Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
File:                     4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json)
Hash identifier:          cFL7EUsGOqwSZKV2lDHU1t2y7ZfwzuyzFcOniDBb+AA=
Subject key identifier:   E0:2B:54:F7:BB:3E:96:9D:48:25:15:01:68:F0:6D:FC:D7:FD:29:C9
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Certificate issuer:       /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial:       0743
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
Manifest number:          06DC
Signing time:             Tue 24 Mar 2026 22:13:02 +0000
Manifest this update:     Tue 24 Mar 2026 22:13:02 +0000
Manifest next update:     Tue 31 Mar 2026 22:13:02 +0000
Files and hashes:         1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: FKvh2BpSbsV1q2WWm4+NQ35aFtI0rcRQwNu1ni7Rfhc=)
                          2: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yhURItjRdxKg6mcd34cH8KYuvJEG8HUnJFXPM2XlV0s=)
                          3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: HxvlT3R4kqOwTlGrsDbEk+rFYJJp21AiQ7YUhKYZemw=)
                          4: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: SRBM1UQ62MzwstNbBGZOLlHSllpwrOM36SMcBobvZHc=)
                          5: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: Uq1r1G4tm1AaUsLNtGMF+1xso19V+ldz4OeRvJIott0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
                          rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Validity
            Not Before: Mar 24 22:13:02 2026 GMT
            Not After : Mar 31 22:13:02 2026 GMT
        Subject: CN=69c30c6e-3f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:33:cb:6f:9a:d8:62:8f:cb:e9:da:46:bf:
                    d5:cb:48:9f:e0:8d:35:c8:e2:44:2d:cb:6c:cd:3d:
                    63:04:67:7c:ed:1a:34:34:22:b8:4e:0c:ba:a8:5c:
                    a9:5f:ed:fd:c7:78:b5:28:bb:6b:92:53:d5:76:b1:
                    ea:98:07:1d:f0:b1:f5:8a:b4:36:24:2f:1a:0c:fc:
                    a7:bf:da:d6:c7:33:69:bb:5f:c1:8a:73:00:89:a4:
                    1c:21:7e:af:1a:68:87:79:04:d6:05:c8:32:ab:3e:
                    0d:62:2c:78:7a:ec:9e:61:c0:3f:2a:93:7c:f2:98:
                    f8:43:4c:85:75:7b:40:1d:1c:6e:41:85:93:e6:91:
                    59:a1:78:1e:7b:55:14:23:67:26:47:d2:e4:cc:5c:
                    79:94:74:70:da:08:dd:55:2e:01:75:b3:9a:b0:69:
                    85:10:f5:61:1f:b4:0c:6c:6c:4b:b7:22:47:29:a6:
                    7c:70:fe:c0:e6:df:f8:81:38:a4:ef:2f:6e:dc:34:
                    92:81:43:91:44:fb:f7:85:21:58:b4:d6:cf:7c:58:
                    5a:8c:d1:ef:6a:e1:cd:0a:e1:f9:3f:ab:68:9a:e7:
                    91:9f:76:1c:9e:63:5e:8b:6f:b0:da:ea:4e:69:2f:
                    1d:06:2e:b6:ab:c0:ae:6d:45:ee:9e:7f:fa:27:98:
                    16:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:54:F7:BB:3E:96:9D:48:25:15:01:68:F0:6D:FC:D7:FD:29:C9
            X509v3 Authority Key Identifier:
                keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:96:be:b5:1a:aa:0f:0f:f6:9b:9e:d5:b5:ba:26:58:d9:
         90:96:fe:66:86:52:2c:e8:95:e4:4f:ec:18:9e:a3:96:c6:d0:
         3d:6f:c2:64:08:b1:20:4d:8b:cf:c4:3a:79:6d:3e:c6:1c:4c:
         b2:00:58:ba:40:fd:2d:11:b7:04:c2:45:3b:e3:90:41:b8:44:
         fc:b0:41:72:5c:c2:20:71:fd:da:b4:f5:d6:49:80:cc:fe:cc:
         91:62:39:64:0d:a0:0c:2c:bd:db:42:96:85:3e:a3:3d:a9:91:
         03:00:dd:fd:21:7e:0a:40:1d:4a:e1:17:3b:ef:bd:18:94:85:
         35:aa:38:ec:da:1d:15:b7:af:ee:24:16:fe:99:fd:4d:92:01:
         97:db:0f:bf:fc:6b:f2:1e:20:a2:16:af:f6:45:e0:82:f2:10:
         17:85:8c:59:89:1c:7c:f8:7e:0c:5d:19:cc:85:89:05:5d:9a:
         5a:2b:59:dc:5d:d5:d8:96:7f:58:7b:31:27:bc:c8:30:a7:42:
         9b:b0:c3:a5:30:af:29:ae:37:d4:26:9e:30:6d:68:b0:e1:0f:
         5f:94:22:83:e7:45:45:95:0a:28:bf:b2:39:e8:ba:9c:db:69:
         03:7c:64:04:46:74:bc:76:c6:59:3c:da:08:d8:26:6d:0d:16:
         b6:5d:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:12 2026 by rpki-client