Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File:                     t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier:          gze4nG6u5rp7doshQoj1rFOTj/bMZbevVEfW3FGSiCI=
Subject key identifier:   19:8F:E8:A6:4D:69:86:23:C2:C8:CE:08:4D:89:65:70:3E:42:F0:C8
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer:       /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial:       0535
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number:          0517
Signing time:             Tue 24 Mar 2026 23:24:18 +0000
Manifest this update:     Tue 24 Mar 2026 23:24:17 +0000
Manifest next update:     Tue 31 Mar 2026 23:24:17 +0000
Files and hashes:         1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: n5WnA5RV3WP5IePcY8Rm4YMbTVva/Um466/SbuCXScc=)
                          2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: D/dR6ENuXfLHFUetoYZThX1l/t7V6zP5wZaCcQHU3VY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
                          rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
        Validity
            Not Before: Mar 24 23:24:17 2026 GMT
            Not After : Mar 31 23:24:17 2026 GMT
        Subject: CN=69c31d22-35bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:0d:c2:ce:99:f5:f6:0e:1d:cd:07:96:41:
                    21:10:2e:87:c9:42:c8:ef:1d:66:f6:2b:ab:ec:da:
                    35:81:b8:e2:b0:55:94:72:79:b4:6d:c4:0f:1a:ec:
                    6e:12:cc:e2:0b:4e:51:56:4b:4e:ef:79:61:44:82:
                    96:cf:b8:87:a1:45:29:41:5f:32:0e:cd:73:12:8e:
                    ef:99:78:db:ef:f4:dd:0f:c9:7d:e0:e5:04:3b:b8:
                    e9:8a:ef:5d:ad:cd:e1:e2:46:c9:e1:32:80:57:e9:
                    1f:99:ae:92:40:40:dd:13:a0:41:62:2a:e3:5d:73:
                    b1:da:86:3f:f8:8e:3d:cf:7a:9a:6f:99:c0:9c:d2:
                    34:a3:5a:ac:09:d7:6e:57:e5:62:5e:9a:9a:aa:9e:
                    50:2b:eb:0d:49:03:3a:d8:11:fd:8f:bf:59:c0:3c:
                    68:ac:07:d2:47:7b:a4:95:73:ca:c5:fc:82:5f:2c:
                    f1:7f:cc:4f:47:34:42:eb:2a:d9:06:93:e3:85:b4:
                    ee:b2:76:00:7d:8b:15:dc:43:9e:f1:0f:47:c2:02:
                    b2:ff:24:a0:56:5b:0f:06:2f:4d:5a:92:99:1b:44:
                    5b:b4:45:7a:49:b5:d4:19:a7:23:17:96:f5:3b:9c:
                    01:a1:db:f3:14:8c:d7:c8:5b:57:f2:1f:88:cf:8f:
                    5d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:E8:A6:4D:69:86:23:C2:C8:CE:08:4D:89:65:70:3E:42:F0:C8
            X509v3 Authority Key Identifier:
                keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:da:85:ed:d5:81:d7:1d:19:c9:b4:8c:27:1b:3b:f9:ce:
         73:67:99:d6:7c:3e:b7:4d:8d:74:02:86:7a:67:61:56:f2:b6:
         ec:43:15:33:fa:d2:5d:7b:73:40:21:3a:ec:19:22:b5:e0:68:
         35:4e:a8:79:6f:58:37:6c:cb:65:44:15:a3:d3:c0:7b:46:c9:
         06:57:b7:c4:de:a4:91:c7:1a:f2:83:d3:f9:74:4f:cb:e7:6d:
         4c:f3:ab:57:db:86:a3:7a:7b:d7:13:de:88:a0:a9:5a:56:35:
         33:12:9e:64:29:9b:8c:7b:dd:ff:a7:3f:a7:ca:34:be:10:f8:
         68:f6:95:3f:8d:13:4c:d4:b2:94:49:35:5b:14:85:fb:39:df:
         e5:de:6b:3c:11:d4:a7:2d:01:64:c5:9d:e5:64:88:61:81:ed:
         c2:aa:4c:95:91:7e:b6:44:d0:46:6e:ea:5d:15:e2:e1:36:7d:
         d8:c1:0e:25:b4:13:70:6d:69:df:cd:ff:35:43:4a:a4:b5:36:
         c4:5a:f1:3d:33:88:07:73:92:c5:3e:bf:e2:55:c2:8d:f7:5b:
         61:e8:00:08:d2:4f:99:66:f5:06:0f:fa:47:80:26:2c:50:16:
         28:8c:d6:f2:d9:79:94:9c:0d:c7:61:e3:4f:4e:65:de:a5:f8:
         ab:ee:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:46 2026 by rpki-client