Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          fcteJ62tcRwJF95/rLsxJP+aoNtk/xDC/wCGu42Sv40=
Subject key identifier:   99:47:4F:69:67:48:A7:8B:6A:E0:0E:5F:E8:5A:25:A8:B0:86:D6:89
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       35B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          3579
Signing time:             Thu 26 Mar 2026 14:55:58 +0000
Manifest this update:     Thu 26 Mar 2026 14:55:58 +0000
Manifest next update:     Thu 02 Apr 2026 14:55:58 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: aZl0i7Ukd0dhjOwVS2A9o4TfMKmkTsePhptUCR3qve0=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: 3dwH9a/utiC4SfLWlkTfOUAPg5RQr8BVu3u7eFbig/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13750 (0x35b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: Mar 26 14:55:58 2026 GMT
            Not After : Apr  2 14:55:58 2026 GMT
        Subject: CN=69c548fe-8591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:25:0e:1b:c5:e0:38:50:d6:f4:3f:60:e4:
                    d3:37:4d:48:0a:c7:ba:a1:96:cc:58:70:14:37:25:
                    10:fb:51:76:23:3c:84:ae:2f:f6:80:22:5f:bd:58:
                    33:73:b6:14:4c:0c:5d:e5:84:c8:4d:99:11:a0:93:
                    43:1c:da:50:56:27:6c:cb:69:91:37:1c:09:02:54:
                    aa:ce:22:19:fd:1c:c7:b9:74:6f:35:92:9e:6b:bd:
                    60:1f:84:d4:22:82:5d:b3:56:af:b8:d2:c4:3a:00:
                    67:09:88:2c:12:fc:c6:31:70:b7:fc:4e:8f:09:59:
                    3a:d1:63:1b:13:7a:83:c6:ba:b0:48:ce:ba:75:c6:
                    f9:ad:00:ad:5c:bb:cf:a8:ed:a8:46:51:2e:ae:c7:
                    3f:d9:6a:70:b0:c9:ad:10:87:d4:1c:1f:21:49:c6:
                    cf:57:69:15:18:cf:4e:ef:78:e0:9b:92:22:b9:d5:
                    02:56:7e:2a:90:43:b4:ec:68:0e:4d:30:f9:5e:f8:
                    b9:d2:6b:f9:9d:da:f4:a2:fd:72:e2:87:a4:44:a9:
                    aa:81:96:c6:e3:35:13:6b:ff:bc:9c:10:67:fb:6c:
                    9d:70:0a:a5:14:db:d4:51:a1:e1:ef:7e:ae:ea:58:
                    33:6f:69:bf:2a:64:a0:e4:eb:8f:8f:01:5d:91:28:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:4F:69:67:48:A7:8B:6A:E0:0E:5F:E8:5A:25:A8:B0:86:D6:89
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:37:3b:d4:3a:4e:7a:19:89:7e:65:49:1c:70:87:ea:6e:
         a9:09:6d:f5:63:c5:69:25:59:0f:d5:d1:2b:82:aa:1d:98:fc:
         1f:de:89:c4:bd:96:f6:80:37:86:2c:e3:cf:1e:11:10:55:b3:
         55:17:81:7f:c5:e1:4e:4a:8f:ff:4d:40:17:d5:5d:1a:71:a4:
         7e:34:5e:41:54:74:a2:a5:f3:8a:05:f7:c8:59:06:6b:d8:6e:
         eb:f8:78:ab:2b:36:70:bb:1d:29:69:73:07:98:7c:60:b5:e8:
         73:a5:93:b0:8b:f6:b4:87:bd:ef:04:0a:53:50:4c:5e:f7:9a:
         87:11:44:62:e5:1e:08:0b:2f:97:75:48:0f:68:37:31:f9:b2:
         45:26:f5:c7:8d:74:cf:0e:d1:a1:6b:7b:e8:b1:d4:10:22:93:
         9a:bb:b3:56:3c:76:34:88:0f:29:33:2a:2b:0c:cc:22:21:d4:
         e3:d0:e2:f8:1d:6c:42:52:21:c5:02:3a:dd:bd:1b:d6:ea:fe:
         1e:39:ba:0b:a6:e9:7d:23:3f:16:c3:79:47:dc:56:13:82:ac:
         d0:5a:c9:4e:55:70:1a:52:77:79:a2:02:c7:4d:21:15:77:9f:
         19:54:d8:8d:48:36:af:e7:e9:98:a0:df:d5:98:80:aa:d4:58:
         7f:08:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:23 2026 by rpki-client