Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          dacPHrNb9WVwx+yNZ22QRooVz9Fqn15vrfj8MV2CrZc=
Subject key identifier:   E0:F2:F1:34:F6:5A:8C:7A:32:02:92:40:27:12:B3:8F:80:1E:58:8E
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          0257
Signing time:             Wed 25 Mar 2026 01:40:09 +0000
Manifest this update:     Wed 25 Mar 2026 01:40:08 +0000
Manifest next update:     Wed 01 Apr 2026 01:40:08 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: 1Y7kOz9MsiEDHgiATQTYSokWQJsY2VhpeqGU2fe3WrE=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: evtrgH99xTRhsjxDYSVy8xCMMoeXXNDwtZDEk4wJBb0=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: 8Xdi8ir9IzionCTHsxTwuX8olpBr+epxWoFk8JYRHpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Mar 25 01:40:08 2026 GMT
            Not After : Apr  1 01:40:08 2026 GMT
        Subject: CN=69c33cf9-c2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:b2:cf:b8:60:e2:09:f5:9f:6f:52:21:da:
                    02:9d:32:5e:62:17:a7:55:95:c6:ae:7f:00:8c:ae:
                    76:03:7c:a7:3b:a0:df:a5:2e:85:20:0d:0c:c7:59:
                    54:0e:a1:55:03:ae:cb:f6:67:d4:f6:5b:8c:1f:47:
                    1c:64:28:66:90:7c:5a:dd:98:a1:ed:1b:4f:d6:ae:
                    9a:ec:43:fb:fc:97:74:bc:70:59:2a:67:2f:78:3b:
                    79:14:34:c4:55:70:48:64:f0:57:22:5a:41:c6:e4:
                    d7:d5:f2:42:f9:1f:02:42:64:89:44:44:af:7d:80:
                    1c:34:ff:11:1b:51:27:6e:2c:05:56:df:68:46:c0:
                    b6:1a:b7:c6:f1:d6:52:e2:fa:34:16:ac:9b:aa:e8:
                    70:d6:79:cd:e9:29:26:f7:25:81:90:44:5e:d0:f8:
                    2b:74:a2:4e:e6:46:09:c6:12:22:eb:13:1c:f8:ca:
                    dc:62:29:b4:e9:a9:25:f3:31:30:13:03:ac:96:d2:
                    ac:18:0d:5a:e9:5d:0c:fc:a5:e8:15:25:f0:46:07:
                    15:be:7f:b2:f4:b4:96:33:a4:eb:4b:8d:3e:09:e7:
                    8d:df:5a:0c:a2:f9:5e:2a:16:10:cd:9f:81:b9:4c:
                    b3:3f:9e:3e:8a:50:1a:b4:49:68:d0:0b:b3:59:c4:
                    fe:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F2:F1:34:F6:5A:8C:7A:32:02:92:40:27:12:B3:8F:80:1E:58:8E
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:14:ac:a9:f5:4d:ec:d3:cd:d4:d6:e0:06:60:9e:8e:90:22:
         8d:1f:9b:92:ad:4f:bf:5b:6c:9b:78:bb:78:a6:90:90:48:d4:
         9e:19:cb:53:0b:fb:91:a8:6a:81:e0:b8:71:92:f8:b9:91:ae:
         86:03:da:8b:4a:fe:85:38:12:fd:ec:38:3a:a4:de:a1:88:23:
         6b:b6:5c:8f:54:cb:9c:97:b0:31:d3:a2:bf:55:e6:78:ab:c6:
         40:21:56:e9:27:1d:a9:10:87:62:4f:d3:f3:33:26:c2:96:26:
         dd:c9:92:c3:e0:d6:60:51:fc:66:b6:3b:0b:78:a3:ad:aa:f2:
         d0:49:5d:af:87:1e:9f:77:46:4a:c9:48:96:01:c9:d0:fe:75:
         52:8b:5c:f6:c2:3d:97:31:2d:bd:1e:5e:db:c9:7d:a7:3b:9f:
         ac:06:8e:9d:07:ca:61:67:f4:94:17:32:a0:ce:f8:0a:76:80:
         2c:24:16:d8:b5:0f:cd:8f:a8:4d:83:39:fd:43:8c:f2:4d:e1:
         32:9f:c3:73:98:19:d7:d3:eb:18:0e:84:9b:a6:0e:cf:2e:cc:
         61:20:22:92:3b:65:7b:43:95:86:e9:cc:e0:af:eb:45:62:c3:
         3d:b0:01:df:73:33:da:7e:91:de:ad:23:d6:ce:d2:26:90:ad:
         4e:6c:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:49 2026 by rpki-client