Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
File:                     X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json)
Hash identifier:          NBrCxZ+7R9xjey+ZgRiFqoUmll48E5IsYNbqCp7U2KA=
Subject key identifier:   E9:D1:DC:29:9D:70:9B:AE:F1:8F:87:C5:6C:96:DB:B3:40:14:91:E1
Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA
Certificate issuer:       /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
Manifest number:          4F
Signing time:             Fri 27 Mar 2026 07:46:25 +0000
Manifest this update:     Fri 27 Mar 2026 07:46:24 +0000
Manifest next update:     Fri 03 Apr 2026 07:46:24 +0000
Files and hashes:         1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: lnK8GwLVyrN+S9FKvuLu7d0SttJZaVGqLq7tKe0qEx0=)
                          2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: YYsxvMPCRrMVXD10L+51rkoUdNPvTH6rY0GaRqBHiU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
        Validity
            Not Before: Mar 27 07:46:24 2026 GMT
            Not After : Apr  3 07:46:24 2026 GMT
        Subject: CN=69c635d1-7d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:0a:47:da:e5:22:66:12:a8:65:ba:0e:67:
                    64:a5:61:13:4a:bc:b9:ee:48:8c:11:94:82:e1:eb:
                    13:33:f8:73:20:61:2d:7c:27:a0:70:fc:15:06:36:
                    24:6a:02:7e:35:48:a3:ba:e8:74:bb:e1:51:30:0b:
                    13:df:46:9c:11:90:3b:e8:9e:55:d8:34:6d:7e:23:
                    52:2e:5b:0c:b8:84:dc:09:25:d2:5a:9d:ae:59:2d:
                    fd:8e:ed:2c:34:84:ed:62:d4:7b:c7:73:81:30:78:
                    3d:7b:7f:02:14:d3:c5:6f:87:dd:bb:41:95:4e:c8:
                    51:73:5a:e1:ba:68:8a:9f:05:1b:20:29:51:d4:3d:
                    d1:b5:33:36:6f:0d:6e:3e:98:8d:fc:3e:41:e5:67:
                    59:67:1d:28:f1:33:1f:73:03:3b:34:2a:95:2a:89:
                    80:c6:c2:c0:9a:8e:d0:9c:f6:f6:e5:53:7e:d5:f8:
                    e9:38:9c:df:42:19:1e:88:a7:7d:12:f8:ec:6a:97:
                    f6:7a:3e:e1:a3:20:00:de:93:0f:95:20:79:00:cd:
                    9f:9f:43:35:73:c7:1a:3c:87:ae:67:d6:49:b3:47:
                    b0:80:22:b1:cc:fa:f7:8e:4d:3a:98:a1:5d:8e:9c:
                    50:76:39:25:b8:2d:9d:83:ee:e9:ef:12:12:51:24:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D1:DC:29:9D:70:9B:AE:F1:8F:87:C5:6C:96:DB:B3:40:14:91:E1
            X509v3 Authority Key Identifier:
                keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7f:ae:4f:a2:8d:32:06:44:84:70:09:8e:1d:66:d4:43:0e:
         f2:43:03:e9:d4:19:85:a4:90:50:98:f6:f3:a9:da:bc:71:f2:
         08:84:c7:d4:17:42:cf:2d:80:bf:33:f0:68:0a:12:5a:77:67:
         5c:a7:46:6e:3a:df:a7:53:fa:0a:8c:11:d2:ea:0e:0d:83:26:
         58:da:2c:a3:08:85:c5:57:47:bc:7b:62:6a:44:41:99:53:67:
         7b:ad:38:6c:50:ac:a8:72:8e:bb:b1:77:9a:27:e3:69:b2:b6:
         15:5a:7d:45:37:08:dc:59:01:6a:4c:02:bf:33:5d:fb:38:76:
         18:17:c7:34:9f:81:5a:f7:9a:6b:25:fb:99:b9:2a:9e:65:29:
         3f:3b:cf:b7:a8:28:ce:07:af:a0:2d:bc:16:97:08:d6:d9:cb:
         a3:df:c3:9c:4c:9f:12:49:53:9e:77:d4:cb:2d:73:17:56:30:
         c4:90:eb:5f:bf:7e:6b:db:14:3f:6d:57:6f:a6:15:bc:af:68:
         8b:5b:6b:a1:be:01:3b:30:dd:41:63:8c:57:0c:de:0f:0c:b6:
         8b:ba:ab:dd:fe:39:0f:4b:2c:ff:e3:87:a0:97:e5:17:3c:31:
         39:ba:2e:6c:c3:ce:db:6a:06:0f:ee:7c:9e:c3:f5:ce:82:c5:
         c8:4a:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:40 2026 by rpki-client