Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
File:                     kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json)
Hash identifier:          4fXTEamlMj+S5B3wosBsFCUGQRQD4yztOgicIq83Y3Y=
Subject key identifier:   83:8F:71:0D:61:2F:87:1C:A4:2C:78:CA:E8:23:96:85:4E:EA:ED:4C
Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
Certificate issuer:       /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Certificate serial:       030C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
Manifest number:          030C
Signing time:             Wed 25 Mar 2026 00:50:09 +0000
Manifest this update:     Wed 25 Mar 2026 00:50:09 +0000
Manifest next update:     Wed 01 Apr 2026 00:50:09 +0000
Files and hashes:         1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: tKghsFdlWISC5adOYa60py1lW3yNh1Ag11sG1d3vtrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
        Validity
            Not Before: Mar 25 00:50:09 2026 GMT
            Not After : Apr  1 00:50:09 2026 GMT
        Subject: CN=69c33141-5e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:d8:81:6a:4e:07:c1:cf:3f:65:8b:82:cf:
                    ed:66:44:8c:30:52:57:d2:49:31:3d:87:50:28:9f:
                    ec:f4:9a:52:9f:9d:d4:79:a7:57:ef:aa:e7:53:8d:
                    63:11:1a:2f:03:54:91:95:5d:e0:e8:dd:ec:59:3a:
                    99:79:5b:43:d6:38:d6:1e:f3:c3:8d:e5:bd:6c:e9:
                    6a:4e:61:98:f4:d9:b8:6e:a0:cd:8d:6f:b4:7e:09:
                    12:c2:3a:cb:17:96:da:2d:2b:06:1b:b1:fa:4a:4a:
                    25:39:ae:7a:b7:15:2f:8c:0c:bc:81:aa:05:c1:47:
                    a9:31:77:d4:27:50:94:99:b6:ae:32:07:e5:fb:24:
                    69:0c:9b:5d:e2:53:a0:3c:0e:95:6c:c3:45:63:a0:
                    19:04:94:40:a6:fa:62:b1:0f:b5:ac:ec:8e:04:4b:
                    d3:0f:aa:32:de:ab:11:e7:5c:02:4b:0f:7d:f9:77:
                    06:33:00:79:32:dd:29:b2:6d:39:cc:58:1c:68:6d:
                    13:d3:44:32:e8:58:99:12:6d:3f:89:6b:e7:85:a0:
                    41:cf:88:d7:1f:e6:92:6c:3a:6b:65:ba:ca:0c:ae:
                    55:93:76:bb:ba:8f:7c:89:63:c2:92:ed:56:21:1e:
                    ba:18:e2:96:1a:8d:54:be:8f:18:0f:a8:18:17:ee:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:71:0D:61:2F:87:1C:A4:2C:78:CA:E8:23:96:85:4E:EA:ED:4C
            X509v3 Authority Key Identifier:
                keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:85:d4:3d:d9:31:14:2a:3b:21:37:9e:e4:00:f8:04:ab:fd:
         2a:a2:89:40:12:83:1a:a6:49:7f:97:a6:cf:00:00:69:e8:b6:
         15:31:84:56:50:06:9f:5d:45:4d:c1:4d:d1:bd:ec:e9:47:af:
         1f:47:3e:67:d7:c5:69:d3:5c:ee:1c:09:92:4c:d1:cc:2e:e6:
         7c:41:5d:35:16:ef:ab:cc:75:10:e9:90:5a:26:c9:03:d1:fb:
         b0:ef:6d:12:fb:0c:4e:84:e4:1d:5c:46:5e:76:64:01:81:67:
         69:38:a6:96:f5:3e:4f:25:08:bf:a4:07:51:a6:66:3d:b1:fc:
         f9:78:a1:59:4a:49:23:0d:2e:28:3f:c1:b6:f3:24:73:28:63:
         57:47:c1:ab:41:5b:a9:0b:2f:8c:28:72:31:6f:6c:b9:49:73:
         27:47:b5:8a:46:32:10:9c:46:48:b6:ca:c1:5c:c2:b3:4d:e7:
         26:84:98:e1:ba:95:27:99:dd:cd:b2:d6:c7:db:1d:df:a9:05:
         41:f3:30:90:d8:0b:84:01:f0:79:30:06:7d:d8:b3:65:4b:51:
         33:4a:34:b5:0b:ab:1f:30:f4:de:45:b6:5b:97:c4:38:b6:39:
         5d:39:72:e3:93:10:91:df:ca:2a:b0:00:16:ed:64:ff:a9:1c:
         13:6a:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:23 2026 by rpki-client