Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File:                     h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier:          RLlqqyxjQwlu9YRke8msE8xyo4SmKtN3YtwQRngj79c=
Subject key identifier:   1F:E9:80:54:A8:88:F0:56:2D:69:2F:BB:E3:7C:E3:AD:0F:5F:97:6B
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer:       /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial:       12DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number:          12B7
Signing time:             Thu 26 Mar 2026 17:02:13 +0000
Manifest this update:     Thu 26 Mar 2026 17:02:13 +0000
Manifest next update:     Thu 02 Apr 2026 17:02:13 +0000
Files and hashes:         1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: TMMg+oSWnDYQwbqa8pg3418iI2XcK//94HwfCQ6b4S0=)
                          2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4827 (0x12db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Validity
            Not Before: Mar 26 17:02:13 2026 GMT
            Not After : Apr  2 17:02:13 2026 GMT
        Subject: CN=69c56695-8ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:cf:78:7b:73:19:ce:9b:8c:a4:ff:66:82:
                    48:7e:30:ec:22:93:90:27:5a:92:2c:2b:83:f5:56:
                    f1:df:84:05:2a:13:3a:42:cf:df:bb:a9:36:eb:08:
                    0c:a3:8e:48:91:8e:ac:d3:ef:a2:89:75:43:19:34:
                    ae:70:2d:2e:fd:60:8b:a6:15:25:f0:f6:0d:e6:80:
                    5e:e3:7a:dd:5b:1d:af:dd:a0:f7:da:4a:92:e8:5b:
                    68:ed:93:09:b0:e9:26:ea:22:62:80:2b:c8:27:9d:
                    be:d1:08:b1:90:ec:82:80:f5:e2:52:40:38:41:c7:
                    e4:13:ba:19:45:ab:8a:f6:41:94:74:bb:f7:03:f4:
                    16:49:e2:73:81:42:c9:60:74:85:2a:6f:e5:39:91:
                    a3:3a:6e:3a:54:bb:c7:c4:50:34:ef:36:19:cf:2a:
                    b4:d5:46:ec:48:f4:91:fc:82:6d:cb:91:b4:77:07:
                    28:d5:63:e7:63:cd:fe:a8:65:c7:12:74:b6:80:28:
                    5b:29:3d:5c:4f:01:4e:a0:49:99:f9:98:f1:d5:1c:
                    0f:27:13:9f:16:65:74:71:f7:f3:f4:88:a3:92:b7:
                    29:8c:5a:30:ab:dc:6a:22:c2:a4:48:d4:c3:b4:a3:
                    ce:58:8a:88:d2:46:f5:9a:63:5e:93:4d:96:b4:83:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:80:54:A8:88:F0:56:2D:69:2F:BB:E3:7C:E3:AD:0F:5F:97:6B
            X509v3 Authority Key Identifier:
                keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0a:75:af:45:35:7f:2d:f1:6f:be:26:52:61:cc:c7:5f:99:
         78:23:69:f8:c7:43:c5:7a:80:97:10:73:b0:97:65:8d:7c:84:
         54:a0:4b:b0:81:04:90:28:f1:fc:28:45:1f:f0:59:e2:ec:62:
         7f:86:01:cb:a2:a2:2f:53:02:0b:1f:f9:2c:f3:52:93:c7:56:
         51:ac:eb:88:15:1d:03:2f:3c:72:85:97:fd:27:b0:bc:14:84:
         18:39:ed:32:86:7f:4a:fe:32:a7:bb:1e:69:45:d0:ac:ac:84:
         1e:b3:8e:5a:38:56:f1:e6:b7:ce:24:58:05:8c:32:93:74:7e:
         0b:3e:3d:60:4e:3b:2c:a4:ce:85:7f:5c:5a:dd:35:77:b0:94:
         96:b4:72:1b:d7:b8:cb:35:57:29:12:c7:2d:6f:c4:a4:4b:0a:
         34:cd:f4:58:bc:08:4f:9c:82:b2:79:2f:6e:41:41:b5:e0:ad:
         60:64:f4:4b:2e:c3:e1:fd:ca:cf:5e:35:87:9b:23:ab:8b:f5:
         00:81:d7:ea:f3:8f:41:1f:16:e6:07:59:36:ca:69:7b:16:53:
         23:b4:5c:8f:c7:bc:8d:bf:6d:71:a9:87:a0:74:e1:f7:14:0d:
         99:b2:6b:23:f3:28:f1:ab:14:17:f8:5e:60:c6:e9:35:d0:80:
         fc:d0:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:16 2026 by rpki-client