Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
File:                     R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft (raw, json)
Hash identifier:          sCIT6f2neqoubmBL7ccPPMqfjNGfrMCNwnhGJHfOgF8=
Subject key identifier:   52:00:12:8F:A5:12:39:8C:40:90:47:1E:FE:74:78:AF:FB:FC:DE:42
Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65
Certificate issuer:       /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
Manifest number:          8F
Signing time:             Wed 25 Mar 2026 06:47:26 +0000
Manifest this update:     Wed 25 Mar 2026 06:47:26 +0000
Manifest next update:     Wed 01 Apr 2026 06:47:26 +0000
Files and hashes:         1: R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl (hash: /BUvuAjGFH+wchC5o6BAFadesVcV3gGWpdg0c/p97ss=)
                          2: C92D041297BE11F08D37F648C4F9AE02.roa (hash: 1yGUy+FEcu5CKxFiOOSQ5RewENgHpvN09c5O9/FyM64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
        Validity
            Not Before: Mar 25 06:47:26 2026 GMT
            Not After : Apr  1 06:47:26 2026 GMT
        Subject: CN=69c384fe-fc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:5d:92:37:75:c3:cd:f0:8d:93:de:f9:56:
                    97:0b:94:8c:6c:9c:cd:65:76:b9:b4:df:a5:b3:ce:
                    1f:01:17:1e:d3:20:85:b5:43:5f:c6:49:da:50:cc:
                    92:5a:2c:24:c9:79:c3:94:fc:91:01:03:c5:ea:14:
                    2e:e9:bd:ed:b5:fe:27:09:38:1e:8d:ab:bc:19:a2:
                    d2:e6:9a:3b:6f:fc:70:b7:41:02:a7:50:42:aa:b3:
                    be:5d:23:16:26:5f:b1:92:86:a6:b6:07:5b:ff:f3:
                    0f:b9:34:d2:17:83:43:1f:39:cc:45:5c:a9:5e:71:
                    19:73:ea:ec:1f:a1:cc:54:d1:9c:49:61:b6:01:6c:
                    f7:0b:d0:68:5a:94:54:06:9c:b5:36:b8:cb:dc:dd:
                    1c:1d:63:c1:b6:32:94:f0:08:42:76:1b:ab:17:2d:
                    b9:bd:72:ee:cc:65:82:c8:da:7c:16:ff:58:94:06:
                    de:18:73:34:2c:57:f5:b2:d6:60:34:80:c1:f2:ba:
                    3c:ab:b2:f1:ff:6d:02:6c:0c:81:0c:af:b7:f9:07:
                    0c:7a:45:09:f7:7c:86:c3:f0:14:0b:e6:4c:dd:0f:
                    7d:42:91:b5:43:c8:2e:06:d5:97:4c:58:2d:c7:b4:
                    ae:24:77:12:f6:76:cb:e0:c7:5d:00:dc:c5:c5:58:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:12:8F:A5:12:39:8C:40:90:47:1E:FE:74:78:AF:FB:FC:DE:42
            X509v3 Authority Key Identifier:
                keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:86:87:a3:26:23:06:c0:c3:47:67:de:b4:f7:39:af:58:
         87:ce:5e:e6:e9:12:65:2a:75:e9:0f:e1:7a:b0:3b:42:88:aa:
         78:0a:e9:f9:fb:75:01:a9:19:90:16:8b:61:44:9c:8a:72:03:
         44:ca:35:3c:47:54:80:2b:d9:b6:a4:54:fd:96:05:19:35:3d:
         4d:54:c0:e3:ab:ad:8b:78:a8:0f:54:bf:68:cc:c9:8b:3f:1f:
         36:06:66:26:8f:69:81:4c:7a:aa:8e:17:e2:c6:14:e0:79:f5:
         35:35:d6:88:59:ec:c5:30:cf:33:cd:10:eb:76:24:59:69:2f:
         49:6a:41:25:87:cb:8d:da:ef:ec:82:09:95:97:e4:e6:60:4d:
         27:5f:f4:cc:f0:8c:b3:ba:f1:9a:f3:33:73:c3:10:c2:a2:75:
         f4:02:9b:d9:a2:a2:93:04:e9:53:d6:c0:c1:da:c4:07:00:da:
         ad:cb:6b:08:f5:52:ce:d9:16:e5:8e:18:a7:5f:97:9c:fa:af:
         78:c3:97:91:9e:95:e5:6f:81:c6:bf:0c:e8:6c:92:ba:71:d6:
         3f:9c:3e:c0:28:5b:89:c9:bc:5f:25:0a:ff:74:35:d1:f5:da:
         ce:f1:6f:a7:5a:bb:e5:71:ae:33:c2:b5:12:c8:9a:a6:f7:78:
         a2:2c:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:58 2026 by rpki-client