Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          gk3eGx7sllcFXV0m17JpE0Zz0/pipVwep/ISjCebBVw=
Subject key identifier:   0E:49:52:17:BC:88:E9:42:C6:5C:EC:DB:D5:23:44:F9:1F:E0:D3:68
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       0336
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          02FF
Signing time:             Wed 25 Mar 2026 00:54:49 +0000
Manifest this update:     Wed 25 Mar 2026 00:54:49 +0000
Manifest next update:     Wed 01 Apr 2026 00:54:49 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: c2T4b0UGpRQ37z90ZEMxTqHiplYWdyzXHKBcYVmPULw=)
                          2: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: AInTRm364fWSsEgGDzFSbiLVDp6l9PBB3u+vGg6CfFw=)
                          3: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=)
                          4: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: qxr1xAZVPVy5IH5flTFbZouBg69ZSR0F1Rre519E1ps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Mar 25 00:54:49 2026 GMT
            Not After : Apr  1 00:54:49 2026 GMT
        Subject: CN=69c33259-2b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:2c:9b:2e:13:77:89:42:83:a7:85:59:ab:
                    58:70:01:7e:15:da:d5:7d:60:cb:86:11:f6:4a:97:
                    85:13:f5:ad:c5:b5:ff:f8:68:3f:12:9b:f2:66:b1:
                    4b:3d:1a:fb:19:df:db:08:ae:ce:0e:36:56:db:79:
                    4a:9f:ec:f9:ce:83:3c:67:70:06:99:48:ef:9f:45:
                    09:60:07:3a:f6:b1:09:9e:f0:e8:f6:7b:6a:5d:39:
                    3e:2b:33:c3:e2:ad:ee:6d:a1:60:f7:c3:e1:1b:8e:
                    aa:0b:ea:a9:8c:f3:8c:46:42:0d:20:2f:ec:74:b8:
                    d7:42:ee:f7:77:67:0a:1e:e3:04:08:d5:63:0e:ea:
                    24:a7:40:25:7e:17:92:2e:50:a0:62:ec:f1:f5:e4:
                    2b:de:ff:c2:75:aa:59:2b:dd:6c:c9:0b:0e:60:2a:
                    4f:ec:ef:c6:8a:ab:e0:d4:b8:b1:ee:fa:ec:2a:86:
                    8b:20:d0:4f:3e:8e:20:e5:eb:33:77:55:0a:77:29:
                    0f:89:6c:0f:98:a3:c3:09:be:8f:14:8d:ac:91:1c:
                    09:71:e6:f4:2f:48:5b:84:88:49:98:eb:b9:f7:62:
                    2c:b0:30:ac:13:de:50:84:bb:1b:f2:3c:80:bc:b6:
                    e4:b1:93:8d:c9:d2:a2:ad:38:a3:70:33:a5:56:fe:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:52:17:BC:88:E9:42:C6:5C:EC:DB:D5:23:44:F9:1F:E0:D3:68
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3c:87:c6:22:32:bd:3a:f0:df:b5:40:86:a5:32:f8:07:f0:
         05:03:38:23:e5:c7:28:a3:e2:b8:e8:83:32:7b:50:7c:fe:cc:
         5f:3a:f6:87:a4:38:7d:e7:35:81:17:00:07:af:36:62:16:a7:
         0c:b4:5d:b6:75:d9:d8:c9:42:c3:c9:da:7e:4e:cb:bf:51:93:
         92:e8:4c:e4:ea:8e:d9:f2:be:75:7f:56:59:89:96:77:19:1f:
         0d:58:e7:11:74:9a:d1:09:df:22:0e:c6:73:2c:7f:1b:30:18:
         3d:3a:55:19:a4:85:96:4d:94:a6:c8:07:10:65:49:60:1a:77:
         d6:7a:ee:b5:1c:95:17:00:c3:5f:0d:cf:06:a9:95:38:9d:01:
         0b:6e:2f:4f:9c:9e:55:ff:14:f2:dc:67:d2:aa:43:d6:e0:d8:
         9f:05:de:7e:83:0c:9d:ed:f1:18:03:eb:83:7f:bc:de:31:48:
         64:56:6a:16:4c:07:8b:9b:3c:dd:29:9e:86:c8:a5:e6:51:11:
         9b:02:5e:88:e0:8d:8b:ae:98:00:d0:d4:cf:a5:18:a0:6f:7d:
         a9:ba:25:d4:04:b1:15:13:4e:0f:19:cd:e6:a3:dc:15:ae:85:
         f3:7f:b1:2b:20:d9:b1:0c:c6:ea:77:8d:c0:1d:0a:e0:f3:be:
         1a:81:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:54 2026 by rpki-client