Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File:                     v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier:          6cUf/l3VvKkgYAnfGS0GE/S9zn1pJXltlun996gV4NE=
Subject key identifier:   83:FA:21:B9:EE:3B:D1:D3:4F:4B:C2:0F:B6:5C:AE:7B:05:82:71:E4
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer:       /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number:          A2
Signing time:             Fri 27 Mar 2026 06:51:34 +0000
Manifest this update:     Fri 27 Mar 2026 06:51:33 +0000
Manifest next update:     Fri 03 Apr 2026 06:51:33 +0000
Files and hashes:         1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: OfiGbNikZSrsx8Dr9zQAzVego4ierJuPjxzUUFL6vqI=)
                          2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
        Validity
            Not Before: Mar 27 06:51:33 2026 GMT
            Not After : Apr  3 06:51:33 2026 GMT
        Subject: CN=69c628f5-1154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:5a:75:c1:d8:18:f7:db:02:73:d3:3c:41:
                    75:10:43:e1:44:49:f6:db:10:48:1c:7b:d7:45:38:
                    34:d9:a4:97:74:9a:23:86:9c:6f:ee:d1:d6:6b:93:
                    8f:5d:04:ee:5a:7c:a2:47:2c:77:04:f7:b7:3a:34:
                    7c:67:ee:2b:32:90:c1:0d:28:7f:15:52:ca:d1:36:
                    9e:cf:38:f9:d5:3d:56:51:c6:d6:fd:c6:90:5a:a2:
                    c5:b6:72:10:d5:63:34:5c:06:7d:84:10:06:14:0b:
                    ad:6b:e6:f3:1a:00:01:34:45:6e:05:3e:33:77:cb:
                    75:cd:d9:38:1f:40:52:0e:3e:bf:c2:4d:91:f5:60:
                    bb:9a:ed:ab:34:78:0b:d8:16:2d:d3:69:9e:dc:22:
                    7b:1e:50:53:b9:d4:43:39:f7:8f:9d:5e:57:34:5d:
                    26:f9:a9:1b:b8:68:da:8f:17:2d:c7:53:52:b1:bb:
                    47:f2:8f:4b:0b:39:53:f3:73:54:f1:44:9b:ea:dd:
                    37:c0:14:20:b2:04:93:07:10:01:f9:e2:56:a3:f6:
                    d3:9a:15:95:4b:c7:a5:c7:a4:06:57:d1:ff:c8:26:
                    4b:e4:e3:dd:1e:8d:dc:9b:f6:a3:b7:0f:6b:73:f1:
                    30:d8:f9:f2:c8:a5:1f:61:1a:40:30:67:ab:b3:a5:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FA:21:B9:EE:3B:D1:D3:4F:4B:C2:0F:B6:5C:AE:7B:05:82:71:E4
            X509v3 Authority Key Identifier:
                keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:f1:87:d1:b2:6e:7b:bf:2d:0a:08:d8:c8:98:0a:01:cb:
         bf:c1:6f:d8:88:ff:94:1d:00:0f:24:c5:cd:0a:d0:b1:2c:33:
         91:1d:4e:50:f5:38:13:35:ee:20:80:b2:c9:99:d3:c1:0b:7e:
         3c:16:03:6b:05:0c:29:ba:8d:f4:6c:bd:0b:32:ad:0a:9c:08:
         51:1b:b7:0b:47:6e:71:fc:52:aa:54:ae:d7:94:b8:d8:f7:f1:
         1a:f4:f5:4e:f4:d3:42:bc:02:57:38:1d:18:be:cd:f6:00:6e:
         59:e6:0c:13:ed:66:cc:95:aa:f7:a5:65:24:42:cd:75:68:93:
         14:f6:6c:26:07:c4:ef:8e:30:17:d2:24:46:14:79:b6:5f:5f:
         eb:f8:fc:19:ad:44:d1:04:ad:28:83:a9:72:a2:55:92:18:bb:
         8f:87:ea:6d:f6:b5:c9:7c:e4:32:12:af:51:f9:d3:37:e8:aa:
         52:b7:64:ca:a7:6b:1d:bc:95:d1:7a:ed:99:25:c2:e6:aa:ef:
         75:4b:55:4d:cb:e8:7b:fe:5f:bb:37:41:13:63:f3:53:bd:a0:
         ba:73:5a:e8:e8:bc:10:68:c8:4b:9b:87:45:23:72:e1:a9:8f:
         75:75:08:cf:ac:46:a6:57:ab:68:4b:21:3c:d9:92:af:f3:06:
         fd:10:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:09 2026 by rpki-client