Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
File:                     mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json)
Hash identifier:          Dcw++NpAoAc4wAdDJf4XEp3ad5Hr4cIiVYxioRYaPmI=
Subject key identifier:   A9:7B:53:3C:E0:2A:B1:DD:A0:38:F0:60:E6:C1:AD:AF:42:E9:88:68
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Certificate issuer:       /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial:       0472
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
Manifest number:          0469
Signing time:             Thu 26 Mar 2026 23:54:17 +0000
Manifest this update:     Thu 26 Mar 2026 23:54:17 +0000
Manifest next update:     Thu 02 Apr 2026 23:54:17 +0000
Files and hashes:         1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: rjSq0vTx4umAann9tDz+bgUEr3EBJONjDzCt1w97ucA=)
                          2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: dS2EenjS7oVy3FVFLAQ5/xV/PkhNqlRiAAoppDIPqSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
                          rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
        Validity
            Not Before: Mar 26 23:54:17 2026 GMT
            Not After : Apr  2 23:54:17 2026 GMT
        Subject: CN=69c5c729-8b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:26:5f:bb:6a:9f:f3:86:c0:a5:95:f7:c8:
                    c2:b7:67:2e:30:a7:9e:af:50:bf:1e:60:b9:31:c8:
                    bc:e4:8b:84:79:aa:56:d8:d1:94:79:86:02:0b:8e:
                    b8:ab:36:40:af:6c:dc:34:b9:7d:dc:7f:cc:22:89:
                    7e:34:83:c4:01:31:2d:6e:f9:c3:4d:5c:39:d8:9a:
                    e0:a5:84:3f:d4:7e:c5:c3:2a:3a:6d:06:ee:47:06:
                    af:e6:1a:49:60:ca:df:9f:56:3d:fc:e2:5c:73:d9:
                    b6:80:61:01:a3:bf:43:18:15:7d:4c:e7:9d:66:00:
                    b9:38:71:4a:33:9d:56:39:5d:5d:cf:46:ac:8c:f9:
                    ac:72:c8:70:4f:ec:b0:85:6c:c9:11:13:89:9c:63:
                    73:1b:1a:5a:d2:ec:0d:4d:c0:9d:ef:8c:ea:6d:bb:
                    28:96:6a:e4:27:c1:ee:c6:99:06:92:55:79:3d:25:
                    c5:88:14:c6:16:74:cf:2b:5f:53:af:57:ba:56:31:
                    f2:86:3f:62:68:1d:30:ef:94:3f:bb:f8:7d:46:a9:
                    07:79:28:ec:fd:3a:19:01:0a:46:ca:fd:1e:91:2b:
                    2c:72:01:a2:b9:79:de:47:3c:4a:70:be:64:a7:d4:
                    86:42:00:20:70:a4:3a:78:8e:75:dd:15:34:55:d6:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7B:53:3C:E0:2A:B1:DD:A0:38:F0:60:E6:C1:AD:AF:42:E9:88:68
            X509v3 Authority Key Identifier:
                keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f4:53:13:ac:29:0a:7e:d3:a4:e2:cf:72:80:36:06:fd:9f:
         86:e6:1f:c6:1c:1a:4d:f9:86:f6:0c:86:0e:1f:f5:22:22:c5:
         8e:68:10:49:39:45:f2:7e:1b:2e:9f:a0:2c:94:62:d3:96:60:
         c1:ae:8e:ef:48:a9:bd:f1:68:49:15:a2:83:56:19:25:8b:45:
         5f:ff:52:74:c7:0f:41:17:2b:94:8e:3f:49:22:33:11:7a:48:
         2b:1e:cc:0b:47:48:02:eb:c7:f4:31:d7:95:d2:fd:d9:ff:c7:
         76:4d:92:0b:01:47:f6:bd:78:95:52:d0:5e:05:1a:63:44:16:
         7e:5b:36:17:9d:18:7e:94:d1:9e:07:b3:89:17:bc:2a:99:db:
         e6:ad:a2:c5:e5:e9:61:da:24:6d:f2:7e:f1:da:e8:1a:fc:bc:
         65:44:09:5a:bb:33:74:ee:d4:01:24:c5:ea:86:77:df:61:63:
         6d:6b:9a:cc:c6:8a:a0:35:47:00:9e:c3:5a:a8:f0:a0:00:c3:
         2c:8b:51:5e:57:42:6e:50:21:98:54:af:a0:bc:3f:f9:de:0c:
         cf:11:9f:5a:36:59:52:19:d3:37:27:20:b7:80:41:83:cc:70:
         20:47:c0:a8:7d:40:d0:00:ae:5b:42:cc:c4:99:ce:07:9c:c3:
         52:90:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:31 2026 by rpki-client