Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
File:                     i0WgWBIZndhsv8hCI_2BqzMGJrk.mft (raw, json)
Hash identifier:          8TnduxHAu4HvhhWQyuzTkKSK6KJBF+LHXnC5rXUUtT4=
Subject key identifier:   F0:66:E6:A0:B9:A8:2B:54:77:CA:34:5C:C8:49:BB:76:15:53:F2:01
Authority key identifier: 8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9
Certificate issuer:       /CN=A919762A/serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
Manifest number:          63
Signing time:             Wed 25 Mar 2026 07:12:48 +0000
Manifest this update:     Wed 25 Mar 2026 07:12:47 +0000
Manifest next update:     Wed 01 Apr 2026 07:12:47 +0000
Files and hashes:         1: i0WgWBIZndhsv8hCI_2BqzMGJrk.crl (hash: uPkrOG1rYuBtbHB+3jWbBaOQbIdgusxa5+wlO9dZ1ic=)
                          2: 9724DB52944911F0BBB4490AC4F9AE02.roa (hash: lrnY90MK4IZ1+v8LT/IR8+iuZQ3iOAKAABMyKp5uRJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl
                          rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919762A, serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
        Validity
            Not Before: Mar 25 07:12:47 2026 GMT
            Not After : Apr  1 07:12:47 2026 GMT
        Subject: CN=69c38af0-7e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:07:66:82:41:cb:d8:9e:7b:88:5b:88:b1:
                    4e:5a:46:58:9c:54:bf:82:69:bf:20:2d:b0:35:ba:
                    91:b6:2e:4b:98:ee:d6:4d:65:0f:98:f2:42:25:b3:
                    ac:20:dc:b1:ef:a1:95:4d:f2:36:2b:45:aa:8c:71:
                    7c:41:ba:23:d5:81:e2:d6:c3:a8:71:43:0f:71:9a:
                    1f:93:69:0a:b6:80:e5:ce:b3:c3:55:47:55:54:61:
                    0c:82:d7:c2:07:d1:09:79:84:1e:b5:d0:cb:59:cd:
                    29:4a:33:ac:84:6a:6b:d0:54:14:cf:dc:94:2d:0f:
                    f6:ab:2b:da:86:b6:78:da:75:4b:c4:af:57:a4:eb:
                    be:e4:b9:48:30:b6:92:07:b6:3a:34:a5:34:6c:a8:
                    10:02:f9:e8:6d:ba:07:ea:c8:4a:f6:8d:6c:33:a2:
                    a9:2e:c9:90:0f:46:28:fb:79:d7:6f:04:de:c5:03:
                    e3:1b:e1:f0:0f:a4:d0:67:c7:a5:3e:be:8d:0d:f7:
                    c0:33:3e:29:81:29:a7:86:20:78:39:1c:8f:81:2b:
                    fd:ea:c3:80:11:38:d4:31:12:3b:26:ef:18:e7:9a:
                    de:57:76:4b:f0:ef:36:6d:7f:12:34:b9:dc:ef:06:
                    43:75:06:bc:18:88:77:86:85:be:ec:d0:73:44:83:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:66:E6:A0:B9:A8:2B:54:77:CA:34:5C:C8:49:BB:76:15:53:F2:01
            X509v3 Authority Key Identifier:
                keyid:8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:12:60:90:af:4d:df:bf:2b:ff:e2:bc:e5:19:71:e2:43:dd:
         fc:44:2f:dd:b4:fc:01:d5:75:5c:46:dc:ff:05:23:d1:6d:c6:
         3c:9b:3a:c9:14:ac:85:69:e1:d2:61:a4:39:c0:68:90:ef:6f:
         c6:fa:ff:de:63:73:b0:d2:8f:a7:51:2e:99:2e:a3:df:cb:ae:
         d2:99:28:2f:7c:25:c2:5b:10:62:09:33:d4:9c:4c:f4:c9:e8:
         d6:59:90:1a:0b:41:03:89:c2:da:0d:9c:ed:e1:3a:0a:1b:97:
         2d:b3:ef:b1:95:05:3c:d2:99:ad:88:60:b1:a7:09:3b:51:c8:
         e3:bd:31:d2:bb:9e:9a:53:9c:f4:cb:26:b9:d8:9d:d2:33:b5:
         d2:92:a7:5e:f8:97:0b:49:4b:52:f6:d5:15:26:1d:bf:30:3d:
         ab:88:df:e5:21:10:52:9e:6d:e8:bd:bc:2d:b0:bd:f9:36:c8:
         6f:4b:44:2e:60:23:6e:43:ac:b2:3c:de:2c:6d:b9:ac:90:7d:
         c0:e9:ce:ac:e9:c5:43:df:ed:dc:73:68:79:f0:5f:a4:70:e6:
         1d:d6:da:19:bc:49:41:cf:a2:b8:22:84:e5:f8:1f:f7:5e:b8:
         55:67:e2:1f:73:5d:46:0c:de:4e:d0:d2:ce:7a:04:de:7b:a5:
         4c:a8:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:55 2026 by rpki-client