Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
File:                     IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json)
Hash identifier:          C+iPt6GKyH8kg8svuAcxgZiuHKf493bimiK47K4fV9c=
Subject key identifier:   C8:DC:4E:F5:FF:99:5E:AC:FF:1A:D8:BB:72:96:17:65:6A:42:18:55
Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
Certificate issuer:       /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Certificate serial:       26BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
Manifest number:          2621
Signing time:             Tue 24 Mar 2026 15:39:54 +0000
Manifest this update:     Tue 24 Mar 2026 15:39:53 +0000
Manifest next update:     Tue 31 Mar 2026 15:39:53 +0000
Files and hashes:         1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: h3z9W1eFkuReIyqUzXBNwDYk75f1POpNpy4vSa/iAus=)
                          2: 116C82261B9E11F1BD5D432E033D8C67.roa (hash: qolEkXXPEHBFRcXvllIULcplK2nUrHlQFVr2Orzoe3s=)
                          3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: 8q4Vi4HVYjQUA8ghEZ3LJ9W3FYoT2yvANYapfAcNddI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl
                          rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9918 (0x26be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
        Validity
            Not Before: Mar 24 15:39:53 2026 GMT
            Not After : Mar 31 15:39:53 2026 GMT
        Subject: CN=69c2b04a-3732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e5:dd:5a:70:29:2f:a7:36:ab:02:cf:11:13:
                    c0:ed:5f:63:42:4d:5b:b3:51:b6:4d:b9:0b:55:66:
                    4b:91:e8:28:38:22:68:a7:a2:a3:4f:1a:83:71:7a:
                    62:6b:ee:f3:02:82:94:39:2c:99:2b:36:b0:e9:9a:
                    ca:20:a1:7d:dd:81:ff:a4:11:46:79:1b:95:58:05:
                    a3:85:32:82:10:4d:c5:0e:23:fb:07:6f:35:94:d4:
                    88:60:c8:00:75:a2:66:50:c4:a5:14:c0:ef:c2:0b:
                    cc:db:c9:01:7f:00:b5:24:10:4c:9a:6c:f0:a2:7e:
                    f9:f7:a6:eb:2e:1e:81:b3:9d:c0:d1:cc:c8:ba:d5:
                    7b:70:49:e5:7e:72:13:f4:b2:ee:2e:6c:4a:3a:e3:
                    84:68:6f:7b:1f:13:d5:88:5f:04:29:82:a3:af:e5:
                    d1:29:49:12:d5:4f:ee:ce:f2:1b:5f:39:0a:e5:15:
                    3a:ce:93:aa:80:31:9d:b1:18:66:16:1b:ea:a5:af:
                    0b:aa:60:e4:8b:eb:26:a1:1f:7b:c1:71:ac:fb:1b:
                    bf:75:23:ea:cb:49:38:5d:2a:90:33:32:f6:c1:aa:
                    7d:5f:3b:e7:ce:d8:49:7d:0b:1d:ef:63:8f:ec:67:
                    7e:9d:60:14:03:a3:08:57:e4:59:72:8f:05:ac:f1:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DC:4E:F5:FF:99:5E:AC:FF:1A:D8:BB:72:96:17:65:6A:42:18:55
            X509v3 Authority Key Identifier:
                keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:3b:f7:8a:52:5f:76:7b:51:69:56:ab:5d:61:58:2e:0f:
         46:a5:70:dc:36:9d:e8:81:4c:bf:fd:e6:c8:fa:d2:73:2b:20:
         c2:04:5b:c7:88:a3:a9:9d:1d:46:92:48:fb:96:43:f5:b3:4e:
         40:23:1d:7b:99:de:df:b0:01:9b:a0:ea:4f:13:1b:ac:59:3d:
         9e:4a:9e:ca:ae:88:0c:48:98:d1:a9:d2:34:a6:e5:fd:ab:88:
         95:5e:5a:39:bf:29:7f:8c:f9:cd:88:c9:a2:74:c7:ae:c9:02:
         76:63:54:43:e2:ed:e9:32:13:06:9a:26:dd:36:32:aa:dd:c4:
         66:e8:53:f0:d0:ec:b3:65:77:1a:1e:75:39:c3:f8:54:59:c3:
         2c:5f:e0:ec:8b:01:c0:d2:51:20:95:1c:f1:33:76:ed:00:58:
         c9:cf:14:f4:d8:a9:57:b0:b1:9c:ca:66:3d:63:24:05:f2:46:
         29:7d:b6:71:9d:33:e5:3b:21:55:f9:17:05:cf:c5:ee:85:e9:
         1d:02:9c:be:81:d7:5a:0b:df:8e:00:76:78:3a:13:71:7b:11:
         60:06:70:84:27:56:2c:1b:cc:0f:52:52:00:58:36:96:26:bd:
         76:e2:10:21:74:22:7c:37:a1:1e:0f:a5:32:69:aa:67:9b:8b:
         48:2f:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:02 2026 by rpki-client