Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File:                     Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier:          QsmcqnFH4r8fKW1rjMHUi/L06sQiMtrW58m7TtsXDGo=
Subject key identifier:   D8:11:85:00:EE:F8:39:8C:74:E7:4A:CB:33:33:A8:1A:56:70:4A:CD
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer:       /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial:       2487
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number:          246F
Signing time:             Thu 26 Mar 2026 15:47:42 +0000
Manifest this update:     Thu 26 Mar 2026 15:47:41 +0000
Manifest next update:     Thu 02 Apr 2026 15:47:41 +0000
Files and hashes:         1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: 9A8zbhJ6gqIcQw9E52NldVZTtZGo/8FwNzlpu+Iht+E=)
                          2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: kE6e/2uyAi3HKTrQshUdCns+fLTS/L8pSxDJFAPtMig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
                          rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9351 (0x2487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
        Validity
            Not Before: Mar 26 15:47:41 2026 GMT
            Not After : Apr  2 15:47:41 2026 GMT
        Subject: CN=69c5551e-bb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:7f:d3:15:ce:3f:f9:29:21:ae:99:bc:aa:
                    21:85:2a:d2:07:62:34:7c:e2:04:19:48:3a:5f:bf:
                    fb:f7:b0:12:d7:8c:9f:80:7f:32:aa:bf:0a:88:13:
                    81:f3:2f:9a:35:7e:57:f4:7b:44:79:1c:17:8f:8a:
                    0a:5a:33:1c:ed:66:92:c5:db:11:84:a5:8f:90:a0:
                    93:ec:ac:38:39:b8:ef:4b:a5:8e:b8:ee:89:70:8b:
                    9e:c5:aa:b2:b3:af:1e:8b:19:1a:ce:be:7c:d1:63:
                    6a:85:7d:3a:d4:3d:61:89:95:2b:2d:39:8d:89:bb:
                    9a:78:00:76:3e:d1:69:52:b0:72:d1:29:ea:ed:59:
                    f8:4f:48:b2:9c:1a:fc:a5:7a:5a:8d:34:c6:8a:25:
                    8f:ef:b9:13:fb:a2:0f:1b:e0:b9:a7:6e:db:8f:80:
                    b9:be:33:d9:0b:85:87:d8:03:3c:62:bb:e0:82:91:
                    72:0a:79:36:67:ba:99:f4:40:a4:13:4f:64:2f:52:
                    28:ef:5e:2d:29:a7:60:73:a4:17:3e:71:78:21:94:
                    42:ed:c5:a2:d8:46:cb:93:84:bc:b9:c4:85:2e:29:
                    48:4d:e1:32:8d:f9:6b:30:05:65:b9:7f:ab:46:4d:
                    14:c6:d7:76:72:19:07:fe:29:e5:f5:c7:5d:0e:cc:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:11:85:00:EE:F8:39:8C:74:E7:4A:CB:33:33:A8:1A:56:70:4A:CD
            X509v3 Authority Key Identifier:
                keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:23:96:a4:56:8e:61:77:0b:2f:60:4b:b6:c3:27:8c:e8:
         4f:ed:7f:37:9e:6b:3b:0a:c0:d9:71:c9:62:dc:a8:32:f0:8d:
         6d:7a:83:f3:4d:e1:cd:97:ff:0a:00:7d:f0:6d:7f:db:f1:c7:
         16:9e:2b:fe:9d:89:8c:52:58:a7:09:be:ec:73:9f:a6:ce:87:
         16:12:2e:22:8a:97:b4:9f:5b:0d:94:d9:9f:c0:a8:bf:8d:c6:
         27:52:92:50:f6:be:49:cb:d8:cb:8e:f6:f0:38:1f:5f:40:ce:
         c0:a4:d4:fa:b7:cf:0e:d0:b2:f1:3d:b1:1c:fb:ae:7e:88:86:
         6e:d5:79:f1:91:11:41:9b:c2:0f:aa:93:58:ee:f4:db:94:37:
         c9:1e:23:e8:a9:68:8b:f5:a6:fc:14:32:2a:9a:42:eb:4f:fa:
         23:d5:ae:56:97:15:79:15:eb:72:e0:56:f3:c8:00:13:c7:ca:
         a6:fc:ca:46:87:d8:33:ef:63:57:ec:14:66:c1:f5:88:8b:25:
         39:d4:b4:0f:d9:35:8c:f3:f0:77:76:6b:24:e5:88:20:d9:d6:
         14:25:aa:b3:12:d9:ae:20:5a:05:31:9b:8c:21:40:d9:46:b3:
         ac:8a:b9:d2:db:15:8a:56:32:cb:82:92:f6:4c:25:3b:c6:4c:
         3c:ae:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:49 2026 by rpki-client