Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
File:                     Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json)
Hash identifier:          YsCbuutWlL7vcYZ7C5YP+g2x41NYoU1gIs0QCh5o0nI=
Subject key identifier:   6B:9B:10:E9:0F:39:5F:66:51:35:15:D9:B4:42:7A:B0:1F:F7:F9:5E
Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
Certificate issuer:       /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
Manifest number:          0144
Signing time:             Wed 25 Mar 2026 04:27:40 +0000
Manifest this update:     Wed 25 Mar 2026 04:27:40 +0000
Manifest next update:     Wed 01 Apr 2026 04:27:40 +0000
Files and hashes:         1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: 9vC03djFpA5m746LyPxLZkEsHhINphW3ADQVgE0B2Tk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
        Validity
            Not Before: Mar 25 04:27:40 2026 GMT
            Not After : Apr  1 04:27:40 2026 GMT
        Subject: CN=69c3643c-a871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:ba:b8:e8:15:52:e8:9a:bc:a3:ef:71:5e:
                    b8:45:9c:8b:57:ea:6d:41:22:e1:1b:f8:e4:6d:5d:
                    41:7b:4f:58:3b:5d:a3:d6:a4:23:ce:ba:e4:da:99:
                    00:97:f2:68:83:28:aa:40:4c:2b:40:ec:7c:d8:ad:
                    32:68:b8:05:f9:7e:9a:d7:8a:08:ca:77:31:47:61:
                    d5:fc:b5:3b:44:98:96:ca:65:ac:a2:1b:f9:3b:23:
                    fe:87:5f:de:64:13:61:57:a0:9c:ed:f5:c9:ca:75:
                    ee:a3:74:47:dd:eb:08:f9:59:54:dd:e8:54:b0:f4:
                    47:24:93:64:f9:f6:65:0a:f4:8d:a4:f2:47:d4:b0:
                    ff:e5:23:8c:7c:ed:e2:7f:64:8f:4c:fe:74:0e:5c:
                    a6:49:88:7b:c1:35:a2:ea:94:7d:20:82:c9:c1:64:
                    9e:0b:24:22:0f:2a:f5:2e:a0:03:41:26:88:75:13:
                    dd:c2:de:23:48:13:76:ae:d7:4c:72:2d:d8:f2:b0:
                    69:c9:b6:35:29:b9:e6:62:d0:38:a8:24:44:55:33:
                    07:3e:ed:a5:3c:da:ea:24:89:ea:6c:27:bd:d8:f2:
                    22:ca:14:86:c1:66:71:c3:85:47:62:19:01:7e:b6:
                    3c:d3:83:27:7f:9a:e9:17:06:44:e9:21:e5:b4:0b:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9B:10:E9:0F:39:5F:66:51:35:15:D9:B4:42:7A:B0:1F:F7:F9:5E
            X509v3 Authority Key Identifier:
                keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:93:2c:b4:3e:12:81:22:c4:cf:61:32:91:39:1e:db:69:
         b5:7d:fa:5c:33:2d:a4:93:89:ce:aa:fd:83:92:1c:11:ad:d8:
         ba:dd:fb:82:b0:b6:25:a9:01:90:15:41:71:c1:5d:cc:fd:83:
         d0:06:86:3b:3e:c4:d2:4e:ed:46:d0:03:2a:f8:79:07:6c:31:
         0f:57:31:d6:c6:fd:ff:cc:a4:c7:c2:83:33:74:21:92:e2:28:
         80:06:81:9c:47:b6:e2:c2:99:be:a4:b5:b1:ed:75:50:e6:8f:
         2d:bc:ca:0b:10:27:65:d5:3d:b6:ca:ac:12:c9:c5:26:bd:f5:
         2b:5d:f1:6c:68:c0:5b:ba:77:cb:05:1e:b6:f8:2a:ac:42:ca:
         e0:8e:e5:90:5e:0b:fc:ff:f3:ec:b3:60:33:8a:93:30:32:b8:
         67:22:cc:ee:23:64:e2:7d:ab:1e:97:8f:bb:66:e6:69:60:a0:
         2d:2c:19:33:2c:b9:0e:b1:c5:e7:a1:8a:6e:3e:2a:b0:03:2f:
         d6:64:0d:5a:02:a2:5d:9a:5d:90:d9:69:04:f2:54:e2:46:fc:
         d7:1c:36:f3:d5:b5:f9:73:e0:64:a1:a3:42:f0:90:70:11:6b:
         d4:a3:a2:78:43:6d:71:ce:b2:73:8b:ec:5d:a8:ac:c2:86:2e:
         7c:c6:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:09 2026 by rpki-client