Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
File:                     40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json)
Hash identifier:          2xnnsmU0ckP5ZyCMXamVvtSGPhP+gD/En2LhA0QZa9o=
Subject key identifier:   0C:9B:A1:B5:F5:82:F6:51:22:9E:D0:1B:08:ED:CD:02:91:86:8D:45
Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
Certificate issuer:       /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
Certificate serial:       351F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
Manifest number:          351F
Signing time:             Tue 24 Mar 2026 14:39:55 +0000
Manifest this update:     Tue 24 Mar 2026 14:39:54 +0000
Manifest next update:     Tue 31 Mar 2026 14:39:54 +0000
Files and hashes:         1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: ZC1NGiZGeIB6lBhEupGJ3n9dseW55Iyk6TZc/bc91jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13599 (0x351f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
        Validity
            Not Before: Mar 24 14:39:54 2026 GMT
            Not After : Mar 31 14:39:54 2026 GMT
        Subject: CN=69c2a23b-06b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:fd:de:e9:27:05:ee:d6:40:10:ee:45:ad:
                    5f:cd:b8:2b:23:bf:4b:41:5c:5a:ca:0f:8c:3c:e3:
                    b7:7d:a0:18:62:c9:5c:2a:c0:1f:4c:fa:9b:af:a3:
                    3e:cb:cc:30:d1:e1:ae:a1:26:8d:e2:6a:a9:af:d2:
                    b3:db:c5:34:48:e8:f0:29:5e:66:a4:86:5d:b2:18:
                    2a:dc:11:80:46:ac:56:63:16:32:86:43:c7:7d:40:
                    07:cd:3a:a5:7d:15:17:17:6a:f7:db:69:6f:b9:45:
                    78:2b:88:ab:01:fe:b1:6d:cc:e5:a7:e3:2a:90:f0:
                    34:cd:e9:28:81:cd:2f:62:de:cc:3a:3b:5d:67:e1:
                    e4:8a:39:85:ed:bf:fe:05:5b:bc:65:d5:7c:96:b5:
                    32:bb:c3:83:76:0f:2a:79:7a:66:67:37:8a:f6:1d:
                    21:72:d5:57:c1:be:97:ce:f4:3b:9a:2f:ef:59:29:
                    49:e7:8b:c3:20:f0:d2:4a:a3:ed:82:61:53:bd:62:
                    32:30:da:18:63:0c:ef:0f:cc:4a:35:2c:d8:34:69:
                    b1:ad:0c:0e:41:f2:c8:2c:b7:0a:66:7c:bb:4b:e6:
                    29:bd:20:5f:24:7b:09:c7:e2:bb:99:af:5e:c5:39:
                    1a:be:45:7b:1e:b0:a7:f0:39:28:ce:da:a0:cc:44:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9B:A1:B5:F5:82:F6:51:22:9E:D0:1B:08:ED:CD:02:91:86:8D:45
            X509v3 Authority Key Identifier:
                keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:e8:b0:aa:62:a5:16:c0:1d:9b:a8:eb:ca:ca:5e:af:ac:
         24:81:54:d3:d0:a1:ff:16:6d:2d:9a:83:ff:46:77:ad:c3:c8:
         54:93:e4:01:7c:60:33:11:83:7f:19:d1:a2:ba:24:14:82:4b:
         ae:06:e8:10:21:8f:91:cb:43:e8:5e:27:f9:34:45:9e:1f:f8:
         a1:55:b4:11:0e:53:01:2e:0c:a8:51:5e:a0:49:1e:4a:30:11:
         a4:84:f1:ba:09:46:da:17:ed:b7:76:d6:f0:a9:f2:08:fd:c8:
         2d:e6:58:1a:cf:4b:4f:1a:d1:90:05:0e:c2:ba:d9:3d:9f:0c:
         db:1d:37:b1:13:b1:e0:09:47:b2:3e:47:d8:e4:9d:bf:87:1a:
         98:d7:b9:c3:3c:b0:30:15:64:a8:6a:13:86:4c:b0:3b:06:f0:
         04:6c:38:4c:33:d9:ac:33:fa:c4:23:80:55:9d:11:79:4f:9f:
         a1:a4:97:ec:8a:39:68:67:67:c5:e5:35:57:c2:b1:5a:24:2f:
         2d:d6:53:40:1c:66:e8:65:18:2f:db:d8:7c:d8:3f:3a:5b:0e:
         a8:26:22:0a:38:66:65:7e:81:a0:6f:4b:2f:4f:2c:62:3d:25:
         b5:c5:47:c7:81:12:f1:58:e1:22:e3:5b:bf:dc:ff:a2:8c:67:
         15:b7:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:11 2026 by rpki-client