Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File:                     cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier:          SVcF+o1Ke0UI6e0duYIcJmUQbDbMrr6zbJPOgEbhoL0=
Subject key identifier:   7C:B9:BA:29:40:FC:89:53:28:FB:00:FD:06:50:FB:16:88:2D:24:CD
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer:       /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number:          03
Signing time:             Wed 25 Mar 2026 08:26:01 +0000
Manifest this update:     Wed 25 Mar 2026 08:26:01 +0000
Manifest next update:     Wed 01 Apr 2026 08:26:01 +0000
Files and hashes:         1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: qBk0B14ZWVmA3bmfubOcZp4hsRxVoZfi/CZ1adUdI8U=)
                          2: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
                          rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
        Validity
            Not Before: Mar 25 08:26:01 2026 GMT
            Not After : Apr  1 08:26:01 2026 GMT
        Subject: CN=69c39c19-88d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:d8:0b:8c:05:b3:2c:33:33:9c:88:5a:10:
                    02:1f:14:2e:94:dd:bc:e4:b2:5d:23:7b:df:99:f8:
                    1e:1d:fa:4f:e2:a1:e4:3e:4a:dc:06:65:b7:bd:da:
                    eb:3f:d6:81:3a:45:97:f1:b8:31:34:36:f3:28:94:
                    94:bd:18:d0:a6:f7:e0:82:29:f6:83:fa:2f:b5:c6:
                    ed:e4:68:b0:cf:c0:fe:fc:f3:6a:3b:8b:9e:eb:a2:
                    17:22:cf:05:ce:eb:38:5d:23:ee:6f:08:9c:69:3e:
                    2e:56:4e:f1:21:2b:f2:42:a6:9b:2a:06:ec:24:ba:
                    38:b8:51:0b:d2:0b:0d:b2:89:a8:70:4d:97:92:90:
                    cc:c0:15:0a:1c:8d:54:7d:20:ad:54:13:9d:a2:9b:
                    82:76:98:74:24:f1:c5:d1:eb:b5:0c:49:f9:64:a2:
                    c0:e6:1c:e7:cd:1c:61:41:1b:1e:8b:b3:84:00:bb:
                    51:cd:f7:a3:37:e2:32:b2:bb:63:44:14:4f:e1:38:
                    c7:48:d4:4f:f9:9d:a9:69:cd:97:f2:4b:ad:3b:6e:
                    96:8f:cf:d7:c7:5f:0a:ee:d4:dc:a2:b0:c2:e2:93:
                    f5:b0:57:0a:5d:d5:81:80:ca:fc:28:b2:54:86:be:
                    54:66:2a:b2:3c:35:a6:6c:dd:7c:02:d7:f6:9d:3f:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:BA:29:40:FC:89:53:28:FB:00:FD:06:50:FB:16:88:2D:24:CD
            X509v3 Authority Key Identifier:
                keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:bb:37:3f:c2:c1:ec:6b:bb:ba:9e:dd:66:83:bd:f8:3d:
         43:aa:dd:6c:8f:4f:17:65:7d:71:23:b2:be:e2:9f:1a:b0:05:
         62:7f:ed:5d:95:5a:66:3b:36:3a:4c:32:76:87:d9:84:ac:b8:
         a4:49:a3:46:e8:84:fd:3c:10:a8:9e:5f:25:69:19:64:43:58:
         90:a6:e5:72:62:c4:42:74:76:bb:39:ff:9f:a2:53:f6:ab:85:
         c2:41:b2:bf:f4:3b:9c:4a:08:f7:19:e7:7d:05:78:b4:20:b4:
         9c:d9:28:e5:ed:06:4b:28:0a:bc:70:fc:5e:fb:eb:89:4d:24:
         36:bf:74:f3:b5:4f:09:a5:4f:e5:0f:53:4f:15:5c:fc:63:bc:
         15:38:9e:fd:ea:5e:96:1f:9e:e8:ff:62:43:6f:11:fe:2b:35:
         f9:ef:c4:ad:92:9f:35:e3:fd:42:c4:52:68:89:58:32:45:35:
         cc:54:61:4c:42:7a:30:1b:16:95:ca:82:4f:7b:dc:13:2c:b5:
         f6:32:9c:45:f1:27:83:3d:b8:2b:5a:c4:9f:3a:a7:fb:a1:02:
         68:4b:af:4d:4f:a5:e9:00:92:56:2e:47:bd:35:1c:62:9f:96:
         e4:79:22:7d:e7:03:2c:0c:e3:cf:34:06:40:c1:f6:55:62:58:
         55:85:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:12 2026 by rpki-client