Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
File:                     vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json)
Hash identifier:          7NRs63k5qs8yR59zIdCaDTfnyKmkj92Kwpiiu5+nPgQ=
Subject key identifier:   03:5B:27:9B:74:C0:1D:FE:5D:03:C8:A1:A0:DB:43:6D:04:DA:62:6F
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Certificate issuer:       /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial:       1F02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
Manifest number:          1ED5
Signing time:             Thu 26 Mar 2026 16:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:45 +0000
Manifest next update:     Thu 02 Apr 2026 16:01:45 +0000
Files and hashes:         1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: UXXE7/PVbqJkn/ZrXRiBZ09OMTFdQu5wtT6qjmM0ljQ=)
                          2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: yXfDvxwixQCVNXGXtCqoWdhakT5p23NjgL5kMuTrTAI=)
                          3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: 5Ecw3oats5AkjNp0HP71hd8W4T5v8KM41PLBROx3FeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
                          rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7938 (0x1f02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
        Validity
            Not Before: Mar 26 16:01:45 2026 GMT
            Not After : Apr  2 16:01:45 2026 GMT
        Subject: CN=69c55869-8625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:75:bb:c5:55:2b:74:0a:8d:b0:aa:68:0c:
                    8c:3d:b4:1b:6a:5e:ce:21:f9:4e:b9:83:c6:3a:c9:
                    66:54:ee:04:02:18:8f:0d:f3:74:c9:84:4d:94:db:
                    2b:34:d4:2b:6c:42:84:1f:76:26:94:73:b3:eb:0e:
                    9c:ae:f0:a7:30:54:56:57:26:ca:fa:89:09:39:d2:
                    cd:12:8c:40:5d:8c:ab:97:22:b9:45:da:e5:f1:24:
                    6c:6a:64:11:ec:19:e3:b1:2d:35:f9:a7:50:3b:04:
                    03:16:34:45:e9:e9:36:ef:7e:37:09:03:6d:46:83:
                    aa:3d:80:19:6c:48:83:63:67:f3:25:56:e3:cd:8a:
                    c4:67:94:df:3c:ff:30:f3:ac:57:c6:b5:f3:e3:34:
                    b5:a9:19:9d:2d:a2:49:fa:6e:5b:d0:2e:6e:fc:49:
                    05:b0:15:e3:18:40:21:2d:1e:65:88:5b:0f:20:29:
                    e4:99:5c:16:85:e4:e8:00:74:fe:b7:7f:86:73:f0:
                    66:d3:75:d9:1d:09:01:86:32:9a:b4:ef:c2:a5:12:
                    34:90:0d:cd:a1:67:07:f9:a7:67:41:aa:dc:94:9c:
                    53:cd:af:8e:81:9d:60:61:f5:02:e1:78:ad:5a:24:
                    83:24:c6:05:ab:c0:3b:cb:da:f2:8f:7d:a3:68:62:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:27:9B:74:C0:1D:FE:5D:03:C8:A1:A0:DB:43:6D:04:DA:62:6F
            X509v3 Authority Key Identifier:
                keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:81:0b:47:60:1d:a9:ff:54:9a:0f:69:b2:8e:59:c0:0f:
         7b:63:65:55:f5:44:43:fe:8c:8a:82:3e:ad:9b:fc:32:f0:23:
         51:4c:57:19:fa:ec:07:a4:ff:c7:79:51:bb:2c:1b:b3:d8:1c:
         64:53:0c:89:d8:67:2e:bc:86:84:64:a7:8e:6b:a8:59:3a:be:
         b5:f6:14:9b:24:23:91:72:88:18:27:bf:6c:0c:9c:fb:25:8c:
         59:f1:08:1f:33:0c:8b:64:54:12:85:06:d9:88:ed:26:0e:2c:
         c7:dd:84:41:fa:fd:c9:f7:ec:39:c0:e4:b8:ca:3a:af:c1:57:
         fe:6c:c5:f3:79:bc:ce:82:b1:9d:0d:00:57:ff:f8:54:69:d8:
         b9:ec:cf:ee:ad:28:6b:cb:5f:02:6b:6e:ce:d2:c6:f6:e3:46:
         89:70:18:22:8d:c7:e8:79:cb:b6:1c:83:45:82:f3:13:2a:62:
         cd:98:14:9d:56:8f:e0:20:79:c1:e2:c9:10:df:68:4a:bb:69:
         3f:5f:55:73:3f:12:2d:64:0a:61:fb:f0:d6:5c:8e:7e:6a:3f:
         85:a1:32:81:cb:2c:16:5c:3b:59:4b:f3:77:e6:f9:d4:ca:39:
         96:6a:13:a4:63:e9:95:62:4f:d7:e4:5f:dd:ff:b0:5e:84:f5:
         d9:c1:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:00:10 2026 by rpki-client