Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File:                     967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier:          Sj8lrnoEQ4gDU3bkYA9VCpGBEJ2zYJBvIkkMz6w1YpU=
Subject key identifier:   6E:3B:63:EC:75:10:6A:2D:14:1F:58:E6:38:6D:03:49:AA:D5:B9:68
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer:       /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number:          0208
Signing time:             Wed 25 Mar 2026 02:25:23 +0000
Manifest this update:     Wed 25 Mar 2026 02:25:22 +0000
Manifest next update:     Wed 01 Apr 2026 02:25:22 +0000
Files and hashes:         1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: M/JveOjxB9KM8vuEfvuuktOJfVsewpdzaBYwk7Zt+ck=)
                          2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: KmkycUxGBGDhfp+ky4OMh6F/NxfCyL4MQRwNwWZI4Lo=)
                          3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: iaWvvLO9RtIU/5hc6ooIendXVuz1sJiFT2wgQFUmPyg=)
                          4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Gf9FvRP87k5tJxq7afHhKtaiWDluE6doG6ZwlKn8lJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
        Validity
            Not Before: Mar 25 02:25:22 2026 GMT
            Not After : Apr  1 02:25:22 2026 GMT
        Subject: CN=69c34793-2421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:b9:2e:ad:7e:c0:1b:d4:86:1d:34:b1:62:
                    17:66:1c:13:4b:5c:58:92:5e:fd:a5:c8:e5:e8:44:
                    a9:db:12:78:b7:71:d0:a9:fd:96:b4:50:1f:b9:8d:
                    60:36:f3:44:12:75:5b:12:c8:73:fd:cc:95:69:83:
                    ff:f4:37:c2:75:64:5b:10:ef:70:ba:3c:9d:b4:bf:
                    1b:33:2c:3f:b8:0d:1f:a8:99:22:3a:99:e4:56:3a:
                    e1:4f:b9:2a:67:0f:45:61:7a:d0:86:93:36:86:c3:
                    bf:09:ab:ce:a3:e5:3b:99:64:06:9d:a8:ba:c8:7a:
                    2b:65:16:b4:2e:b1:ad:1a:b9:46:ea:84:9e:74:78:
                    b0:44:9f:e8:9f:d1:f5:4a:02:fd:59:bd:f1:f8:33:
                    8e:37:b6:86:50:f2:38:aa:82:be:ae:78:37:9d:62:
                    64:83:e6:be:9a:de:73:85:3d:a0:6a:44:94:d2:a1:
                    0c:4b:46:b9:58:c4:a6:cc:01:43:d5:5a:38:73:bf:
                    ca:7b:70:65:cd:85:9e:2c:36:56:c8:1d:01:ef:0c:
                    e3:f1:f0:b0:bf:02:ad:8e:59:b6:68:62:6c:b0:f3:
                    a7:12:0d:01:61:1b:45:c5:61:5e:1a:be:b9:71:fa:
                    b5:54:ba:36:6f:bd:11:6a:30:43:a1:69:64:e5:97:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:63:EC:75:10:6A:2D:14:1F:58:E6:38:6D:03:49:AA:D5:B9:68
            X509v3 Authority Key Identifier:
                keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f8:af:e2:f8:c3:aa:c5:32:30:9f:ec:a3:19:c6:02:55:88:
         41:fc:0d:80:68:10:f7:f5:16:fc:da:41:34:7e:eb:01:14:7d:
         1f:7e:26:b7:3a:44:b8:00:bf:c7:0b:e1:d8:0a:38:1a:8b:96:
         1b:d2:a9:26:f2:56:f9:76:11:7c:52:e0:f7:50:7d:1e:71:5d:
         aa:2b:29:0f:f7:79:24:b7:df:27:8c:ff:3c:de:24:86:49:a2:
         2b:22:73:26:2b:88:76:18:a9:34:70:2a:b2:8e:3e:93:93:f3:
         70:f3:be:c7:f4:3c:46:0e:23:5a:1b:4b:4d:86:5d:d2:0a:40:
         5a:a9:37:e4:90:0f:b1:be:0e:17:3e:c8:fd:57:8e:ec:38:4c:
         07:02:b6:8e:29:15:f7:ee:26:f0:5b:84:f1:08:a5:ab:10:99:
         bc:3f:84:6a:8e:bb:fc:bc:3c:b1:48:d5:a0:5c:a2:63:dc:73:
         71:ec:c3:0b:4b:26:b9:42:0a:9d:aa:9b:b5:a1:13:7d:d3:bb:
         04:3b:d0:21:08:09:17:49:fe:a6:52:84:37:6e:d2:7e:9c:5f:
         c8:3a:a5:0c:59:8d:7c:cb:59:d2:22:fd:49:da:ce:0e:22:5c:
         c3:a6:67:b5:61:8d:7d:47:8a:f8:6f:34:c2:67:89:94:d3:f9:
         a4:0c:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:17 2026 by rpki-client