Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
File:                     s02Q9DN0N_l3bvB0le1r-joN4rI.mft (raw, json)
Hash identifier:          C/1mJdArm9DsfM3JnrkpWXbUEaNST0ueDZyNYPdJc6U=
Subject key identifier:   D3:5F:D0:40:E6:17:4A:FC:5D:60:9D:1D:21:F4:16:0D:A6:24:15:EC
Authority key identifier: B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2
Certificate issuer:       /CN=A9182509/serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
Manifest number:          34
Signing time:             Wed 25 Mar 2026 07:51:21 +0000
Manifest this update:     Wed 25 Mar 2026 07:51:21 +0000
Manifest next update:     Wed 01 Apr 2026 07:51:21 +0000
Files and hashes:         1: s02Q9DN0N_l3bvB0le1r-joN4rI.crl (hash: owVebRwnF2elC5/CwFC5nCPRKCNzFODYaYZuTFX6k6U=)
                          2: BE29D45EE48611F0890F621E446F56BC.roa (hash: hKsoH8oLZIQOc0nbhGD9YegDajB0Xhwk9YbaG8Vcg5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
        Validity
            Not Before: Mar 25 07:51:21 2026 GMT
            Not After : Apr  1 07:51:21 2026 GMT
        Subject: CN=69c393f9-134d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:24:d2:f7:1e:56:cf:56:45:3b:48:8d:c8:7e:
                    bb:76:c4:57:b9:bb:58:f8:21:f6:b5:ed:7b:cd:b2:
                    75:ff:64:6d:85:e6:55:8e:79:4d:7f:b3:a8:dc:05:
                    31:e9:f8:b6:18:38:4c:2c:7d:ac:19:6a:0c:08:0d:
                    64:53:31:5e:8d:84:9b:5e:38:aa:42:8a:9e:d6:a8:
                    f0:ba:5a:b1:59:25:e1:38:1f:4c:cb:d7:b8:fa:3d:
                    56:53:72:a9:1e:3d:4b:82:8a:59:9d:6a:8a:a1:ae:
                    e5:28:c4:17:af:b8:6f:83:06:d6:d2:21:a9:35:31:
                    16:e4:d6:c9:a5:ef:cc:8d:a1:f0:33:f3:a5:91:d4:
                    d2:c2:4e:04:24:b0:36:40:61:63:c2:fb:e7:b7:b4:
                    bc:b3:01:b6:fc:00:08:bc:6d:d3:39:f0:66:a0:fd:
                    6f:9a:5f:11:21:30:72:d4:52:59:5c:90:41:db:a4:
                    99:ea:ba:6e:b4:e8:5e:a9:da:2c:99:ee:41:ef:e3:
                    b8:90:1f:70:6b:60:d8:ae:7f:6f:e4:90:99:1c:fa:
                    a0:aa:0b:c0:b9:84:49:d8:5b:0e:41:a0:9a:77:56:
                    51:42:cb:e8:15:f8:45:6d:a5:14:df:64:ff:95:1c:
                    81:4b:20:ba:86:4e:c7:cf:81:9b:f5:b9:dc:91:b5:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5F:D0:40:E6:17:4A:FC:5D:60:9D:1D:21:F4:16:0D:A6:24:15:EC
            X509v3 Authority Key Identifier:
                keyid:B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:58:dc:6d:1d:7a:92:1f:aa:a5:2c:01:c7:85:29:9f:46:
         23:53:c2:8a:82:73:36:bf:90:20:82:82:ec:b8:b9:4e:22:ec:
         6d:ad:75:b0:5e:a6:e3:b7:a3:e7:72:3a:20:7d:cb:a6:15:b9:
         a4:00:b6:4e:81:27:62:50:d4:56:6d:8b:8d:ab:38:1a:23:4a:
         c4:0d:4b:1d:62:1e:0b:d7:2d:bf:11:51:a1:9c:08:02:d0:06:
         79:7a:d7:a7:78:f7:55:6c:2a:98:68:2c:01:e2:47:75:1e:4b:
         9e:d9:13:b1:9c:f6:d1:15:44:b9:29:93:30:be:95:1f:89:a7:
         fa:c4:9f:51:62:0e:33:ce:f2:91:ea:3e:00:92:a2:b7:61:6c:
         a1:ce:ca:39:83:7d:57:7f:70:85:62:47:9e:2f:39:73:cd:44:
         a3:67:ab:1a:ba:87:b0:23:55:71:b7:23:25:f6:77:43:3c:b2:
         8b:5c:0c:6e:ae:1f:8f:c5:ab:b4:7a:f0:95:c7:df:f3:2e:f1:
         2d:1c:5f:67:43:c0:29:2c:78:27:0c:66:b9:3b:ce:76:72:71:
         05:58:6d:5f:1b:63:c7:ec:25:d6:11:30:20:49:6a:c3:66:35:
         3d:9b:73:1d:c7:ed:37:1c:5b:6c:4a:a6:71:7b:f1:64:ea:49:
         5c:36:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:35 2026 by rpki-client