Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File:                     8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier:          gHXwH3j2e/t3MUdneweV2yNxX2BKDTjjjOJQBIJv0bk=
Subject key identifier:   7F:19:0E:20:F0:05:6A:80:F4:E1:26:38:92:68:61:EE:D8:73:28:EA
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer:       /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number:          0311
Signing time:             Wed 25 Mar 2026 00:48:11 +0000
Manifest this update:     Wed 25 Mar 2026 00:48:10 +0000
Manifest next update:     Wed 01 Apr 2026 00:48:10 +0000
Files and hashes:         1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: kLGlzPvVf8+ikXAiCPX9W8U08k9dDsfIzwN9oqCahTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
        Validity
            Not Before: Mar 25 00:48:10 2026 GMT
            Not After : Apr  1 00:48:10 2026 GMT
        Subject: CN=69c330cb-9a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:7b:ad:0c:6e:b3:de:f1:a0:cf:b8:d5:d4:
                    b7:78:47:bc:18:39:56:3c:68:d4:09:38:b6:1a:a9:
                    ec:00:eb:f4:76:9c:66:3a:3b:2e:5a:7d:09:d9:fd:
                    64:96:24:56:37:70:1b:ef:bf:dd:af:f2:15:6b:6d:
                    cc:a4:42:2a:09:51:27:29:5a:fe:32:32:a6:cb:b6:
                    de:f3:51:e2:43:e1:2b:9b:24:cf:ad:21:0f:f4:95:
                    fa:45:b8:17:62:e0:91:50:cb:2f:7a:6d:0b:1c:48:
                    67:50:25:9a:79:89:a5:f7:2e:95:8c:0d:50:9e:e6:
                    00:0e:d1:80:9b:ae:07:3f:bf:75:40:35:62:5a:d4:
                    0d:69:32:fc:31:54:28:f9:76:b1:95:c0:df:62:e4:
                    41:af:53:a3:5d:59:8b:92:71:f3:28:4a:ac:d2:51:
                    1e:31:fb:c6:c1:c1:ac:be:69:60:f8:de:80:55:37:
                    e5:9c:41:7e:82:f4:77:b9:22:88:d7:45:1b:ec:f9:
                    fd:63:a4:56:c4:26:c7:4b:6f:6a:a3:4c:6e:aa:2f:
                    84:1b:e2:15:ca:db:be:2d:8d:81:7b:6f:88:78:e9:
                    2f:8f:44:e6:da:e9:70:d2:3d:16:3c:93:c0:d0:cf:
                    3a:57:21:eb:24:bd:2b:6f:7d:6a:4e:3e:b7:39:d8:
                    45:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:19:0E:20:F0:05:6A:80:F4:E1:26:38:92:68:61:EE:D8:73:28:EA
            X509v3 Authority Key Identifier:
                keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:e4:e8:18:87:6c:c9:30:a6:53:df:b1:06:22:17:9d:7e:
         3d:d0:f6:c9:14:6e:61:fd:6d:9a:cb:03:ed:69:88:0d:f7:e6:
         b0:98:07:b7:63:7f:da:20:c2:85:49:b0:7b:1f:7c:0c:82:f4:
         53:4f:dd:80:55:30:20:19:83:ed:89:e7:e1:9d:a0:8f:53:6a:
         2a:37:2c:93:7a:3d:f0:46:fb:c0:28:27:b2:ec:70:41:bb:6a:
         2f:d8:dd:84:93:6f:5c:23:44:bc:be:40:d7:78:92:4c:7f:04:
         f1:99:fa:b3:b9:c2:7c:a4:41:18:21:3b:81:e6:8d:4b:80:13:
         ab:d3:68:f7:f2:ce:8e:a9:40:b7:9a:8e:3f:ab:05:18:69:9e:
         55:d8:89:ee:cd:ae:47:58:a5:d7:a4:bf:b5:c0:26:54:39:1f:
         e5:c8:41:44:89:8f:81:2f:38:5d:7b:1e:33:b1:02:1b:3c:4e:
         af:93:04:37:07:bc:84:f6:d6:63:25:0c:3c:b8:86:90:4f:3d:
         68:05:66:4e:dd:e5:47:78:10:98:b5:0c:58:98:e2:53:b9:e8:
         be:38:28:db:9c:c1:4e:ef:ef:e1:1a:38:86:f2:29:70:d4:0e:
         b4:3d:3c:3e:f3:93:dd:f9:9b:e4:ad:71:b7:69:b6:fd:0a:e2:
         04:95:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:07:54 2026 by rpki-client