Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          8QfiE4hpXZWVic2bFhOvUAEAXuyHfRdbUtCyIguO38s=
Subject key identifier:   18:75:7E:B4:C4:71:62:6C:1A:C0:57:9C:7B:81:51:D7:17:6C:45:FC
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1026
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          100D
Signing time:             Thu 26 Mar 2026 17:24:10 +0000
Manifest this update:     Thu 26 Mar 2026 17:24:10 +0000
Manifest next update:     Thu 02 Apr 2026 17:24:10 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: 6GYSVao2Jy+sCB1zbGYt01zcopqkc2ry8GlucnE2ayg=)
                          2: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: 4tcTWtdYNVrFzyHxN1+sODGXpMdP8UrLT8P96A9YCSI=)
                          3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: QCuDILdrzkvIxZmj1iyxDFhjLdsSBcMetxYoHDCi4D0=)
                          4: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: rWIdUt0QV7XE1Z1Db6/TzOZnervJxxEdviXAUMODu4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4134 (0x1026)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: Mar 26 17:24:10 2026 GMT
            Not After : Apr  2 17:24:10 2026 GMT
        Subject: CN=69c56bba-c2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:6e:60:6d:b5:bb:d1:9f:ed:5c:49:b0:9c:
                    d6:66:d1:80:1e:d5:04:72:27:04:4f:11:e4:29:12:
                    4a:be:47:b3:c4:93:99:da:a7:90:f6:c7:13:61:1f:
                    dd:a8:74:4e:9b:99:ad:ca:f5:ca:a1:bf:4a:3d:66:
                    cb:1e:c2:92:dc:31:a5:36:c7:48:e0:01:13:85:cb:
                    01:cb:da:32:35:be:e5:6b:9b:43:1c:6d:18:37:dd:
                    52:8b:27:fa:84:6f:28:4a:0e:75:a5:69:67:9f:c3:
                    7c:19:a1:be:1b:3a:7c:2b:ba:45:12:7e:b4:c0:38:
                    7f:2b:54:5a:4d:71:5c:2c:6e:c8:22:4d:fc:75:c7:
                    8a:50:2a:9f:15:00:59:96:73:d2:b4:5c:eb:d4:c2:
                    25:d8:09:8a:1b:2f:84:07:ff:11:03:44:b6:91:2b:
                    25:bf:1a:1c:34:c9:d8:fa:c7:20:e2:5f:cd:f0:50:
                    8d:fe:ac:65:3f:a3:b8:63:4b:19:98:50:a4:58:46:
                    1c:9d:72:66:46:18:87:35:f5:ad:3e:e4:1d:ba:b7:
                    4d:b4:77:d1:72:ab:a5:da:e5:b0:b1:6f:91:6f:79:
                    c2:2e:7c:0f:c7:73:8e:13:ff:eb:92:b3:21:11:7f:
                    17:59:a9:a0:3c:e6:2a:b2:c2:97:d7:7b:72:00:9b:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:7E:B4:C4:71:62:6C:1A:C0:57:9C:7B:81:51:D7:17:6C:45:FC
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:61:30:c0:99:23:3d:f0:fd:ed:cd:c3:07:07:bf:07:8c:
         79:15:94:63:2f:08:57:3f:c7:45:d2:59:43:95:eb:c9:14:31:
         05:13:3d:a3:38:6c:c4:7b:72:8c:05:1a:7c:9c:63:18:b4:d9:
         c2:3a:1c:b1:3a:96:33:7c:e9:dc:79:b2:30:8e:b2:97:4b:c0:
         3d:54:4e:35:6b:38:5d:c1:85:29:aa:d4:f6:91:1d:d8:f9:ed:
         0e:4a:39:d3:42:35:65:34:bf:d5:c4:7e:b0:ba:87:ef:7b:11:
         a1:f6:96:c0:cc:c8:46:6f:f7:bf:7f:de:af:db:04:60:9b:e3:
         8c:94:55:3a:b2:98:f0:bd:62:9c:52:61:81:0a:95:46:76:31:
         7b:36:88:9c:d2:e0:84:66:60:a3:50:60:bb:c3:cd:fb:e6:8a:
         04:24:8f:60:3d:c1:17:6b:27:74:e2:08:73:4b:20:db:4f:9b:
         c7:85:8d:0f:19:76:60:d2:71:09:42:b7:14:41:8e:bd:31:04:
         18:39:73:fa:fd:0b:56:8b:5c:26:63:2e:8f:7d:97:c7:f8:5a:
         ee:49:a8:82:81:84:f7:75:f3:e9:a1:50:15:21:4b:78:85:51:
         73:b7:32:8f:dc:79:de:16:5f:ac:46:db:5c:ab:91:d9:a4:f2:
         cc:1f:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:00 2026 by rpki-client