Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
File:                     61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json)
Hash identifier:          9T0U3GgYq3Qus3fW6L6koBE6NPfapumslJGqspzvzlI=
Subject key identifier:   B1:B0:AE:68:97:22:1B:1D:05:AA:70:DD:FE:88:11:64:92:B9:2D:6F
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Certificate issuer:       /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial:       067E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
Manifest number:          0673
Signing time:             Thu 26 Mar 2026 22:24:15 +0000
Manifest this update:     Thu 26 Mar 2026 22:24:14 +0000
Manifest next update:     Thu 02 Apr 2026 22:24:14 +0000
Files and hashes:         1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: KPFIYt7ZNWtpJYpcrEawuJmO1SePSQb+scD8XarwGrs=)
                          2: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: LxQi0ZLbD5O+UGQwvVl1PKgKpei9FqLrxR7aU59LHo0=)
                          3: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: vNOxu4/izKhP78TziGSmWnx3a7Ly5WurceG6/Ij1Sc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
                          rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
        Validity
            Not Before: Mar 26 22:24:14 2026 GMT
            Not After : Apr  2 22:24:14 2026 GMT
        Subject: CN=69c5b20f-659f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:00:87:cb:aa:fb:08:18:7a:70:df:c6:1e:
                    16:68:0c:dc:7e:78:d1:25:fd:b4:76:71:66:48:e3:
                    73:77:a5:d5:dc:fc:53:5f:ba:6b:7f:ad:05:5a:52:
                    f8:8a:3b:ac:cb:13:48:47:9a:ae:98:0e:8d:f5:0a:
                    bf:02:58:13:ca:15:95:d7:a8:5a:f3:2f:10:e1:41:
                    83:57:10:ff:d0:1b:2d:fd:df:6e:4a:3d:70:3f:4f:
                    ca:44:89:e8:04:50:8c:32:6e:2c:cb:72:dd:1f:09:
                    ab:c1:3d:87:4c:ed:70:83:f1:52:b9:5b:f2:73:b7:
                    97:ec:c3:11:48:54:0e:30:dc:ac:0f:03:10:ba:33:
                    b0:ec:c2:43:43:30:dc:ec:83:d0:57:1d:09:b6:60:
                    fa:5b:75:65:00:d6:9d:4e:ac:a1:fd:cf:21:50:88:
                    44:87:61:05:38:ba:d2:d4:76:a1:a6:fe:b4:d0:af:
                    bc:d2:3b:90:63:95:b2:50:c5:8d:75:b2:4b:dd:da:
                    2d:bc:2a:d8:a5:4c:05:dd:8c:38:1d:67:c4:df:47:
                    88:a1:40:69:a0:9d:bc:2a:c3:ec:21:35:d3:81:01:
                    ed:be:54:02:cc:bf:05:47:85:b7:51:99:45:94:f4:
                    62:9a:e3:df:86:f3:2a:ab:e4:a7:cd:2e:35:7e:e1:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B0:AE:68:97:22:1B:1D:05:AA:70:DD:FE:88:11:64:92:B9:2D:6F
            X509v3 Authority Key Identifier:
                keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:86:e9:21:1e:6f:29:2f:5e:5d:03:71:91:d3:f6:87:d5:
         d7:10:e7:22:a1:ec:7d:b6:e9:aa:e2:7d:41:1b:8e:eb:18:ca:
         b2:78:70:fe:b2:1d:73:8d:fe:7d:6a:b8:5e:b8:b4:10:7b:16:
         a8:21:d1:7c:9c:8e:d3:b0:ed:18:ae:26:99:09:38:81:92:98:
         3a:23:7a:88:79:43:b2:de:0f:c0:17:9e:44:e6:3b:38:26:b5:
         41:a3:5f:3a:b3:88:7b:8e:49:4e:d9:26:cd:eb:ca:1e:d0:dd:
         90:b2:94:e0:8e:f2:bf:e5:8c:85:7a:f6:10:f8:a0:9f:84:ab:
         86:3b:ba:d2:d2:34:b1:0e:aa:5d:eb:ac:62:8e:6c:46:e4:a4:
         dc:57:fd:4c:fb:a4:a5:19:b7:dc:c3:6c:9d:7c:9c:38:e5:29:
         26:ee:97:b5:40:5f:00:99:c9:8a:86:66:b4:5e:ef:a2:88:b3:
         19:5d:8d:f1:1d:64:3a:a5:b2:79:94:3d:f6:b7:f6:04:ac:35:
         a9:93:e9:60:81:11:ab:7c:e7:f0:ed:cd:58:dd:63:03:6e:63:
         47:68:ce:5f:bd:aa:89:e2:4d:e0:6c:31:63:e4:04:00:92:99:
         02:f1:eb:8d:d8:92:51:87:5f:7d:3e:f2:31:76:aa:ae:b7:64:
         99:20:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:49 2026 by rpki-client