Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File:                     xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier:          6cAWd0rmk6CDJEFSvXeHFs8t6KVVzzS4xVao1pp6xvo=
Subject key identifier:   EF:BA:FE:10:FC:B1:01:EF:3A:28:FB:F7:02:B0:CE:FF:48:02:69:AF
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       088B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number:          0875
Signing time:             Tue 24 Mar 2026 20:25:26 +0000
Manifest this update:     Tue 24 Mar 2026 20:25:26 +0000
Manifest next update:     Tue 31 Mar 2026 20:25:26 +0000
Files and hashes:         1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: jdRYrqF+FmjmyueHotHuVE2ew3vmMqgS4sh7Q+SJu4A=)
                          2: 15335506DD8C11F0AEC3F5743D6F56BC.roa (hash: DQNFdBFL+0TtFwrA9F0i05j25xzVKCNmCBUcl2do47w=)
                          3: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: b1xU0h3rTRtWCrtn7yfCOW/jNbAha05lM6/yu5ZuQQY=)
                          4: 15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (hash: 2uCbpjvfq4YvnddB40jrJriUX1Cml5veDQrnZl2hjsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: Mar 24 20:25:26 2026 GMT
            Not After : Mar 31 20:25:26 2026 GMT
        Subject: CN=69c2f336-f5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:60:6a:90:70:8a:f7:0e:7f:f7:38:d5:94:
                    78:f0:db:1d:2d:3e:df:da:d9:60:d6:f8:da:06:e2:
                    55:3d:d1:01:39:67:29:fa:c7:11:ae:29:d5:1f:d0:
                    00:27:f6:d0:01:02:00:2b:d0:56:76:4f:7f:94:ce:
                    ed:bd:e2:dc:00:b2:8e:b6:8f:da:3e:4f:ba:9e:f2:
                    1d:8e:02:70:54:94:6a:76:07:e0:4c:73:70:7d:1d:
                    ff:f7:be:4f:38:14:01:27:2f:d8:49:6c:23:f6:27:
                    63:11:15:13:c1:be:77:18:bf:12:1f:c5:cc:13:43:
                    8a:64:d4:3e:ef:09:91:a1:38:82:70:b0:6d:3f:78:
                    c2:7a:0a:be:88:8a:ba:28:ec:67:d6:3b:65:30:01:
                    20:50:8a:1f:25:a9:4c:00:0c:68:64:ce:64:8c:f6:
                    4e:30:d7:9d:3f:4e:fe:71:cf:6e:dc:e3:01:c7:a8:
                    89:b4:83:79:57:77:9f:6c:bb:33:29:f7:9a:72:e0:
                    21:22:aa:a9:ea:56:69:4d:2b:1d:22:18:c1:5d:ce:
                    4b:65:11:cd:93:8e:a2:3e:d5:ee:48:de:79:b3:3f:
                    ad:98:fa:fa:e9:54:a5:e5:e2:d0:bc:0c:aa:f2:0a:
                    6c:39:ce:d7:86:7e:b3:07:3b:3b:a1:11:f8:0f:aa:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BA:FE:10:FC:B1:01:EF:3A:28:FB:F7:02:B0:CE:FF:48:02:69:AF
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:94:eb:a1:08:08:5a:b4:6d:76:c1:69:4a:09:f1:1c:3a:
         75:57:11:25:dc:ca:40:c1:93:7f:d0:0d:4a:3c:ae:52:c7:a1:
         10:a0:b6:3f:56:67:cb:ab:4f:7d:c3:2b:b4:96:12:bc:bb:28:
         00:f4:04:de:ce:0d:3d:ee:b2:d5:16:25:89:1e:07:d3:28:71:
         71:5e:5b:ba:ff:70:c6:dd:e8:51:41:9a:75:5c:bc:5c:a0:75:
         20:42:a0:fe:72:22:a4:32:59:02:61:ea:d1:6b:ab:56:04:18:
         a8:0a:6c:d6:5d:5c:ee:61:18:69:13:79:08:c4:1d:09:7e:e6:
         20:da:e9:60:2c:62:1b:7c:7f:04:23:e3:21:8c:7d:a2:62:15:
         cc:9e:09:2c:6e:39:4b:93:b9:28:4b:bb:de:ed:5d:62:8c:37:
         f2:2e:db:89:d9:17:ff:b0:4c:64:19:6b:a4:2e:58:5d:d2:e6:
         f3:da:53:3f:6d:a4:41:2c:bf:07:54:2a:99:5b:b6:94:56:c5:
         cb:15:a3:64:85:b4:0d:4b:7f:02:fb:ca:34:ae:29:5d:03:d2:
         36:37:8b:7a:e1:7b:86:88:9c:fb:9f:e9:89:3f:d1:b0:28:0a:
         a1:73:2b:86:ac:b7:c7:f5:4c:41:33:12:fa:fd:04:15:ea:86:
         f9:c2:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:40 2026 by rpki-client