Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File:                     It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier:          DGyEZxd0u4r5ncyPP3WkNEJPIrqUEnSat16r+8a6lp8=
Subject key identifier:   47:C4:F1:8B:BD:2D:1F:08:E0:0C:68:73:8D:AA:29:09:F0:17:2B:0A
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer:       /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number:          012B
Signing time:             Wed 25 Mar 2026 04:48:58 +0000
Manifest this update:     Wed 25 Mar 2026 04:48:58 +0000
Manifest next update:     Wed 01 Apr 2026 04:48:58 +0000
Files and hashes:         1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: pc0ACExYWzw5PkJR5T1SXB+sNwtTGkaXJn6Idcag1GQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
                          rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
        Validity
            Not Before: Mar 25 04:48:58 2026 GMT
            Not After : Apr  1 04:48:58 2026 GMT
        Subject: CN=69c3693a-9cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:92:fa:0b:aa:ad:84:63:2e:73:7c:cc:fe:
                    9d:74:0f:97:4d:7b:af:d2:cf:e6:62:c4:28:ca:5c:
                    73:05:fe:79:0e:21:94:f3:c0:0d:f0:d4:15:ff:3d:
                    65:f6:59:60:63:5f:80:17:0a:57:4f:53:63:14:38:
                    12:a6:ac:89:d6:8e:48:f3:76:82:f5:4c:64:cf:8f:
                    38:eb:45:57:fd:a0:e9:62:df:c6:66:fd:9f:64:8d:
                    91:3a:ce:07:72:de:88:e2:5c:bc:55:70:19:23:54:
                    40:85:87:61:ca:a3:df:db:13:47:05:d2:93:95:5b:
                    2b:0e:3f:f2:cd:3e:e5:26:cb:44:4e:e7:7a:8e:7e:
                    44:ba:30:33:29:b0:1e:21:7b:86:42:7c:f0:77:39:
                    75:85:88:f7:77:0c:0d:7a:87:50:e8:e2:f9:f8:0a:
                    ad:72:df:d1:44:55:af:83:9c:88:c8:aa:6f:be:70:
                    aa:53:25:80:6d:60:13:f2:10:cc:fa:03:31:e0:93:
                    4d:9f:76:22:59:6f:74:a2:6c:1c:cd:a9:dd:ce:4c:
                    2d:9c:e0:86:39:82:8b:90:d8:0b:7e:4c:43:9e:2d:
                    92:5b:58:b5:bf:d7:93:d2:07:a8:60:3e:04:80:24:
                    7b:c8:d8:30:95:24:fd:0f:fa:b7:15:11:92:b3:83:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C4:F1:8B:BD:2D:1F:08:E0:0C:68:73:8D:AA:29:09:F0:17:2B:0A
            X509v3 Authority Key Identifier:
                keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e7:05:cd:9d:07:f1:12:7e:1f:a6:2c:72:35:f6:43:50:7b:
         34:6b:e6:a2:d6:f8:20:1e:65:ba:5c:d4:57:b7:1f:8c:85:41:
         a0:05:f1:5b:34:ef:18:0d:de:22:f3:fe:34:ce:4d:86:87:b9:
         5b:ba:e4:d8:3e:7c:95:b1:46:ee:43:d4:32:56:9b:18:00:5d:
         1c:b6:86:4a:c3:52:36:f3:2a:bc:09:13:69:21:12:12:50:e5:
         e5:b8:a4:56:f3:6f:89:e3:5c:09:60:f5:15:9c:a8:ee:43:4c:
         38:f8:47:5e:1b:04:c8:ec:ab:43:6c:00:13:7f:b3:42:67:a1:
         55:d1:3e:0d:3e:6c:68:ef:67:a5:9c:12:01:de:82:5f:25:ae:
         d0:c7:04:f1:1f:79:10:9c:8d:dd:8a:ce:4c:8e:1a:53:5a:92:
         06:8d:23:34:1a:ac:62:a8:14:3c:a4:82:dc:fd:4a:0c:cc:31:
         e6:ab:67:98:3f:ad:38:ab:54:71:8d:bf:d4:a3:80:8a:7d:f0:
         39:2c:e5:c0:48:2c:83:1c:69:8b:d6:2c:1c:6d:59:a8:28:91:
         ca:d9:69:51:ab:ba:0e:fe:82:50:c5:b6:88:e0:b8:f7:6a:46:
         e1:cb:ba:62:74:10:75:7f:ac:96:54:40:4b:f0:16:fd:5a:2d:
         ab:d3:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:39 2026 by rpki-client