Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File:                     3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier:          Anj96YK0aZPOXV/lXRMAkXsDCd1TbLPc1iYGpcayJ38=
Subject key identifier:   69:DF:60:88:8F:32:7B:4C:2D:89:F2:2E:5F:15:D4:40:33:22:50:84
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer:       /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial:       08A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number:          096A
Signing time:             Tue 24 Mar 2026 20:18:37 +0000
Manifest this update:     Tue 24 Mar 2026 20:18:36 +0000
Manifest next update:     Tue 31 Mar 2026 20:18:36 +0000
Files and hashes:         1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: DLBzxGzKfEggIXViBCp+HKa0eGehmOiJSbLarXx1TNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214 (0x8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
        Validity
            Not Before: Mar 24 20:18:36 2026 GMT
            Not After : Mar 31 20:18:36 2026 GMT
        Subject: CN=69c2f19d-cb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:fb:51:94:9e:f1:e6:95:d0:b6:ac:fa:6a:
                    1d:b0:c7:09:e8:58:08:3b:01:31:68:15:ea:94:0a:
                    2b:aa:8d:d7:15:0d:62:df:e0:e0:4e:cb:64:46:42:
                    7e:6b:33:24:0a:2c:a8:aa:f7:0c:9b:84:0b:4c:de:
                    06:86:4f:5f:f9:f8:18:62:b5:b4:d3:8f:1b:12:88:
                    16:6a:cc:0f:02:69:4c:b7:32:c2:70:1c:56:f5:3c:
                    56:9e:ac:b6:3e:07:a3:41:51:e4:0e:16:cc:96:2e:
                    94:f8:ac:fe:94:60:15:fc:86:53:4a:ab:72:9e:16:
                    b8:cc:33:f3:03:42:42:aa:d0:b6:0f:8f:19:29:cc:
                    22:06:b2:66:22:9f:13:86:a6:9e:0f:d4:60:99:2c:
                    7f:bb:a6:fa:68:36:0d:b1:87:c7:f7:a4:97:24:a1:
                    15:2b:cf:3b:11:f8:b1:34:4a:0c:e7:29:c9:ca:a4:
                    47:12:60:9a:d5:44:b7:84:88:99:b6:a0:5e:62:ee:
                    0a:a3:5d:89:6d:5c:6d:02:a7:f4:1d:f3:b4:a5:e6:
                    bd:4d:ef:2c:dc:a1:0a:39:fb:fb:f5:65:72:d8:e1:
                    42:de:d8:d6:40:c5:3a:69:1f:b8:0d:67:81:83:b0:
                    e8:a0:c8:ff:cc:e4:cf:83:bd:41:ad:1a:31:b4:91:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DF:60:88:8F:32:7B:4C:2D:89:F2:2E:5F:15:D4:40:33:22:50:84
            X509v3 Authority Key Identifier:
                keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:0e:5b:ef:25:d2:6a:7d:77:0a:0a:46:3b:36:ea:ea:32:
         20:82:a7:b5:01:91:9b:11:33:0a:94:e2:a9:62:c2:3b:32:73:
         f5:eb:ce:6b:8d:b4:b7:e6:e6:26:e2:65:ac:a6:ce:c7:74:cf:
         6c:ae:01:29:4a:26:32:cb:58:5c:02:9d:60:2e:78:eb:21:87:
         be:ee:64:6a:37:cf:56:09:59:64:a1:9f:cb:9a:77:0b:3c:40:
         7c:30:38:ba:e3:9f:88:53:14:55:d2:90:ac:e5:5c:d5:10:26:
         8f:a6:57:c6:ce:ad:b0:95:89:46:6b:06:f1:ff:09:89:cd:47:
         97:a2:c6:df:65:6f:06:61:0d:7e:5c:cc:31:08:29:45:c3:fb:
         ab:f5:21:e2:5d:29:b9:40:4d:3d:c2:a4:ad:c2:bb:34:92:ed:
         c8:61:98:66:10:0e:0a:34:40:cb:7d:4b:e4:c5:15:fc:e5:ec:
         25:77:c6:b8:1e:bd:7b:ad:ec:a6:34:49:7d:12:02:24:ec:b9:
         ba:69:3c:03:c9:9d:35:51:1a:9e:62:3e:ea:73:af:de:bc:20:
         ca:2b:e2:f2:99:44:b2:c8:90:44:73:e3:47:97:b5:07:87:65:
         b9:f1:65:f3:8b:e7:fd:39:48:d3:58:d2:52:78:6c:c6:46:73:
         8e:1e:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:44 2026 by rpki-client