Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File:                     rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier:          xsZovMPsgpwsZDPXbMdoQ9Y4/4JQWNmze67WMYAJZY0=
Subject key identifier:   7A:C7:90:AC:CF:C9:88:2C:E5:3A:C1:15:17:BC:25:27:F9:8B:18:CF
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       136D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number:          1347
Signing time:             Tue 24 Mar 2026 16:54:27 +0000
Manifest this update:     Tue 24 Mar 2026 16:54:26 +0000
Manifest next update:     Tue 31 Mar 2026 16:54:26 +0000
Files and hashes:         1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: 4uPqUoWBGgzuFvecm5z0jxuZdYxEFQxAy0ndg2pee/8=)
                          2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: KaXesnuFaeBFwdIKQX83xHoaLDU87Z3ExtLFihWBkwE=)
                          3: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: EjuBFNcTbXBG7HF8SBVEE88GDXKVzdWOaL9n/e31WqA=)
                          4: 403398AA233111EEAF768F66C4F9AE02.roa (hash: c+u1/ghSEPW5TPgu3Z1+1kHiOzoTxMT2cGgNr5Nuy/Y=)
                          5: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: 6M0KgUjlBMC1knslbcindZmOh/IyeEGng9fyL/mpuo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4973 (0x136d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Validity
            Not Before: Mar 24 16:54:26 2026 GMT
            Not After : Mar 31 16:54:26 2026 GMT
        Subject: CN=69c2c1c2-a0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:8c:35:06:e5:49:80:72:d1:6a:7d:e0:50:
                    c3:69:96:93:73:3f:44:4f:fd:9b:a0:a0:be:01:e5:
                    d1:16:71:00:2f:93:45:c2:92:a5:18:57:57:87:30:
                    56:72:16:a0:64:38:3b:3d:b7:09:e8:11:f5:cb:e7:
                    5e:47:e8:e2:93:25:cb:30:76:6d:26:db:e5:8c:ac:
                    cc:af:31:e0:83:8b:fe:dd:a2:a0:dd:7b:50:6a:7d:
                    83:18:75:57:1c:44:60:37:44:48:8f:07:ad:46:5b:
                    4c:7d:ec:ea:65:ce:21:c0:65:6f:e8:89:ad:19:12:
                    1f:37:25:e4:49:af:50:62:22:5e:e6:99:cf:b5:25:
                    ad:45:da:01:b6:8d:d8:74:64:1b:ff:94:4a:7a:95:
                    52:dd:a9:f8:41:de:04:e5:d2:37:b6:e0:fb:31:d9:
                    46:d8:e3:4a:31:44:7f:23:92:ef:18:7a:21:b5:7e:
                    f8:ea:71:bc:8b:9e:1c:69:46:2c:16:e7:20:a7:50:
                    18:a6:b4:af:0d:f7:c2:f8:3d:1f:3d:11:20:45:06:
                    b3:6c:24:20:fb:01:7f:ba:05:fa:51:04:36:e0:2f:
                    16:75:6c:41:8c:83:d7:ab:51:7c:70:79:56:e1:a5:
                    59:a7:4e:f5:f4:51:a2:94:58:01:f0:eb:2d:4e:9a:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C7:90:AC:CF:C9:88:2C:E5:3A:C1:15:17:BC:25:27:F9:8B:18:CF
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:f9:13:45:0f:eb:37:c7:a6:73:cc:ea:e6:c2:6b:05:76:
         74:58:03:31:26:b7:38:1f:62:16:05:7a:ad:4f:7b:c9:03:20:
         b2:28:e3:b7:1f:03:0e:4c:b8:cb:f6:86:0f:dc:7c:c6:d8:26:
         0a:a8:2c:92:ab:8d:bf:ca:ff:85:49:5e:c0:43:c6:09:9a:e0:
         a0:b6:43:a0:a2:82:53:6f:59:00:33:3b:76:65:49:df:71:3f:
         cb:a8:82:51:2d:a4:89:10:28:db:ab:fb:a5:e4:7b:02:25:31:
         88:8e:a1:a1:31:c5:88:71:63:33:14:fa:e6:37:3c:1f:52:bd:
         3d:a9:df:5a:7b:75:71:19:dc:6d:50:97:87:8b:31:fe:7e:21:
         50:f5:fe:76:7e:7b:15:6c:7f:f7:26:76:ea:13:34:50:5c:e1:
         44:3b:19:f5:fb:92:af:94:b1:c2:f3:09:7a:07:ec:05:8e:a2:
         1c:a9:b4:69:1a:ab:7b:1c:8f:3e:1e:3e:17:f0:db:11:0a:12:
         c0:67:00:0c:4c:83:46:f2:98:20:74:14:4e:69:b8:12:af:25:
         39:c5:d4:52:98:6e:74:e2:9f:cd:e8:f0:27:60:4c:fa:c8:14:
         0d:ff:58:43:0e:f5:5c:b1:97:a8:31:ad:61:b2:e4:6e:33:1a:
         62:5c:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:41 2026 by rpki-client