Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File:                     H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier:          2OhJhOOWuJgakO9flUBtV4lhoLUXK7DOwSCGYRwLLh8=
Subject key identifier:   E7:1E:27:35:37:A3:57:91:D3:30:19:8C:85:A9:0C:6F:6E:46:47:0A
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer:       /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number:          22
Signing time:             Wed 25 Mar 2026 08:01:51 +0000
Manifest this update:     Wed 25 Mar 2026 08:01:51 +0000
Manifest next update:     Wed 01 Apr 2026 08:01:51 +0000
Files and hashes:         1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: VYa3buhuJOrRFNKaJERgb0BUgePtVgTRjsATcvbPuNY=)
                          2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
                          rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
        Validity
            Not Before: Mar 25 08:01:51 2026 GMT
            Not After : Apr  1 08:01:51 2026 GMT
        Subject: CN=69c3966f-b14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:71:ec:8e:a1:62:f1:fc:46:2f:24:c1:8e:
                    84:2c:96:08:8e:cf:47:4c:55:52:36:4b:07:97:35:
                    0f:09:cb:11:3e:d3:7f:15:62:a7:80:b5:a1:7d:5e:
                    27:3c:1c:f2:e9:ad:46:25:6d:7c:7c:28:4b:b4:3a:
                    fe:82:68:18:48:01:93:fa:a9:53:5e:c0:49:27:79:
                    06:9a:b7:eb:aa:37:82:a8:12:c8:7c:51:03:77:b6:
                    d4:4f:23:cc:60:77:07:4b:c9:f2:9f:5a:73:03:ac:
                    93:fb:65:07:fa:3f:80:44:9a:60:45:1f:10:15:56:
                    b2:4e:63:2d:9c:ea:e1:61:8c:51:0b:d2:99:73:ae:
                    9a:51:e0:e9:12:4b:44:3a:e1:6f:7c:98:e2:c8:f4:
                    a8:b2:52:4a:bf:a2:26:d3:48:c1:1d:b6:dc:ce:23:
                    66:2e:92:b7:80:00:05:ae:cc:2c:0c:52:a4:f8:aa:
                    33:b5:e6:4a:2f:98:a0:9c:95:a5:6a:e6:ea:0f:a5:
                    40:67:52:81:a9:4c:38:d8:e2:ad:16:88:ec:97:18:
                    b0:84:60:24:e7:75:fc:2f:31:b0:49:71:8f:ac:56:
                    91:f4:62:07:7d:c8:8b:fc:63:65:14:91:e0:33:54:
                    0f:35:d7:e0:d5:27:55:0e:03:c2:af:0a:f8:05:09:
                    23:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1E:27:35:37:A3:57:91:D3:30:19:8C:85:A9:0C:6F:6E:46:47:0A
            X509v3 Authority Key Identifier:
                keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9e:49:b9:5c:ba:28:ba:68:4f:41:16:16:2f:1d:69:91:83:
         9c:c8:ab:fc:2a:87:20:ae:e2:6b:18:be:a5:b0:10:a4:09:f0:
         68:a4:41:0a:08:6e:7d:9d:b1:94:22:6b:e4:c1:aa:74:a5:3b:
         c9:a1:49:b0:ed:2b:47:ce:b0:b5:7d:e3:84:d5:9e:d0:a4:b5:
         47:15:ba:7e:eb:cc:38:9e:dd:9f:f8:7a:ce:1f:d5:88:a8:9b:
         6c:09:68:ea:d7:bc:b2:57:d3:db:31:32:18:83:1a:92:71:ac:
         08:4b:15:b6:29:06:14:d3:e1:1b:48:aa:f9:18:5b:fd:0c:74:
         09:eb:55:61:fa:cc:2e:71:c6:33:27:70:b2:2f:ac:94:d3:8d:
         2c:ea:2b:3a:fb:0e:8c:6f:d5:76:a6:51:be:ec:6a:e0:4f:12:
         0d:1e:db:37:66:f4:ff:5a:f9:11:f4:c7:a2:04:cb:d4:12:91:
         97:0c:ca:85:64:c0:42:aa:97:23:77:9a:22:18:b9:bc:1c:ad:
         c7:81:04:fb:05:dc:47:10:bd:76:3d:5c:4f:09:d9:13:d6:4a:
         a9:7b:eb:ad:a9:d3:9a:0f:1e:29:e4:99:69:72:91:6f:a6:46:
         28:79:b7:d6:5f:07:fb:4a:c4:b9:af:c8:d9:93:6f:b9:fc:b3:
         51:a1:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:14 2026 by rpki-client