Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File:                     rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier:          etG/xdw3Q455LHgvRPUeUwblWhBvxjDIVNAYPyfQokE=
Subject key identifier:   07:C9:4D:B0:F2:3E:10:BC:B9:87:BB:43:F4:EA:96:8C:00:99:14:1D
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number:          07C0
Signing time:             Tue 24 Mar 2026 21:10:24 +0000
Manifest this update:     Tue 24 Mar 2026 21:10:24 +0000
Manifest next update:     Tue 31 Mar 2026 21:10:24 +0000
Files and hashes:         1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: OhtUzmm9vTYogV1Csxj+0N0WaS9Gv0DYzVMJS1F34hI=)
                          2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=)
                          3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
                          rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Mar 24 21:10:24 2026 GMT
            Not After : Mar 31 21:10:24 2026 GMT
        Subject: CN=69c2fdc0-0502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:3a:f3:64:c2:08:a6:ee:4e:bf:32:44:0b:
                    87:43:19:84:fb:de:6f:ff:82:b1:c8:29:f0:c3:79:
                    fb:23:cf:b1:10:03:8b:0d:d9:81:2d:d6:9f:9e:9d:
                    05:3b:74:36:94:96:f1:84:17:60:37:1c:ac:21:5d:
                    64:8f:c3:34:bf:64:08:5c:08:f6:9b:26:f4:47:d3:
                    a8:53:46:6d:57:3e:3c:45:73:10:cf:ff:3a:a3:df:
                    dd:0e:ab:83:d8:13:4b:78:7b:eb:bc:05:2a:a6:dd:
                    ce:9d:88:f2:12:fa:4a:68:aa:b6:ba:32:1f:95:0b:
                    8b:98:61:40:70:a7:bb:cd:5e:79:41:71:fc:78:38:
                    c3:aa:cf:e7:53:25:b1:8c:4e:e7:ee:97:3b:50:1e:
                    d0:14:e3:f7:c3:01:b4:bc:27:15:42:79:8c:b7:5b:
                    7b:84:ae:9f:51:08:67:60:ed:66:c9:a0:8d:2d:d5:
                    f9:37:5d:87:c5:18:f0:27:a6:0d:bc:f0:66:d3:7b:
                    b6:9d:ed:38:d2:0b:73:ca:8b:f2:a8:26:9b:81:bd:
                    c9:4a:0d:98:75:7e:a0:12:4b:56:1c:0f:84:6c:68:
                    50:92:1d:34:9d:ca:e6:94:0f:30:51:1e:32:a7:77:
                    d7:62:f8:33:23:84:de:b7:98:25:4c:67:c6:a3:8d:
                    09:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C9:4D:B0:F2:3E:10:BC:B9:87:BB:43:F4:EA:96:8C:00:99:14:1D
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:db:c7:18:d7:ae:0c:be:b4:20:06:ce:15:b0:9f:24:b4:25:
         48:5e:cc:cb:fd:70:0b:04:36:a2:3f:a7:74:8f:c6:62:16:f4:
         e4:51:75:ae:fd:86:e3:78:9a:ee:85:6b:7f:c0:a6:ab:a1:d7:
         f2:21:1e:12:7e:96:d9:15:19:f3:46:9d:21:1f:1b:ff:32:a0:
         e2:db:a4:ef:2a:1d:7f:a2:23:a3:0e:ed:ea:b7:8b:e3:8b:d3:
         0f:39:9d:8b:70:a3:34:18:6c:ae:c4:6d:9a:79:bc:70:66:21:
         5f:ab:a9:fb:e7:58:c0:d0:f2:af:35:19:3a:c5:69:b5:e7:ba:
         5e:93:71:5c:f8:83:95:56:81:62:7c:14:e1:de:5a:bd:39:2b:
         61:a7:32:74:04:9b:28:05:32:5f:3e:51:ed:e0:ff:4e:c8:a3:
         7a:be:90:a3:f6:cc:8b:3c:8f:fa:86:2d:7b:fb:45:cb:d7:71:
         db:ec:98:88:a8:80:c9:ab:c9:22:15:1e:bb:df:d9:de:4f:7a:
         54:f0:83:68:3e:94:a7:ce:91:b0:96:fa:65:06:70:b6:fd:f2:
         b0:51:04:4f:82:d9:f6:99:1d:97:94:fb:bb:fd:21:92:04:52:
         33:b7:1a:34:06:c9:49:d4:1f:1d:06:cc:f4:af:30:ca:32:af:
         89:1d:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:15 2026 by rpki-client