Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
File:                     AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json)
Hash identifier:          1hrG3luIpuBr8Ng9zBuLXA68knYSXY7xEV49tL76934=
Subject key identifier:   7D:67:F3:0E:4D:E6:16:BF:D1:5D:F9:19:DE:A3:84:1D:BE:C0:57:76
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Certificate issuer:       /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial:       2465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
Manifest number:          2434
Signing time:             Tue 24 Mar 2026 15:44:13 +0000
Manifest this update:     Tue 24 Mar 2026 15:44:13 +0000
Manifest next update:     Tue 31 Mar 2026 15:44:13 +0000
Files and hashes:         1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: Dedk8O3hogU5crJMaRFzn3Wu6FgAPQO88c1hqJF20Qg=)
                          2: 32B76C00562411E79589C739C4F9AE02.roa (hash: UhOsRuv328ibsD6Eq+bltfZ6G75BexkhspAPfUdHDZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
                          rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9317 (0x2465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
        Validity
            Not Before: Mar 24 15:44:13 2026 GMT
            Not After : Mar 31 15:44:13 2026 GMT
        Subject: CN=69c2b14d-eac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:72:ea:1c:04:54:15:63:11:2b:20:76:fe:
                    84:26:08:bd:83:9a:ec:7f:69:26:1a:cb:8c:ff:8c:
                    fe:f5:c4:ee:4e:7a:b4:e8:90:39:84:ed:93:8d:21:
                    a4:fd:77:07:9f:20:5d:5c:5a:84:ea:51:ee:f1:4c:
                    de:26:ab:13:f1:b7:a4:f2:3f:e4:ac:2c:53:b9:00:
                    a9:e3:99:1d:29:6a:c2:2b:00:59:3e:e9:b5:cc:35:
                    0e:95:5c:d1:ab:9b:7c:70:f0:03:b0:62:77:ee:04:
                    92:85:fc:cd:f5:84:11:85:29:79:66:d3:76:46:cb:
                    fb:a4:af:1b:16:8b:8d:44:5f:12:77:0e:be:72:54:
                    69:6f:3e:45:85:4a:5a:40:9f:09:75:48:97:d0:f5:
                    89:2d:43:69:ae:82:4e:67:48:fd:23:b0:0f:84:70:
                    c8:90:0f:d8:ef:4e:76:75:5f:37:3d:f5:e3:a6:43:
                    8d:59:5e:09:4a:30:03:91:06:90:87:1c:42:60:f5:
                    10:cb:00:db:2a:29:c1:57:80:17:d0:40:5e:85:ce:
                    47:ef:dc:c8:d8:6b:89:58:a9:0f:b8:df:d1:11:be:
                    b7:9c:4d:0e:bc:60:86:38:01:97:b6:ec:73:de:2e:
                    2f:0c:f7:ae:7d:27:82:99:d9:7c:58:81:3b:14:66:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:67:F3:0E:4D:E6:16:BF:D1:5D:F9:19:DE:A3:84:1D:BE:C0:57:76
            X509v3 Authority Key Identifier:
                keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:2c:ba:3e:f0:16:59:65:bc:26:4b:03:fe:28:d8:83:c8:
         ba:c9:c5:3d:8a:25:4c:1c:7f:49:06:50:8e:85:b7:46:f2:95:
         3c:92:a3:6d:2c:67:7c:f4:b1:b5:2c:9e:92:7c:db:ee:29:95:
         03:1e:19:8b:55:3d:45:29:90:6e:fb:f1:61:bd:ca:65:8d:ab:
         b1:ea:b7:1f:49:ed:71:c3:75:4b:01:1e:fa:7b:1b:a9:85:41:
         4d:9b:40:e8:8e:6b:66:1c:17:bf:4f:18:74:48:aa:f8:8c:a4:
         9e:96:2d:74:24:90:ef:ea:54:b5:11:5f:1e:e0:dd:0d:4e:32:
         8e:85:66:65:e2:74:4d:9e:37:3a:b1:4a:e9:91:67:f2:53:3a:
         1b:3f:84:7d:5c:02:f5:c0:26:3d:fa:fb:16:37:9f:e7:ef:c5:
         2c:e1:90:4d:2a:da:5d:19:58:ea:b1:a2:37:88:f4:e4:e0:9b:
         c0:36:a2:af:d2:ba:43:eb:5f:f4:8b:b6:d0:3d:0f:06:bd:db:
         0b:3c:99:a2:b9:4d:86:52:2c:bd:89:58:f0:31:33:e0:f9:64:
         10:4b:47:23:5e:ee:6c:99:fe:20:c6:d2:40:91:33:bc:91:96:
         95:e4:4a:32:af:4b:41:44:1d:af:68:f7:f2:97:3d:35:4b:bc:
         2c:73:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:14 2026 by rpki-client