Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
File:                     badIHjljLTOANmkPe0OixINj22g.mft (raw, json)
Hash identifier:          cZuLCzGB34FclKsK7zZhAcrJNygiNZhhxsX0dzqBhVk=
Subject key identifier:   67:43:69:47:2B:EF:67:E6:5C:25:CC:17:4D:05:77:96:B6:0E:9C:69
Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
Certificate issuer:       /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
Manifest number:          E7
Signing time:             Wed 25 Mar 2026 05:39:19 +0000
Manifest this update:     Wed 25 Mar 2026 05:39:18 +0000
Manifest next update:     Wed 01 Apr 2026 05:39:18 +0000
Files and hashes:         1: badIHjljLTOANmkPe0OixINj22g.crl (hash: JGwOAPw9XgZMEWh2uX1yooazi5J3oCm1JqAFqfnOseU=)
                          2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: kVyhvgjxUwUSm0wPasDIxMkRKwNbqO3guIkhR0YMhkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
                          rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
        Validity
            Not Before: Mar 25 05:39:18 2026 GMT
            Not After : Apr  1 05:39:18 2026 GMT
        Subject: CN=69c37507-e8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:b8:68:c4:48:b7:b3:e5:6d:c3:ed:88:05:
                    0a:96:19:a6:de:55:7b:08:f0:be:85:5f:08:16:b5:
                    69:a5:ba:0b:ce:fd:9b:80:26:f4:10:b1:eb:db:50:
                    a5:ed:00:9d:fd:cd:94:e3:78:ad:e9:1e:ef:47:94:
                    0f:da:6c:c3:c6:64:ca:50:6d:78:57:ef:a8:14:a1:
                    d5:41:1a:10:ae:92:9d:47:c1:8c:44:77:bf:4f:c4:
                    a6:98:5a:9e:d9:cc:41:b8:9c:27:2b:e6:2f:8c:2c:
                    2a:7a:a9:04:c2:c9:3b:1d:d2:fd:f5:17:a7:54:ce:
                    c5:f3:8f:17:ed:61:21:b5:ec:92:11:78:2c:74:f5:
                    bd:69:9b:34:a2:b9:24:19:a1:94:40:32:47:57:26:
                    dc:b3:ae:66:71:be:46:60:3c:51:b2:7d:e3:cf:e7:
                    cb:46:f3:fa:1f:56:29:7e:3b:47:c7:93:89:2a:e3:
                    64:11:f7:02:d0:50:48:b5:56:a3:57:fa:c7:cb:65:
                    3f:78:00:bf:1a:27:d9:28:1f:2b:7d:c2:be:2b:19:
                    12:59:4a:14:26:4e:67:03:77:c3:98:56:f8:0f:b8:
                    e0:66:9e:2f:b6:fc:d5:89:c6:b4:d2:68:3a:a8:10:
                    a5:77:8c:2a:07:ec:fa:a6:00:e1:ac:2e:0b:06:bb:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:43:69:47:2B:EF:67:E6:5C:25:CC:17:4D:05:77:96:B6:0E:9C:69
            X509v3 Authority Key Identifier:
                keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:fc:c2:8c:88:81:18:30:7f:c8:ca:98:e6:2e:8f:db:20:
         ab:ab:53:cf:be:59:19:5c:b8:eb:b8:5a:ef:d8:cf:b2:e5:e2:
         44:ee:c2:eb:70:4a:0b:6b:b1:92:3c:43:8d:44:b8:68:40:65:
         04:80:b0:2f:c0:d7:3c:4b:95:1f:19:1c:0f:21:57:c3:32:8b:
         69:a2:e0:0a:c2:6f:c7:d1:4c:d9:d6:14:82:80:ad:c8:ae:76:
         83:b7:f9:76:a2:8f:b6:fa:16:3f:f7:34:e8:1d:8b:2e:5a:bc:
         27:40:74:fb:15:61:52:25:d5:46:bb:3f:44:46:65:58:e0:5f:
         60:a0:9c:4b:2e:8e:e6:be:2f:ed:13:ba:58:6a:04:05:e3:91:
         5d:3f:4f:62:cb:a1:49:a7:23:b5:ec:da:c9:d4:8e:3a:da:53:
         cd:6c:b3:96:1b:d3:6b:84:23:2d:f5:70:61:88:e2:da:fe:1a:
         70:07:04:ac:f0:2b:84:0a:a4:50:69:82:7d:40:50:c6:95:8a:
         7a:08:62:5b:9d:cb:fb:2e:42:27:9c:c5:5c:58:3d:78:7f:ab:
         7d:f1:65:8e:13:bd:e0:01:3b:7d:f2:df:7a:39:5b:6d:48:51:
         93:8a:f2:d4:6c:1e:32:c5:9d:fe:70:69:29:6e:f1:47:c6:42:
         7f:c3:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:44 2026 by rpki-client