Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
File:                     fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json)
Hash identifier:          2twZQazCa+A6cTgnPya+hI26vJliFkXmlx+WJDrPYys=
Subject key identifier:   A1:F3:E5:55:8F:B6:00:E8:74:B3:74:5A:44:7A:A5:C5:8D:B5:9F:B2
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Certificate issuer:       /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial:       0AB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
Manifest number:          0AA8
Signing time:             Tue 24 Mar 2026 19:18:38 +0000
Manifest this update:     Tue 24 Mar 2026 19:18:38 +0000
Manifest next update:     Tue 31 Mar 2026 19:18:38 +0000
Files and hashes:         1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: bNtz1WsE8JDVzSdz16WrXsqQEqlYKAlP9qd8fJOjIQE=)
                          2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: cyGdZRNVWD5UcS95nh3pu6VqxkGiTwrbRTAtA3uVdig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
                          rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
        Validity
            Not Before: Mar 24 19:18:38 2026 GMT
            Not After : Mar 31 19:18:38 2026 GMT
        Subject: CN=69c2e38e-fb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:bc:51:18:ae:6f:ca:1d:f5:bc:7c:0b:a1:
                    3a:51:4b:c9:04:ae:26:65:1e:4c:a5:54:e3:a7:12:
                    2d:9f:cb:33:80:d3:40:aa:b0:fb:02:8f:0d:b7:c6:
                    a4:a4:18:18:5a:38:b2:69:e1:60:1e:0e:c6:58:c7:
                    08:e0:5f:57:75:e9:e1:7d:ad:7e:25:e2:4f:a1:10:
                    7a:f2:8d:a6:32:1f:a4:a2:d8:06:5c:d0:72:8c:5a:
                    18:a0:e6:a2:c8:d7:02:d0:96:e2:12:bb:e6:0a:ad:
                    a6:4b:ca:12:57:0f:37:24:89:53:97:49:eb:ad:03:
                    ad:1c:57:d8:a0:fc:7c:97:13:69:54:92:b0:c3:d8:
                    d9:48:9b:7a:6f:e0:f7:6f:d2:e4:47:a7:5b:bb:03:
                    a3:e7:aa:63:6c:83:10:48:3b:2a:36:6e:6b:af:d3:
                    4e:08:7f:ba:be:1a:84:ca:d0:94:0a:fe:3f:b1:1d:
                    41:b6:9a:b4:8e:3f:ce:a7:b2:2d:ea:36:7d:dd:15:
                    84:ac:30:1e:74:24:34:39:a8:a0:0e:4f:70:0f:a9:
                    21:ae:0f:1d:3b:25:ea:29:c3:03:0e:aa:c1:f2:5e:
                    1c:97:a5:8d:b0:77:c7:fd:a2:2a:c2:c8:d8:54:19:
                    98:c2:d9:f6:bc:2e:ed:c1:11:56:a2:7d:9a:db:ad:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F3:E5:55:8F:B6:00:E8:74:B3:74:5A:44:7A:A5:C5:8D:B5:9F:B2
            X509v3 Authority Key Identifier:
                keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:ba:e7:09:16:7e:96:a9:be:c9:ac:9d:a4:ba:cc:0f:5b:
         ce:2d:e6:92:78:ee:8b:27:2e:de:b4:2b:15:82:39:bd:b0:d8:
         6a:bf:06:25:c7:f4:83:33:cb:e0:9a:30:09:52:e0:cb:90:2b:
         c8:4b:28:8a:5b:ea:d7:2d:12:eb:ad:23:5b:94:d6:04:7a:5b:
         82:09:9f:ee:43:35:b8:c5:f1:bd:57:8c:16:7c:f3:a6:61:ef:
         2b:16:2d:07:24:a0:88:3c:9a:23:b7:b2:c6:4a:46:96:9a:39:
         25:30:ed:e4:ae:c5:37:7c:73:24:98:d1:9f:22:1f:86:de:d9:
         11:a3:89:2b:83:57:ee:70:92:53:2b:57:22:f8:49:3f:88:90:
         99:5d:01:e6:89:07:7b:76:6e:2f:3b:be:c3:73:d6:d9:ef:90:
         7a:b0:14:c7:ff:71:82:94:bc:4c:c1:72:ca:52:96:93:64:6d:
         55:b2:3d:99:7c:20:1f:fb:94:21:5c:26:4c:b2:6c:2e:d7:1e:
         31:2e:66:20:2a:46:b0:82:1d:aa:cc:6e:42:35:9b:47:c5:28:
         63:68:cf:11:2c:7a:cc:1f:3c:95:f7:9b:c2:11:1a:6e:fd:42:
         57:b7:f3:7c:67:f8:14:c8:81:4e:2b:fd:fb:54:d5:d9:7c:0f:
         22:d3:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:50 2026 by rpki-client