Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File:                     1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier:          75zAYiKWb86bIu8Of4Zg9HjB4Mk0LICSZIRgjY3PmNk=
Subject key identifier:   82:CA:2D:DE:D9:D3:07:0E:B4:EF:CF:7C:F6:4A:75:CD:A4:D8:D8:3F
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer:       /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial:       3540
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number:          352F
Signing time:             Tue 24 Mar 2026 14:58:57 +0000
Manifest this update:     Tue 24 Mar 2026 14:58:57 +0000
Manifest next update:     Tue 31 Mar 2026 14:58:57 +0000
Files and hashes:         1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: jBnJBwSZSOYkQWmd0SOkYsY4uO4G/CXVfQqula+gNk8=)
                          2: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: +eQCtZaTH6GkPFoFVSiRb3PRvqAtjbgtEZLgyROZQic=)
                          3: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: OY0gqFhSrcsr3Ue2BAA7UCekieh8CcnhGOTNZC+wAEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
                          rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13632 (0x3540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
        Validity
            Not Before: Mar 24 14:58:57 2026 GMT
            Not After : Mar 31 14:58:57 2026 GMT
        Subject: CN=69c2a6b1-2adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:6e:6e:df:f3:6f:45:57:d4:11:6e:3b:69:
                    3d:68:73:a5:44:f6:c6:14:2e:65:83:28:49:60:fb:
                    eb:99:57:d7:f4:ad:96:96:46:2f:18:83:fa:cd:64:
                    06:f8:3d:e5:39:23:b3:61:43:fc:99:0c:ea:1a:93:
                    1a:3a:fb:10:cd:54:01:56:bb:c9:34:a3:3b:d1:db:
                    e7:b0:ce:e5:f6:16:d3:a4:11:be:44:b8:9b:43:00:
                    46:40:b3:9d:a6:88:ee:61:d5:d9:a5:6a:34:64:45:
                    af:2e:21:28:89:33:52:e0:a1:33:d5:af:96:01:9a:
                    3d:6a:6c:1f:da:51:bd:e9:b8:29:4a:1d:c8:c3:2f:
                    f8:b4:f5:27:4a:b7:45:56:a1:a6:b0:a2:50:2f:0b:
                    eb:b8:f2:c5:03:8c:5e:37:12:fd:e9:85:ee:9f:26:
                    b6:0c:ec:af:b2:35:93:6f:26:fe:42:3c:3e:6d:4b:
                    51:52:f8:d5:c7:37:bb:81:d9:df:46:fc:e7:f8:75:
                    c3:f3:b4:7d:75:50:d8:40:9b:06:cc:cc:41:c6:7e:
                    4a:cb:a1:44:3c:9f:06:e3:d3:0c:ef:27:e6:e2:c6:
                    68:a6:b2:04:1b:15:e2:4b:9a:2e:92:36:25:5b:f2:
                    aa:10:5d:59:27:42:d6:8b:3f:05:02:52:3f:f0:29:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CA:2D:DE:D9:D3:07:0E:B4:EF:CF:7C:F6:4A:75:CD:A4:D8:D8:3F
            X509v3 Authority Key Identifier:
                keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:62:36:b0:8e:b9:9a:94:62:59:c9:23:1e:f8:68:6d:fb:93:
         68:63:ed:82:0d:bf:e0:17:fd:7c:68:94:b6:8d:a2:71:a9:5d:
         34:61:93:d2:15:06:8e:44:ca:7c:92:da:62:00:03:6b:86:2b:
         ad:2f:97:11:18:d8:95:8b:97:a3:85:38:89:f8:0b:b7:04:69:
         b1:d4:43:85:ae:34:d5:a4:ce:03:1a:52:b4:b2:71:55:80:c2:
         ad:88:58:e1:ef:ab:2e:e8:05:60:a1:0a:d4:1d:57:fe:7d:55:
         51:9b:8c:39:66:14:06:90:aa:87:1f:fc:64:26:f7:9d:c7:5c:
         52:3f:d5:d3:cb:35:bb:89:29:6c:a3:42:63:9a:ef:6c:6e:d2:
         1f:67:8f:b7:30:04:42:7f:9d:3f:2b:e7:3a:4a:07:37:14:45:
         60:ed:aa:61:f8:8a:8b:60:3d:d8:76:02:1a:c8:26:8d:9a:0a:
         6f:3d:bf:b1:9c:7f:71:9a:d9:e3:94:63:d0:28:7f:90:47:69:
         cf:b4:54:49:7f:f7:10:b3:29:2a:ba:87:fc:14:8b:fd:06:83:
         06:f9:7d:6e:8f:71:02:44:b3:67:e3:04:b4:9b:2d:e2:38:e5:
         4e:81:17:0d:b5:5f:d7:6c:5b:62:74:bc:91:87:ce:95:7c:d1:
         08:33:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:58 2026 by rpki-client