Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
File:                     r48M-0f7_MfEkzxHPNs2RCtQUc4.mft (raw, json)
Hash identifier:          7yd19DenZ+/k44djhuQYN8CQShV5zHl4GEjjRwv/vZ4=
Subject key identifier:   7A:7E:CF:B6:32:1A:1E:D8:16:EE:93:21:8C:D8:67:43:FE:BC:91:CA
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       38DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
Manifest number:          36EC
Signing time:             Tue 24 Mar 2026 14:22:38 +0000
Manifest this update:     Tue 24 Mar 2026 14:22:37 +0000
Manifest next update:     Tue 31 Mar 2026 14:22:37 +0000
Files and hashes:         1: r48M-0f7_MfEkzxHPNs2RCtQUc4.crl (hash: mpgTfOSpf3giNpzk/LjbEsqXpNdCxikZK7OJWnyUzaI=)
                          2: BD30E870F62711E9AC18E63BC4F9AE02.roa (hash: Bt1DVmp/rVACUYy7hOEWMxI2KVNrnwFOMMIiqisaZqk=)
                          3: 7C5F5278589611F084D9AA7BC4F9AE02.roa (hash: SpGXHIvK5nyaRkt9i4BT1y40N9SY9IO5lxOenq0eXjc=)
                          4: EB413AD41C2311F1BB63DB7C323D8C67.roa (hash: mu4a5W4QiOI+CTr5PGXDdi9qPTwHeRxs3X0cGzW29Vw=)
                          5: C2C631C8A47911E99DBEDD52C4F9AE02.roa (hash: kd1iJKjt4s1p3N8o1t3iD1KrDJbU5r6zZPllhODQ63U=)
                          6: 1514A670A47B11E9867CBF58C4F9AE02.roa (hash: +N3hMrjmteLApBbJuxaiuAaypR3DMXsFW+sR7UJJVtE=)
                          7: 24AC829C476311F0970DF567C4F9AE02.roa (hash: mTmW2tlcxITv3MdjbT02W69HQ7YNon9s/TUkLbZT4dY=)
                          8: BC187B74F62711E9AC18E63BC4F9AE02.roa (hash: uvtQrM0TpfHbW7ex57nMW2ZvXTgDMttP3mpUN9tS1i4=)
                          9: A62428E820B211F09941D114C4F9AE02.roa (hash: fcDJ/ZruqRqMthD4UyDytuO1DIXDnB08fy1+uiAiXPg=)
                          10: 94AE247A879B11EF9B78224EC4F9AE02.roa (hash: D3CTdA1kUkE++bAK3ka79TJOTO7RnLWPVR3q4485ff0=)
                          11: BC94C436F62711E9AC18E63BC4F9AE02.roa (hash: kmwG0SfeWdiV4Xu5QoUdYfe+EQnDiuhdgFgvkYNigm8=)
                          12: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (hash: uJVGJAMKOfLYngsu0KaVCm+1tIKCd23thNZf3gP7YGw=)
                          13: CF09016006A611EAA8819441C4F9AE02.roa (hash: EqVj/R6zIrNK8F/gAmcp7/6N4a51SIEQbvgRir9Ukns=)
                          14: 8513C77AF62A11E9A6941C46C4F9AE02.roa (hash: aHMoLiAWEBtx9nlKA4Tl/TgqjF+Z/5MQlN1hzLSqVwg=)
                          15: 387ABD22614211F0AED25E68C4F9AE02.roa (hash: OuvCWzbpT4a+0DOmENZtmETiFANVzW6xzRKWra0CMc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14558 (0x38de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Mar 24 14:22:37 2026 GMT
            Not After : Mar 31 14:22:37 2026 GMT
        Subject: CN=69c29e2e-be89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:4e:3d:b6:8d:ac:79:8f:91:e7:40:af:27:
                    62:62:5d:60:fe:57:fa:98:6e:fb:a2:d5:ee:71:3f:
                    96:b5:93:00:66:69:66:12:f1:f7:f3:f2:38:35:ba:
                    d7:04:c3:b8:f2:fe:d9:d7:e8:ae:2e:2f:ee:b8:d4:
                    9e:85:22:91:46:78:51:bf:dd:09:e6:c0:5b:9a:41:
                    35:c2:f7:f1:a6:f2:7f:10:a7:a7:71:7b:df:2f:cf:
                    3c:6e:39:98:81:c4:26:a1:8e:c8:f1:8a:29:29:d5:
                    ef:0b:0e:01:5e:1c:1f:2f:69:d0:ee:ef:e1:10:d2:
                    47:8b:46:67:24:1e:56:97:f9:94:5d:27:7e:7d:89:
                    37:05:48:c5:cd:5a:d2:d6:1a:3f:b9:92:6c:9a:e9:
                    0c:5d:e2:38:43:69:67:05:10:a4:45:3e:e7:6f:23:
                    21:23:1d:94:82:2f:4c:2a:67:15:99:99:22:64:33:
                    03:cd:eb:90:3a:10:36:bb:58:1a:b0:90:88:2f:3e:
                    95:69:92:07:c3:4e:6c:be:b7:42:ae:ed:b9:13:58:
                    4f:9c:3d:0c:a2:c4:d0:c5:fe:70:69:57:d3:6a:76:
                    19:c9:61:f9:84:b9:0f:49:3e:63:91:91:07:fb:6b:
                    a6:ea:f5:1f:30:68:db:15:72:60:8b:e1:50:9c:a5:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7E:CF:B6:32:1A:1E:D8:16:EE:93:21:8C:D8:67:43:FE:BC:91:CA
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:5d:df:af:ef:ed:51:c1:15:63:0b:a9:d7:3c:8d:97:d4:
         61:6a:5f:ff:5d:89:2b:d0:e5:65:02:10:bd:80:96:df:37:65:
         29:6e:c9:a2:9b:a7:5d:b5:bd:8d:89:50:4c:f9:eb:bf:2a:cf:
         b2:92:bf:cc:20:2e:97:ef:de:f5:06:d5:67:05:14:2c:c4:7f:
         ac:7f:d3:86:83:75:22:11:21:ac:dd:f5:d8:ae:3b:66:ea:21:
         91:05:ef:a6:4f:dd:ee:71:db:35:d8:78:f2:80:df:f4:ea:82:
         69:22:38:dd:a4:b6:4a:c4:72:51:58:8e:47:5a:19:73:ca:9b:
         12:fd:f8:08:bd:6d:aa:32:8a:20:7d:48:5f:03:64:ef:69:61:
         0c:17:36:af:33:5b:4b:f0:6a:4c:16:c1:29:01:da:0b:25:da:
         08:5c:06:d6:33:97:98:52:f7:25:2b:77:d1:bb:e4:5c:00:92:
         51:dc:1f:a1:44:65:e1:64:8c:f3:ef:94:01:c7:7e:a0:e3:7d:
         6a:ee:4c:bd:bf:1f:37:2a:66:fd:1a:8f:a4:d7:13:3d:d5:87:
         68:c0:4e:a2:98:c5:ec:48:0e:cc:98:67:8a:f1:6c:e9:0f:49:
         da:f5:97:f8:79:c2:d8:57:8f:f4:06:aa:51:8d:4e:e6:a5:02:
         3f:c7:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:46 2026 by rpki-client