Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File:                     _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier:          GvpnRp0X05nuhh3uy1qcKvTC7114mI+RJpITZ1IzFsM=
Subject key identifier:   57:BC:20:5F:41:67:86:0C:76:FF:06:A9:C5:7E:15:C3:61:09:34:81
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer:       /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial:       08F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number:          08F0
Signing time:             Tue 24 Mar 2026 20:06:19 +0000
Manifest this update:     Tue 24 Mar 2026 20:06:19 +0000
Manifest next update:     Tue 31 Mar 2026 20:06:19 +0000
Files and hashes:         1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: +wrFSBMZjV0dlHEfVnadC82ZkaEybA7zhWsGYpN/in4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
                          rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
        Validity
            Not Before: Mar 24 20:06:19 2026 GMT
            Not After : Mar 31 20:06:19 2026 GMT
        Subject: CN=69c2eebb-84ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:14:ae:f8:55:37:9d:eb:16:c3:20:19:c2:
                    cb:ca:d7:de:60:b6:37:f3:07:9f:04:55:09:40:f8:
                    a3:62:9e:f4:dd:73:49:a6:2f:45:0c:6f:10:6f:6f:
                    3b:a5:ef:57:47:41:64:46:5d:1d:5f:29:fc:27:75:
                    c3:64:8e:96:e8:15:a9:f4:08:80:92:a6:9c:87:bf:
                    96:ea:d6:e2:04:0d:76:20:b5:cb:70:45:80:77:98:
                    d5:d4:75:64:90:17:13:a4:db:ea:7a:7f:f2:84:5f:
                    fb:79:31:45:62:27:0c:2c:36:5b:54:95:7f:b0:0e:
                    71:01:9d:bf:84:9f:34:e3:17:5a:25:b8:58:ba:8c:
                    6f:44:e3:dc:99:74:dc:f9:95:cd:ae:77:da:82:4b:
                    06:09:e4:79:bf:1c:9c:07:32:d7:bd:a9:f4:e8:43:
                    3a:05:0a:78:44:c7:fc:aa:ce:6a:d0:87:cf:8e:92:
                    a3:e2:9c:a2:04:6f:a3:72:e9:8b:d7:52:62:5b:08:
                    ca:31:1a:a1:ab:95:7a:7d:52:0c:ac:b1:6f:22:e2:
                    a9:f8:9e:75:1a:51:0e:31:37:c0:a8:d9:f2:f0:17:
                    b6:02:35:58:95:40:81:5f:de:e1:a2:37:c1:bb:70:
                    88:ad:96:4c:c7:47:47:90:84:fa:99:20:95:de:57:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BC:20:5F:41:67:86:0C:76:FF:06:A9:C5:7E:15:C3:61:09:34:81
            X509v3 Authority Key Identifier:
                keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:a1:54:15:43:29:db:c1:e5:82:d1:de:e6:f6:8e:8c:c1:
         d5:7a:82:59:d4:c5:cc:32:15:bf:34:0c:4a:87:bb:04:ab:66:
         e2:25:51:31:33:e7:f8:61:93:3b:9b:d3:da:51:3f:ed:7f:e6:
         d4:6e:4c:44:52:6e:2f:d7:f8:bf:48:99:1b:83:bc:bf:b9:62:
         3d:04:61:47:f0:ea:25:45:7f:78:8f:1e:f4:43:64:bd:51:d4:
         44:0e:44:5f:d9:67:5f:cf:38:c5:92:82:a2:3e:2e:9c:19:0d:
         21:90:89:b8:a1:cb:bd:e3:ea:57:59:8e:15:6b:7b:81:12:00:
         98:da:32:4b:46:43:0a:b0:a7:eb:03:40:d4:c0:ff:56:24:a5:
         f7:86:ce:1d:d3:eb:3d:9b:f8:a4:e3:77:ac:5b:e0:be:8f:e1:
         c0:55:25:b1:93:4b:68:42:a6:c2:c2:c0:e8:51:6f:9b:14:c9:
         22:58:a5:b1:61:8f:8d:d6:03:0a:95:7b:dd:89:17:e3:7e:e5:
         1d:03:08:9e:10:66:f2:1f:61:2c:ba:9b:3b:90:d4:32:41:03:
         f5:c4:53:3c:50:2a:a9:50:33:82:b4:15:04:b1:73:b7:e9:b6:
         3a:91:77:a2:6e:3d:a6:a0:25:17:4f:0f:d2:22:5f:f5:35:7e:
         50:ac:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:49 2026 by rpki-client