Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          ZTNLNhw43ZbKlMiS9K3Mj8TPO9c3E4seUluby/G19sU=
Subject key identifier:   7A:7F:F1:96:0D:A2:60:94:AE:BB:F7:2B:29:82:D9:A4:45:13:04:64
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       3580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          3549
Signing time:             Tue 24 Mar 2026 14:25:06 +0000
Manifest this update:     Tue 24 Mar 2026 14:25:05 +0000
Manifest next update:     Tue 31 Mar 2026 14:25:05 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: omiJVdo5oHCAMfTL+x2ZuF3ETzNkLwOZSYUj+1S7rds=)
                          2: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: 0ZX7onnHeath/X0shPjw6NE2rJxaKKkRVT87NS18/xg=)
                          3: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: bVSImGbzCmPdx5Fe/89OTQxr25ztle7G04JYBbFG6dg=)
                          4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: prjzJ/kw7tRxzDOItt9cUFw+O9ghSpnIB3ybGSXw9cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13696 (0x3580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Mar 24 14:25:05 2026 GMT
            Not After : Mar 31 14:25:05 2026 GMT
        Subject: CN=69c29ec2-da36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:c2:db:af:75:af:a5:28:c4:ec:80:f3:25:
                    31:44:3d:58:d6:17:60:86:7d:92:bd:fd:5f:0a:84:
                    5d:75:c4:59:0a:a3:26:a0:74:28:1e:0a:d1:84:28:
                    e8:f5:b2:ae:cf:d0:44:03:1e:14:ed:36:59:73:a3:
                    a8:43:a4:82:66:93:c3:ae:c5:00:9d:2e:6e:f0:6f:
                    85:f9:72:39:03:4c:62:ee:99:2f:94:a0:14:ed:e9:
                    25:bd:4f:26:a2:3f:33:87:13:38:68:61:51:ce:b3:
                    00:32:9a:2b:a4:e1:33:ed:f3:a3:51:0a:d6:f4:3b:
                    b9:e0:7b:26:f9:cd:e9:b3:7c:2f:8c:ca:9e:20:26:
                    4f:eb:33:d6:6a:ff:1a:0e:d8:d3:08:65:f5:a9:1d:
                    b7:1b:65:fb:f0:4b:f8:f7:85:ba:b6:85:9d:82:d1:
                    31:58:26:c8:37:4b:8a:28:7c:e2:b8:a8:5d:c4:13:
                    03:77:0b:84:01:a0:69:88:92:ee:4d:f6:f9:bc:f7:
                    22:ab:e2:0b:56:4c:d7:62:12:cc:f2:23:21:4c:6b:
                    d6:35:8e:c1:b0:7f:11:95:59:ce:8d:38:49:18:73:
                    cb:33:08:4f:76:09:4d:4d:94:fb:58:ca:4c:c2:23:
                    ee:f0:81:1e:fd:6b:45:6b:f7:b0:97:fb:19:4b:48:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7F:F1:96:0D:A2:60:94:AE:BB:F7:2B:29:82:D9:A4:45:13:04:64
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6b:16:18:13:d7:14:9e:52:ff:c2:0d:32:48:7f:28:20:33:
         ed:77:46:f0:f1:e0:d3:66:2f:1d:82:d4:69:7d:d1:0f:9c:23:
         b4:d2:82:d9:8c:70:9b:99:b7:63:7f:e2:60:2c:08:f3:a9:1e:
         62:09:29:67:b1:47:d0:44:6c:21:d2:9a:0f:09:b1:44:e5:05:
         d2:b0:ad:64:46:55:67:53:81:dc:61:62:64:94:7b:7c:55:b0:
         6b:b0:44:50:d6:d2:51:ac:1c:d7:be:69:d8:23:ce:a6:8f:17:
         cc:e0:86:16:b8:c0:89:9e:5a:a2:2a:03:03:7f:b5:10:28:60:
         da:e7:6b:01:21:66:e8:d9:b7:a8:c6:64:23:f4:f3:b3:dd:be:
         99:08:ee:c2:5d:03:ff:df:8f:ac:96:8c:6c:9f:58:9f:23:22:
         c7:8f:9e:51:2e:65:26:f8:db:19:32:09:2a:5f:63:06:d5:f9:
         b1:42:58:e1:c8:a4:80:7f:c4:09:f2:0d:d3:72:c9:60:71:18:
         3b:e9:dd:db:0a:6f:87:58:9e:ae:8c:00:37:fb:ec:31:62:cb:
         15:99:16:7f:14:b1:bd:cd:00:e2:7f:6a:3e:4e:79:9e:25:58:
         d4:a2:a7:e2:36:50:d4:4f:86:97:e6:07:dd:3f:8d:61:c7:f9:
         b5:66:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:54 2026 by rpki-client