Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          7INlKOIlkuzfhBjTZN0F+FR5Xqo6zfqzkDk/3zdVJbo=
Subject key identifier:   06:D1:4C:D8:C4:2E:D6:75:50:75:29:D5:85:72:37:3B:05:F8:35:70
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          0170
Signing time:             Wed 25 Mar 2026 03:58:26 +0000
Manifest this update:     Wed 25 Mar 2026 03:58:26 +0000
Manifest next update:     Wed 01 Apr 2026 03:58:26 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: OegyWfdLDWw2UCfav/c+0Q4eJssNpw3GNnbd9cfd75w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
        Validity
            Not Before: Mar 25 03:58:26 2026 GMT
            Not After : Apr  1 03:58:26 2026 GMT
        Subject: CN=69c35d62-9b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:b7:a7:09:1b:89:c2:72:fe:b0:ef:ec:36:
                    b7:84:4a:c8:5f:ad:0f:33:83:a8:50:c7:88:4e:98:
                    da:b1:96:f6:b0:04:52:c6:3f:fd:3f:f5:18:20:f0:
                    82:b8:f2:73:75:e4:71:5c:8b:b8:4d:0d:94:0f:56:
                    8f:38:f6:21:1f:42:c9:47:f8:ed:d1:fa:44:47:b5:
                    18:3d:1f:5a:22:c8:29:e9:08:87:cd:90:45:3e:0c:
                    db:6e:d6:60:d9:33:5d:78:8a:76:13:af:4b:47:47:
                    f9:70:66:a2:f9:c2:90:75:b1:df:63:d5:72:df:07:
                    71:3a:f1:e0:18:ca:fb:14:32:93:15:b2:78:52:de:
                    ee:50:f2:66:dd:4f:a3:cc:d5:a7:d2:94:04:fa:d1:
                    31:89:51:b0:2d:1c:18:59:c6:c5:5c:0e:36:2e:95:
                    fc:20:f8:c8:30:a2:f2:48:a5:0a:01:23:48:1e:51:
                    7c:15:ae:e5:1c:46:25:06:f0:98:72:9c:1b:90:fe:
                    59:04:51:6f:25:cd:98:22:80:8d:4b:bc:0e:81:21:
                    ba:df:d9:f9:95:66:39:39:85:7d:5f:bc:b3:a4:1c:
                    78:34:63:a2:3c:f2:8a:19:4c:fc:a8:40:5e:1d:94:
                    39:0a:66:5a:8f:df:cd:55:89:64:3c:8e:a6:d0:13:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D1:4C:D8:C4:2E:D6:75:50:75:29:D5:85:72:37:3B:05:F8:35:70
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8e:c6:11:2e:8a:bb:e9:bb:27:1d:a6:b9:5e:51:20:6b:08:
         f7:ed:77:30:f3:a4:71:b2:e3:85:3f:77:6b:6e:0a:a2:f4:e9:
         95:6c:5f:97:11:9c:59:df:ce:26:31:73:2e:a3:90:86:ed:3b:
         dc:18:0c:5e:73:ba:70:cc:52:b2:8e:42:ea:5f:cd:4d:35:26:
         bb:c3:82:3b:ef:3a:04:f7:a9:54:0d:92:ea:4c:a0:99:f7:7d:
         ce:3c:24:e5:73:75:0a:fb:d6:60:c9:84:9f:35:b2:16:d6:61:
         23:08:12:80:8c:13:e3:89:e8:cf:de:b5:b0:1d:38:e4:7b:9f:
         1d:93:c9:6b:91:a0:41:92:1c:02:23:c1:29:7a:b7:39:3e:d7:
         1d:9b:44:f0:2b:37:7f:51:25:89:99:2d:a2:83:bf:1a:2b:d5:
         d7:17:a8:7d:58:ad:93:c9:3f:a7:b5:f5:08:9f:fd:58:99:6e:
         42:76:f7:15:c6:c4:3d:71:5e:f5:9e:d4:8e:01:3d:3e:27:dc:
         a3:30:01:b4:65:47:11:e0:7b:f9:30:64:9d:2b:30:db:2b:cc:
         1a:7f:43:64:0d:f7:6c:57:97:f4:00:7a:d0:15:dc:49:a9:ea:
         21:fa:e7:78:e2:87:fe:f4:96:37:4b:75:43:c5:01:25:fd:46:
         55:d8:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:33 2026 by rpki-client