Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
File:                     sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json)
Hash identifier:          DDxsasFq4tsW4lui6U7vdL5yFOMHLW6dd8pTTiz9wn8=
Subject key identifier:   AD:3E:48:C8:2F:0B:35:E3:F1:75:83:9F:35:CD:85:71:78:0D:2A:B6
Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95
Certificate issuer:       /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
Certificate serial:       03C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
Manifest number:          03C1
Signing time:             Wed 25 Mar 2026 00:18:35 +0000
Manifest this update:     Wed 25 Mar 2026 00:18:35 +0000
Manifest next update:     Wed 01 Apr 2026 00:18:35 +0000
Files and hashes:         1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: Wnm5ykWiIy4uqV6YuV589QtPmex4KIy4CgB2V81o87g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl
                          rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
        Validity
            Not Before: Mar 25 00:18:35 2026 GMT
            Not After : Apr  1 00:18:35 2026 GMT
        Subject: CN=69c329db-1d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:bc:01:c1:cd:5f:5a:aa:ef:f6:a1:bc:9e:
                    e6:47:1d:37:92:d8:f0:cc:c5:73:61:5c:5a:c7:10:
                    7d:8c:5d:0b:80:5c:7c:61:bf:d3:11:e1:f5:30:b7:
                    36:25:7a:bb:03:78:29:e7:18:82:51:e3:bb:b3:75:
                    e0:06:ad:78:d9:91:c1:06:a5:55:73:d9:3b:63:3b:
                    c6:d8:86:c1:91:e0:67:8f:2a:7f:48:8b:10:1f:bb:
                    5a:fd:bf:dc:75:05:de:39:80:99:b3:8c:68:86:f1:
                    0c:d8:ef:73:05:73:11:70:b9:c0:93:43:ef:4a:5f:
                    85:7d:b0:64:b4:0f:d4:c1:6d:4b:c0:e6:3d:14:91:
                    9a:63:a9:09:88:e3:a9:15:67:60:60:b9:88:37:86:
                    8a:09:88:7d:40:e7:da:5d:65:56:29:6a:39:fc:1a:
                    70:b1:cb:ae:95:f8:de:1f:1c:71:70:a5:8e:7e:97:
                    6c:21:0c:e5:cf:e1:16:5f:af:0a:47:d4:b1:84:32:
                    b8:29:db:18:55:43:a0:2a:1e:6f:4f:c2:27:40:d9:
                    dd:e9:f8:d5:6b:37:b2:ac:30:40:f8:80:af:6c:59:
                    e0:12:69:4a:58:b2:d2:bf:97:aa:10:e6:4f:ac:0a:
                    4c:63:3c:00:07:af:82:a7:6e:fd:ec:94:02:b1:00:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:48:C8:2F:0B:35:E3:F1:75:83:9F:35:CD:85:71:78:0D:2A:B6
            X509v3 Authority Key Identifier:
                keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b0:87:c4:2e:0b:3f:a7:93:5c:90:4f:37:da:0f:aa:e8:47:
         32:c8:50:80:22:26:43:03:6e:c7:4a:00:e3:d6:50:70:1d:f5:
         84:7c:58:89:cf:a6:a5:ee:92:d2:11:c4:01:5b:d0:10:78:87:
         e5:80:b5:d0:71:78:03:b2:da:fe:3e:25:71:9b:f7:c7:b9:d1:
         9f:30:bd:c9:38:f0:03:74:4a:76:a9:6f:b5:aa:4f:98:83:24:
         c0:88:6a:64:b5:1f:86:52:a2:47:76:dd:44:ba:8f:57:7e:6d:
         3d:b0:af:7d:a3:c0:25:a9:1f:9c:c3:9e:96:8c:1c:27:30:64:
         ac:f5:20:42:d9:aa:a2:cc:dd:7a:d4:3f:5e:94:7f:27:66:b3:
         01:d2:0b:fa:d8:e2:e5:6c:68:a9:cc:fd:65:72:44:ba:83:15:
         0c:c5:c5:59:93:b5:d6:58:07:b0:9a:63:1f:8a:ec:f1:c1:76:
         f0:84:d2:5e:f5:28:99:35:1e:d2:98:6f:89:58:d4:c4:eb:aa:
         56:bc:fd:76:fa:ec:c3:a6:2b:3c:95:d3:26:e1:f3:6b:9c:7f:
         b7:95:bb:63:48:86:a9:55:0e:3d:2b:d8:38:f1:3c:a3:87:c6:
         a6:dd:f9:2a:1c:67:20:d7:36:a8:17:84:34:45:e2:d1:d4:c0:
         6a:95:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:47 2026 by rpki-client