Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File:                     t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier:          fgoGvPS13YwVKo8qewuccCjRRC5v9BkMjWCwT0jqMpI=
Subject key identifier:   F8:11:94:32:34:B2:09:F7:A7:FB:43:AC:87:CB:D0:7B:AE:70:A9:1E
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer:       /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number:          4B
Signing time:             Wed 25 Mar 2026 07:31:14 +0000
Manifest this update:     Wed 25 Mar 2026 07:31:14 +0000
Manifest next update:     Wed 01 Apr 2026 07:31:14 +0000
Files and hashes:         1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: tQaeuEVhNBfYayFcKt6c4ygR+YHluy601HKWDHXLMak=)
                          2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
        Validity
            Not Before: Mar 25 07:31:14 2026 GMT
            Not After : Apr  1 07:31:14 2026 GMT
        Subject: CN=69c38f42-cc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:43:ef:62:26:da:25:e9:cc:d2:d2:5c:40:
                    53:e3:03:6c:5b:47:95:53:11:cb:67:e6:3c:71:00:
                    01:f6:b8:01:3d:92:1a:4c:c3:1c:50:d3:94:c8:dd:
                    7c:3c:df:b9:56:d2:38:d5:78:ba:80:00:ab:03:7b:
                    6b:05:b5:fb:61:88:d0:3d:26:cc:11:44:ed:82:e3:
                    5a:90:f6:61:31:be:2a:53:9d:8c:2a:90:97:c4:30:
                    0f:f4:dd:18:28:83:f2:49:21:d5:1f:f9:92:19:37:
                    ca:80:14:8b:12:80:99:ae:e0:d1:8c:2d:65:ee:d2:
                    5b:fd:aa:ab:30:a8:db:d7:ec:02:b4:b5:17:3d:a9:
                    75:56:25:fa:99:1b:20:cb:ef:af:dc:49:04:1f:64:
                    80:c8:ac:10:f4:57:7a:29:0c:32:81:97:d5:f9:f7:
                    a4:e6:4b:6e:4c:50:9d:9b:e7:08:fe:16:a3:9b:8a:
                    34:2d:85:24:52:0e:c1:e4:58:d8:58:23:1e:42:03:
                    38:b9:7b:ad:60:01:f5:40:bd:de:d5:bd:7b:77:8c:
                    aa:8c:07:a5:48:eb:5f:03:15:44:2f:e5:de:88:3c:
                    67:ca:18:2d:a3:96:d0:c7:24:c6:80:ea:43:e7:55:
                    3a:a7:13:37:a4:31:c5:c0:ef:63:d7:38:17:86:8a:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:94:32:34:B2:09:F7:A7:FB:43:AC:87:CB:D0:7B:AE:70:A9:1E
            X509v3 Authority Key Identifier:
                keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:ed:21:08:c6:35:20:ce:08:90:20:5c:56:f2:5a:93:e0:f7:
         41:6a:a0:4b:c1:07:d4:c9:0f:f6:fa:62:95:be:18:f4:1c:99:
         0b:91:21:28:d1:ae:57:3b:ad:c1:ed:36:66:c2:bd:aa:eb:3e:
         7a:e4:d7:22:66:cc:bc:86:40:ca:22:c8:8b:4c:59:90:ea:4b:
         fb:f0:fe:4d:10:f8:40:f6:7a:cc:a5:1d:2b:1a:3f:e4:a6:bf:
         77:d1:2c:55:53:68:11:43:55:59:72:95:fc:8d:ee:ee:98:79:
         4b:90:cc:30:a8:dd:2e:0a:4a:a8:33:4b:92:41:57:75:a8:f1:
         c8:16:fc:cc:53:f1:37:33:21:15:02:d6:23:30:71:72:ec:e0:
         cf:b2:f7:30:96:d2:e5:fd:c2:a8:86:55:26:bb:ac:56:b5:85:
         5f:ae:67:4a:ba:ad:ce:cf:ea:4c:c3:e6:a1:53:71:ee:06:f8:
         84:b3:ba:fc:ee:e1:36:74:57:49:4a:de:6f:38:f5:bc:7e:cf:
         5a:da:57:a7:59:53:08:6c:b6:3d:2a:35:10:bc:13:53:9b:4d:
         f5:d1:c1:4d:fd:ec:d6:d3:c4:3c:7d:32:5f:22:68:83:8e:87:
         61:d1:d2:36:94:8e:a0:d2:52:a8:8c:6c:ad:f2:e0:60:84:4c:
         d4:95:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:02 2026 by rpki-client