Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          nAHkb4qKNP7GjhTnjuZE4HNl1hFsU7xA+yxYCEfZqzE=
Subject key identifier:   B5:95:69:4F:2C:33:98:CE:95:88:47:F0:1C:58:5B:3B:53:18:3E:EB
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          023A
Signing time:             Wed 25 Mar 2026 02:09:54 +0000
Manifest this update:     Wed 25 Mar 2026 02:09:53 +0000
Manifest next update:     Wed 01 Apr 2026 02:09:53 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: 8un6GuojJPRz/y8zfrFVvDMcOSkngke/X1x8t6s97A8=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: PqNvfbRLyco5a9RhaHkkNm2oi3tb60/ILnGkaMT+6FY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Mar 25 02:09:53 2026 GMT
            Not After : Apr  1 02:09:53 2026 GMT
        Subject: CN=69c343f2-b23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:3f:ae:21:c4:12:6f:7d:bb:b8:bc:bf:4c:
                    ea:a3:de:71:d5:e9:21:9e:f6:c7:81:92:15:4e:1b:
                    30:bf:a5:f4:f1:c4:ae:a1:2c:9a:b4:2e:70:0e:0c:
                    09:93:33:f8:f4:23:f6:8f:aa:1e:ba:7f:ca:50:93:
                    de:6c:19:97:ff:4a:89:ce:ab:45:9b:bb:f4:cc:30:
                    bf:83:81:28:26:de:46:7d:33:ba:77:4d:7d:64:4e:
                    c8:5e:69:61:a0:ad:dc:9d:5e:be:64:c0:d9:3d:c0:
                    f1:8a:37:0e:19:34:63:63:d0:ee:7c:72:92:51:bb:
                    26:2e:9e:8b:bf:5e:d1:35:81:fe:d4:d9:fb:93:d1:
                    3d:53:1e:0d:d8:4c:d6:0d:5d:0b:71:09:ec:88:58:
                    60:10:4b:b5:02:ff:2a:c0:25:06:24:73:c1:26:b8:
                    07:13:ed:d2:9d:ad:8a:a5:04:58:2c:3a:da:f2:23:
                    43:66:24:09:12:7e:02:98:6d:44:f2:98:da:f4:8c:
                    85:89:10:49:bd:f4:3b:5a:4b:4f:a2:8f:e6:ca:a5:
                    e9:b9:07:31:7a:b7:86:13:60:f9:26:87:b3:41:c2:
                    2e:1d:15:39:24:54:5a:38:54:b1:72:ee:e1:2c:2d:
                    6c:70:3c:ea:20:cc:cb:ab:25:ce:3b:01:39:fd:c7:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:69:4F:2C:33:98:CE:95:88:47:F0:1C:58:5B:3B:53:18:3E:EB
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:91:76:c0:af:80:ec:b0:32:b1:cd:38:9e:15:3c:9e:c9:cb:
         8f:b1:52:f4:f3:77:49:3d:da:5d:5e:5f:40:53:ab:17:85:4e:
         b4:c6:f1:1d:63:79:f1:7e:4c:b4:ba:55:8b:b5:ac:f1:87:36:
         1d:05:bd:65:cc:ca:eb:a7:ae:d1:25:d3:07:cb:30:e0:6b:03:
         6e:b6:e3:51:0c:a8:c3:32:7b:51:32:60:b7:dd:52:88:b8:c4:
         a0:d2:11:59:08:58:56:ba:23:fb:1c:36:05:b2:4e:02:e4:7d:
         ab:a9:af:83:f7:0b:83:91:80:5a:e9:52:39:e0:cf:5e:55:e1:
         59:69:41:9f:81:c4:4f:1f:2b:d8:bc:e4:3c:60:f0:00:25:47:
         78:1e:0c:be:d3:ee:61:c2:f1:8f:3d:ce:14:f5:fc:f0:2a:db:
         d8:17:c5:cf:3b:fe:7a:b4:1d:49:37:9c:15:e0:f9:4f:80:36:
         ce:bc:19:4c:d5:83:97:13:b2:f4:31:73:d0:42:94:b8:3e:55:
         65:26:06:97:2f:6d:ce:94:a5:fc:15:3e:0e:1d:70:d0:66:54:
         49:48:53:91:75:29:47:90:a0:a9:e1:80:70:96:13:4f:78:13:
         6a:20:ec:4b:7a:0b:7f:68:f8:13:dc:da:18:1b:52:ac:f0:b6:
         79:00:4c:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw
RDU5MjNCNjEwHhcNMjYwMzI1MDIwOTUzWhcNMjYwNDAxMDIwOTUzWjAYMRYwFAYD
VQQDEw02OWMzNDNmMi1iMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6bE/riHEEm99u7i8v0zqo95x1ekhnvbHgZIVThswv6X08cSuoSyatC5wDgwJ
kzP49CP2j6oeun/KUJPebBmX/0qJzqtFm7v0zDC/g4EoJt5GfTO6d019ZE7IXmlh
oK3cnV6+ZMDZPcDxijcOGTRjY9DufHKSUbsmLp6Lv17RNYH+1Nn7k9E9Ux4N2EzW
DV0LcQnsiFhgEEu1Av8qwCUGJHPBJrgHE+3Sna2KpQRYLDra8iNDZiQJEn4CmG1E
8pja9IyFiRBJvfQ7WktPoo/myqXpuQcxereGE2D5JoezQcIuHRU5JFRaOFSxcu7h
LC1scDzqIMzLqyXOOwE5/cfTPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWVaU8s
M5jOlYhH8BxYWztTGD7rMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF
MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF
X0lQSWlDb0NWNTBOV1NPMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdJF2wK+A7LAysc04nhU8nsnLj7FS9PN3ST3aXV5fQFOrF4VOtMbxHWN58X5M
tLpVi7Ws8Yc2HQW9ZczK66eu0SXTB8sw4GsDbrbjUQyowzJ7UTJgt91SiLjEoNIR
WQhYVroj+xw2BbJOAuR9q6mvg/cLg5GAWulSOeDPXlXhWWlBn4HETx8r2LzkPGDw
ACVHeB4MvtPuYcLxjz3OFPX88Crb2BfFzzv+erQdSTecFeD5T4A2zrwZTNWDlxOy
9DFz0EKUuD5VZSYGly9tzpSl/BU+Dh1w0GZUSUhTkXUpR5CgqeGAcJYTT3gTaiDs
S3oLf2j4E9zaGBtSrPC2eQBMxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:08 2026 by rpki-client