Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File:                     SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier:          DHmTVkK4dA2mIUJjAg8fTyV1HhkQHsXEGDU5mBYaxZ4=
Subject key identifier:   BE:AC:3C:3D:0E:74:9D:AA:C7:38:EF:44:EB:A9:98:53:31:56:0D:EA
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer:       /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number:          06CC
Signing time:             Tue 24 Mar 2026 21:56:54 +0000
Manifest this update:     Tue 24 Mar 2026 21:56:54 +0000
Manifest next update:     Tue 31 Mar 2026 21:56:54 +0000
Files and hashes:         1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: eSMGdSRAzx9XSMYeKxKI3sySgGkbQSmfIePC5QBOvHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
        Validity
            Not Before: Mar 24 21:56:54 2026 GMT
            Not After : Mar 31 21:56:54 2026 GMT
        Subject: CN=69c308a6-1b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:56:ed:da:20:b3:7a:8d:05:85:95:a1:55:
                    4c:4d:dc:f1:d1:ce:8e:7e:d2:0e:44:7b:f0:c8:a3:
                    cc:87:07:bd:53:2c:db:a6:28:1e:de:6a:a8:6c:9b:
                    1d:f1:3a:b5:67:a0:c3:7a:ce:ef:80:70:59:35:7a:
                    60:bf:97:fb:5b:09:51:7f:e3:6c:14:0c:9c:1a:04:
                    a0:06:17:d3:ad:58:7c:e5:3f:5f:55:7f:ce:81:39:
                    b6:22:e4:3d:ca:1b:f9:4e:c9:27:97:13:1c:87:3c:
                    c4:42:52:f4:26:df:fc:59:06:20:28:3a:19:b8:4b:
                    fb:5b:3c:46:17:fd:7c:39:90:cc:85:44:f8:dd:cb:
                    02:39:f0:7c:55:52:23:dc:30:73:cc:23:47:55:c8:
                    79:0e:4c:71:6b:2c:4d:6b:f4:cb:da:51:b0:b4:34:
                    ff:a1:ae:9d:03:db:a5:9d:93:ee:64:3c:80:82:68:
                    45:fa:48:3b:07:5d:b2:3c:49:7c:c8:59:61:bd:c8:
                    e7:6a:6e:9a:59:e1:6b:c5:1c:c1:3d:e7:19:ae:08:
                    b7:14:fc:eb:7b:45:cb:f1:13:af:58:66:51:4b:c7:
                    b0:b8:67:dd:9a:5b:bb:58:cb:08:76:f1:cd:ff:e5:
                    bf:d1:6e:66:14:92:6f:a0:61:af:cc:ff:28:04:56:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AC:3C:3D:0E:74:9D:AA:C7:38:EF:44:EB:A9:98:53:31:56:0D:EA
            X509v3 Authority Key Identifier:
                keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:67:d1:be:b7:02:5d:bc:37:28:22:02:6e:46:06:70:e1:74:
         44:47:3e:44:eb:55:0b:b7:dc:a5:d2:99:1c:37:7f:d2:87:8f:
         b1:ce:5a:b7:ae:f5:09:82:08:ce:ec:85:94:f2:74:12:05:90:
         b1:4e:23:7b:d8:d4:f4:39:eb:4a:78:ab:8f:47:73:14:99:c8:
         5f:34:7b:95:b0:7b:6f:f3:7c:26:df:75:ea:23:2c:b2:51:27:
         81:86:e4:44:1d:b0:5a:d3:3a:6b:24:48:04:49:17:b4:47:a1:
         7f:d1:46:33:b2:b4:0d:a5:7c:05:c0:98:8c:7c:18:11:e8:74:
         ad:a1:d4:f5:c0:7c:5b:44:fa:1c:f9:5e:b8:be:3f:ae:46:39:
         65:1c:da:fe:c2:a0:ef:a7:38:0f:49:d4:14:96:e8:7e:8d:b8:
         d1:ef:99:7e:03:ea:64:ce:41:e7:2f:08:a8:43:19:b0:46:e5:
         33:1e:51:39:4d:52:e2:bb:64:6c:01:aa:87:cd:c0:ea:44:6a:
         6f:4d:df:96:8f:c0:13:b9:7e:aa:ed:b2:d8:30:29:31:64:91:
         b9:e7:c3:b8:48:2b:73:a0:da:02:6b:0a:2c:9d:da:db:e0:84:
         01:38:3b:6a:8e:7b:5e:05:ec:f2:e9:f0:9e:7c:26:13:0a:dd:
         f3:bb:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:56 2026 by rpki-client