Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
File:                     sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json)
Hash identifier:          zMV8PrhMNgarvABWcBgjwK2Hdq258anHnTjs0cA8hT8=
Subject key identifier:   DE:D9:D2:72:83:F2:94:E9:B2:EB:38:88:77:3B:53:AF:58:70:F6:64
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0BAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
Manifest number:          0B9F
Signing time:             Tue 24 Mar 2026 18:53:52 +0000
Manifest this update:     Tue 24 Mar 2026 18:53:52 +0000
Manifest next update:     Tue 31 Mar 2026 18:53:52 +0000
Files and hashes:         1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: kLt+l/KgFOwL7VbckvRW1rlQKy4DkIMFe10vtWJr31M=)
                          2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: vvOXur+AhOcfPnHC8rWZ286jK7+A7t0TjDADfDTLUAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2989 (0xbad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: Mar 24 18:53:52 2026 GMT
            Not After : Mar 31 18:53:52 2026 GMT
        Subject: CN=69c2ddc0-e7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:1f:36:2c:78:ec:cc:b6:f0:32:b7:7e:98:
                    68:b9:0a:87:9c:39:10:a4:3a:c1:d1:2a:1d:d6:97:
                    a5:ed:f7:2c:a1:2b:1f:e7:d7:dd:45:b2:66:c2:69:
                    c6:26:ec:0a:48:1a:fd:d7:e8:c1:c3:16:30:bc:14:
                    1a:33:d1:c4:d7:86:a4:59:69:cc:5d:5e:68:66:cd:
                    fe:45:c6:ef:1f:38:7b:21:52:18:5f:92:a8:b7:80:
                    c2:64:96:6b:8e:ab:cc:c7:a7:c4:85:ba:a5:4d:92:
                    27:6d:81:70:11:f5:fd:d1:f2:28:ab:03:e0:42:e5:
                    69:e9:37:99:14:50:b8:7c:1d:9d:02:0b:71:46:63:
                    c8:b7:62:79:68:f7:c0:2e:e0:18:76:0b:e0:6a:53:
                    a7:79:03:20:de:b5:be:bb:57:92:99:32:43:d1:9c:
                    25:24:87:a4:8e:30:73:14:ff:2d:62:14:9b:9d:3d:
                    1d:9d:6e:79:a9:ad:1d:17:94:f2:8d:52:57:18:f0:
                    2e:3c:b9:6d:b9:7f:94:73:c0:30:05:25:b8:15:62:
                    41:03:7e:5a:12:32:f8:c1:1e:49:7e:cd:ab:ed:10:
                    dd:fe:c1:d8:8e:05:8a:38:c8:6d:25:b0:f6:2f:c0:
                    ec:f2:31:c9:91:77:ef:f9:74:73:43:aa:7f:4a:96:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D9:D2:72:83:F2:94:E9:B2:EB:38:88:77:3B:53:AF:58:70:F6:64
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:2b:60:fd:9c:7d:8e:2d:aa:a7:22:44:e0:5c:14:bd:b5:
         f9:ed:0f:60:60:a4:3e:ad:02:da:e1:0a:0a:01:3f:4b:6a:20:
         19:6b:27:79:35:80:79:b1:b7:a3:bf:12:3e:5e:59:e9:84:07:
         06:b2:48:77:23:44:67:3d:59:8f:a8:00:f6:ab:f7:06:fa:3e:
         2b:79:88:47:a6:6a:ee:34:bc:7c:0c:e7:62:a4:5e:86:72:db:
         09:a9:17:bb:17:9b:f8:27:97:9f:c9:8b:4b:3d:0f:da:ad:2d:
         c6:cd:ec:98:f7:da:a1:fa:05:31:c4:65:68:3a:67:2c:cf:a9:
         54:3e:a9:a1:1f:e7:bb:67:21:c9:35:18:1c:a8:4b:2a:5d:35:
         34:07:63:c0:c5:d6:cf:2d:19:ac:4e:67:4c:eb:b9:3a:6b:1e:
         9c:36:4a:f2:8a:3d:b3:0b:d7:a9:5f:cf:31:ba:41:87:6d:be:
         3b:12:0a:43:49:60:b9:c7:44:1b:83:cd:d5:73:b4:73:04:54:
         4b:b6:d9:e6:8c:bc:cc:71:c2:85:7d:eb:19:22:e5:97:6c:aa:
         91:b7:7c:b9:4f:7e:e0:e3:be:12:7c:05:5a:ee:1c:5c:17:ea:
         c5:82:58:ab:c0:f6:c3:b5:2c:86:60:cc:e6:6a:6e:39:c6:84:
         01:92:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:32 2026 by rpki-client