Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File:                     BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier:          ErXh/RWBI2gvWUJUJEKyf2Ehxg3no17hd/3qTTYPuXw=
Subject key identifier:   EF:21:55:14:F7:A7:96:76:3C:7C:F9:8C:B5:6F:B5:E9:1D:85:1C:03
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer:       /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial:       3523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number:          3523
Signing time:             Tue 24 Mar 2026 14:36:45 +0000
Manifest this update:     Tue 24 Mar 2026 14:36:45 +0000
Manifest next update:     Tue 31 Mar 2026 14:36:45 +0000
Files and hashes:         1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: niKzQwptFZu/YK74WK/b7MtgtoU9hpY4HwZmi77SfmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
                          rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13603 (0x3523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
        Validity
            Not Before: Mar 24 14:36:45 2026 GMT
            Not After : Mar 31 14:36:45 2026 GMT
        Subject: CN=69c2a17d-eddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:66:56:a1:13:74:a6:5e:aa:5b:c4:36:01:
                    fd:f6:92:7e:e6:1a:0c:c1:7a:bf:85:91:b0:81:f1:
                    1a:00:a0:0a:cc:46:2e:bc:d2:57:7a:06:4d:21:39:
                    b0:eb:8b:c2:ac:3c:d7:b4:c1:4c:90:82:84:fa:ef:
                    09:4f:62:57:c8:e2:8a:8c:2a:98:6d:3c:eb:1c:f3:
                    81:07:62:09:98:43:5e:22:f8:f6:0c:0b:17:a9:5e:
                    02:6b:91:c1:83:f3:5f:31:c4:70:83:76:f9:da:e1:
                    26:1f:7e:7b:23:cb:4f:0a:5f:d9:0d:08:01:75:11:
                    44:3b:4e:8e:9e:b3:3c:ee:92:25:95:da:37:80:95:
                    d1:68:ec:5d:5a:de:ff:77:c8:9c:5f:9f:4b:84:94:
                    d4:22:5b:61:23:83:fd:03:a3:e8:d2:53:6d:0f:61:
                    93:32:58:4d:99:ab:65:c2:03:9c:61:c6:8c:cd:02:
                    24:3b:0a:ca:ee:fe:c2:89:b5:09:f4:23:6a:cc:5a:
                    7d:79:38:f4:78:26:1f:62:38:92:c9:b6:17:16:f6:
                    2b:be:ab:27:df:00:b0:d6:a0:7e:32:68:5a:9e:d3:
                    31:64:62:84:12:7a:05:fa:55:77:31:37:96:01:f2:
                    d2:8a:d1:5e:d8:c2:c6:ea:14:b5:16:52:ea:63:ac:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:21:55:14:F7:A7:96:76:3C:7C:F9:8C:B5:6F:B5:E9:1D:85:1C:03
            X509v3 Authority Key Identifier:
                keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:08:99:60:47:c1:50:67:58:25:af:2f:a9:33:40:6a:6d:cb:
         16:76:1c:e0:43:22:50:ec:44:98:02:c3:01:4a:ea:74:f7:11:
         45:2a:23:3b:b9:ff:a4:1b:90:8a:de:b6:5a:22:7a:07:23:35:
         96:ef:31:58:22:b2:e7:86:43:19:65:36:01:a5:19:cb:9f:2b:
         b6:c5:a2:b4:59:a0:33:31:fc:6d:b0:be:24:17:ff:d1:b8:a4:
         52:25:8e:62:15:e8:82:1e:15:e7:b0:0a:eb:6e:d1:72:25:3a:
         b8:57:a3:4b:07:ea:d0:86:27:f2:89:c5:0c:c7:8d:3b:55:69:
         ed:e0:72:8d:26:84:b1:2a:72:d0:cc:43:5e:b5:64:c3:36:c7:
         80:14:8f:61:16:bf:a0:c0:fb:b0:a6:21:cf:50:95:80:23:9b:
         7d:8a:c8:0d:74:a8:42:67:9c:a8:c8:58:ad:67:76:7c:d4:cc:
         65:78:d1:87:4a:88:17:4e:23:39:ea:0c:54:4c:5c:b6:36:4b:
         50:fa:07:45:34:47:13:e0:7a:ab:9f:f5:67:9d:ae:6e:18:33:
         6d:e1:fc:bb:eb:2a:45:90:a5:7d:02:9c:89:75:15:1a:15:7b:
         65:27:f6:a0:2a:b1:3d:bd:0b:ea:c5:f0:34:f3:1f:ba:0d:9c:
         5d:c2:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:54 2026 by rpki-client