Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
File:                     g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json)
Hash identifier:          l1FrGmNqCI2vF7+xyJY4NnM0DS79tF/sPtiBDEXGymE=
Subject key identifier:   B3:13:56:66:D3:4A:06:EE:9C:91:9E:77:F7:77:E9:4D:63:64:F4:B2
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Certificate issuer:       /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial:       0EF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
Manifest number:          0EE9
Signing time:             Tue 24 Mar 2026 17:30:43 +0000
Manifest this update:     Tue 24 Mar 2026 17:30:43 +0000
Manifest next update:     Tue 31 Mar 2026 17:30:43 +0000
Files and hashes:         1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: LJK2H8sKDGKXpN6BUvSqHYFNR4GXMuNmpiDXRfCLNKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
                          rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3824 (0xef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
        Validity
            Not Before: Mar 24 17:30:43 2026 GMT
            Not After : Mar 31 17:30:43 2026 GMT
        Subject: CN=69c2ca43-e577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:ec:3e:78:37:4c:a7:a2:cc:54:ba:bc:e9:
                    10:d4:fd:e7:15:11:8f:97:99:88:94:5c:20:7e:ef:
                    f5:88:aa:df:c3:8f:ed:ab:06:db:da:3e:76:a0:69:
                    7b:f3:17:d8:79:9e:bc:16:67:87:12:c9:69:02:bf:
                    62:f6:36:d3:20:a2:a0:91:cd:16:e1:a1:0e:be:7b:
                    5b:16:0f:24:a5:45:98:49:24:11:ab:e4:47:e8:c4:
                    01:5a:e0:43:e0:c6:1a:18:ba:bb:81:99:8e:54:ca:
                    76:37:93:94:0d:e0:3f:ff:b9:2f:df:36:8c:08:61:
                    b8:52:d5:ec:49:ee:81:28:6b:30:7d:4b:bd:2b:f6:
                    40:2d:14:bd:c3:75:6c:81:ee:b1:85:27:10:7f:af:
                    21:2a:07:42:c0:7e:33:2e:40:55:a3:80:75:db:32:
                    73:1a:cc:8b:df:a3:db:fe:d5:d1:e1:f8:3a:70:85:
                    c6:93:29:b1:8d:63:79:9a:19:cb:ea:af:0c:b8:a9:
                    50:ac:4b:89:76:3e:d4:47:59:4b:a0:d6:7c:cb:a6:
                    02:16:d0:11:9c:64:4e:69:2c:76:ad:db:b3:0c:12:
                    c0:f9:16:46:04:15:ce:a2:3f:84:53:3d:49:01:01:
                    68:46:72:53:22:22:b0:61:42:f5:52:fe:14:9e:15:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:13:56:66:D3:4A:06:EE:9C:91:9E:77:F7:77:E9:4D:63:64:F4:B2
            X509v3 Authority Key Identifier:
                keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8d:2f:b8:f8:b0:22:22:00:1a:df:07:8f:94:5d:dd:92:e0:
         c3:73:40:d8:0c:57:2d:1d:fb:68:a4:04:ad:77:4b:3d:74:9b:
         26:d0:d2:93:ec:c3:58:e4:f0:d8:f1:b8:13:2e:4a:1d:78:a1:
         4c:bc:ab:52:25:98:31:2e:e3:1e:d1:cc:f0:76:cb:96:1e:7f:
         e3:09:9d:28:43:88:17:c6:9d:86:72:24:12:a3:bc:d3:5a:0e:
         19:c0:74:c3:00:77:bb:12:b6:e6:07:fd:1f:9a:38:4c:0e:c5:
         a5:d6:e2:5c:31:6c:4a:99:f3:95:57:c1:06:d4:31:36:a7:0e:
         78:61:18:66:94:c7:8e:f5:86:cc:23:21:24:4c:2b:44:5f:ac:
         59:ee:96:46:41:4d:ae:f3:5e:41:31:5e:e1:9e:4e:37:71:47:
         d1:ac:66:1f:38:d0:ae:33:bb:06:6b:d3:50:37:84:2c:d0:eb:
         3a:fa:55:00:1d:af:49:2e:46:50:dd:91:cb:d3:75:aa:39:2f:
         53:0b:84:30:e5:72:31:0b:d6:57:3a:6f:49:20:28:31:35:aa:
         2c:89:6b:d5:ef:8b:da:1a:59:e5:6d:37:b2:6f:81:0c:8e:8b:
         40:f7:49:12:c8:f0:e4:d8:e4:ad:85:13:08:4a:9b:46:27:60:
         2d:5e:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:54 2026 by rpki-client