Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
File:                     C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json)
Hash identifier:          Ssa63k1DHK+cB6nk9CRDbTg1cY1vETseN2QE7n+AMms=
Subject key identifier:   68:39:83:DD:F2:F8:91:7A:5F:5C:26:76:80:A9:AB:2E:E5:D2:C8:0D
Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
Certificate issuer:       /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Certificate serial:       087E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
Manifest number:          0876
Signing time:             Tue 24 Mar 2026 20:22:51 +0000
Manifest this update:     Tue 24 Mar 2026 20:22:50 +0000
Manifest next update:     Tue 31 Mar 2026 20:22:50 +0000
Files and hashes:         1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: xvw7YdtYq16kDHDMlwsFIgXOa8OBgTK4ZF0EJ8WDwFY=)
                          2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: mVqS9PCmyavpYnot1OnF09z2ZvLVvaBHuBfatk9kJDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
                          rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
        Validity
            Not Before: Mar 24 20:22:50 2026 GMT
            Not After : Mar 31 20:22:50 2026 GMT
        Subject: CN=69c2f29a-ba76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:d3:fd:51:62:6f:66:da:eb:f3:2d:de:b1:
                    95:5e:91:21:52:96:6c:76:76:8a:8a:f5:f4:a8:56:
                    bf:4a:61:69:65:f5:4d:a5:b4:fd:c3:6a:80:73:f3:
                    42:b6:38:0c:45:20:22:04:3d:71:ad:8c:47:c9:d2:
                    e1:91:f8:3b:36:4e:4d:63:9f:62:0a:01:70:8b:ed:
                    9c:b0:e1:65:52:b3:08:37:20:c5:9a:65:98:8e:47:
                    ec:ff:a9:83:6d:f5:65:13:cd:0f:15:e4:25:44:dd:
                    e8:63:d2:b5:06:1c:cf:ba:d2:15:ee:0e:c1:2c:e3:
                    99:fa:ae:74:5d:ae:ab:41:34:6a:32:60:3f:e6:e8:
                    21:33:a3:54:35:2e:b1:5d:49:41:1c:b4:92:07:80:
                    d4:df:6a:e7:08:1e:48:8c:fe:3a:e7:ba:96:3a:42:
                    3c:cd:f7:8d:a9:08:b8:ae:bc:ad:6a:3f:93:a6:11:
                    60:ae:31:c7:4c:b7:23:e7:f8:15:0c:31:30:73:c3:
                    1b:a1:a4:0f:d2:ea:da:80:fa:ec:f4:63:07:e6:56:
                    7d:00:5c:42:97:b5:f2:44:ed:03:c9:eb:c4:8e:41:
                    11:92:87:61:95:d1:12:8d:11:cd:b5:c8:80:f7:c7:
                    c5:09:87:36:26:ca:ff:8f:23:f7:3e:ac:42:26:96:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:39:83:DD:F2:F8:91:7A:5F:5C:26:76:80:A9:AB:2E:E5:D2:C8:0D
            X509v3 Authority Key Identifier:
                keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:7c:1c:94:8a:c0:4d:47:27:fe:8e:aa:e4:e7:48:fe:cd:
         9b:ff:e7:5a:40:d6:18:8c:00:3f:14:fd:f6:29:88:e0:3f:8b:
         ef:d7:e9:31:eb:0e:11:62:af:3b:c3:0b:b1:2e:53:46:b8:26:
         d6:29:14:bd:54:71:e9:aa:c7:0f:5f:92:60:3c:3f:96:04:ec:
         8d:c0:51:34:e8:8f:63:a4:68:36:a2:4c:be:10:53:7f:ea:7e:
         7d:aa:cd:53:c7:ff:d1:e5:d8:f0:0d:a0:6e:5c:f7:38:06:84:
         c4:dd:d2:7f:21:ac:a7:c7:13:3e:c6:9f:40:aa:c9:f2:7b:7d:
         85:b2:8f:b1:60:d7:65:51:2f:8f:4b:4b:a5:09:ad:5e:5a:b1:
         7d:3e:56:70:ab:57:d5:34:cb:42:c4:50:f4:95:50:bd:20:4b:
         4c:05:89:65:2a:c7:9c:dd:53:a1:2b:02:d6:60:d5:1a:77:6b:
         0c:bc:09:e1:35:48:eb:b7:5f:86:7a:4d:22:51:7e:0a:2b:2b:
         02:18:cd:74:59:16:7d:b1:fd:8b:02:f1:a9:60:ac:ed:d3:77:
         b2:ec:22:26:94:f8:cb:5c:a2:34:31:a1:5b:ca:55:50:23:0d:
         11:95:2f:18:af:0f:60:0c:9e:d8:d1:38:d5:13:61:3a:38:2d:
         5a:4b:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:23:06 2026 by rpki-client