Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
File:                     svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json)
Hash identifier:          HFqtO7dUNQ03BHxJQfBoF9gkifueZLWwzx7QH+6HoQ0=
Subject key identifier:   72:E4:08:E3:CA:BD:57:C8:75:18:47:63:0B:0D:3B:06:66:B6:17:A5
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Certificate issuer:       /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial:       0464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
Manifest number:          0456
Signing time:             Tue 24 Mar 2026 23:53:10 +0000
Manifest this update:     Tue 24 Mar 2026 23:53:09 +0000
Manifest next update:     Tue 31 Mar 2026 23:53:09 +0000
Files and hashes:         1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: wFt4lxYj7V4voCHc8Ix/wjBp+ut7EUx2663AxSG0uGQ=)
                          2: C5B008F2E19211F09AA40CD1456F56BC.roa (hash: v/uYO1obaTTcY8Dn10CKOuvFJ4ozleO37cDiIW7WoAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
                          rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
        Validity
            Not Before: Mar 24 23:53:09 2026 GMT
            Not After : Mar 31 23:53:09 2026 GMT
        Subject: CN=69c323e6-696f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:75:d8:39:0f:07:dd:ae:93:a9:48:cf:39:
                    6f:06:21:df:cc:53:8e:f9:d5:2e:88:d3:9b:44:f5:
                    4e:81:fd:83:25:a3:49:65:84:6f:d1:3a:46:35:28:
                    d2:44:05:ae:cd:0f:fd:bb:4f:08:80:e9:04:24:ae:
                    f6:bb:f9:44:84:e8:bc:c4:70:86:c3:49:e3:37:c9:
                    0e:be:5f:32:22:8d:e2:7e:86:1d:aa:11:2b:8f:46:
                    90:90:a8:98:ef:b0:20:07:5d:ad:b3:bd:02:0f:13:
                    51:70:98:09:35:49:7e:df:13:72:7d:f0:5b:34:50:
                    b9:b8:6a:b1:da:ab:9f:81:db:47:44:47:48:64:70:
                    d2:b4:de:b6:74:42:56:a5:17:48:b7:30:5f:3c:70:
                    bb:9e:cc:e8:9e:96:af:c4:db:4c:97:44:b8:20:09:
                    7f:ad:f9:ce:8b:fd:2d:78:f9:d9:76:59:e5:8e:37:
                    f8:ba:63:73:40:17:f3:3c:e6:56:3b:4c:c5:c1:6b:
                    c9:d8:15:27:d5:38:dc:2a:5d:b3:c5:23:74:fa:05:
                    e4:a6:e5:d4:f3:95:32:c4:20:8d:12:23:b1:fc:d5:
                    72:7a:d8:b3:e3:9f:ba:b9:3b:8c:ce:66:07:d4:8d:
                    07:ce:88:16:34:0b:f4:9a:d1:6f:72:71:6f:d9:d5:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E4:08:E3:CA:BD:57:C8:75:18:47:63:0B:0D:3B:06:66:B6:17:A5
            X509v3 Authority Key Identifier:
                keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:21:09:1c:1d:1d:6b:26:8f:a9:a9:5c:7e:73:cb:b9:0a:66:
         9d:d7:bb:4b:a9:f6:f7:90:1c:db:fc:5b:e2:cc:39:7f:c0:49:
         71:fe:12:b3:14:96:39:15:25:2f:b0:33:f2:85:64:4f:ec:08:
         ad:ad:16:3a:b3:91:ba:85:46:cb:22:a4:e1:4e:80:c2:ac:46:
         84:b8:3e:d9:7e:89:3b:ab:39:1b:56:5f:a1:af:89:31:5d:5e:
         b1:28:94:81:31:da:64:c1:f0:50:9f:4e:51:5c:e1:bf:ec:24:
         5b:cc:82:f5:50:ae:01:e9:f6:e1:4c:28:fc:cf:af:69:02:db:
         43:f4:75:2a:ba:e4:ed:f0:95:68:53:db:a9:b8:34:f6:a3:57:
         68:b0:23:65:54:0c:6a:8c:fc:85:d7:96:e6:b4:be:87:7d:4a:
         04:3a:09:da:a2:3f:b0:a2:78:a7:a0:21:7f:aa:d1:3c:c9:17:
         8a:82:da:99:11:b2:1e:17:ed:e5:95:96:ed:eb:8e:9c:98:75:
         b2:f0:47:9e:f3:32:62:d6:a8:fb:a5:4c:5b:93:3e:7d:14:d7:
         41:a1:33:b3:cf:21:85:b5:97:fb:fd:1c:70:46:ec:32:f7:5b:
         58:a6:5a:cb:68:0f:d7:21:c4:13:de:78:9a:cb:65:42:da:18:
         3d:3e:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:27 2026 by rpki-client