6:62:1b:4d:7d:82:a6:4a:67:f8:8a:
         67:a5:96:f6:01:e9:51:e2:0a:29:15:d8:b1:e9:c5:92:3b:c6:
         de:22:98:86:17:6e:3c:6c:ef:c8:8e:16:22:be:50:74:f5:f8:
         8e:03:d6:d6:58:00:f2:cf:98:ac:52:e1:c3:12:82:4d:29:da:
         e9:35:9c:3a:84:2b:c5:0a:da:9c:bb:4a:96:86:a4:a9:51:4c:
         b7:ba:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:17 2026 by rpki-client