Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File:                     05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier:          tc4Ell8xzIIhp8UqsBP4uXwrlQn0jCTq7S1y9WZ25Ts=
Subject key identifier:   44:67:C1:42:B8:00:79:AC:8C:2E:0C:6F:61:DF:79:85:E6:F6:8B:94
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer:       /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number:          0131
Signing time:             Wed 25 Mar 2026 04:46:33 +0000
Manifest this update:     Wed 25 Mar 2026 04:46:32 +0000
Manifest next update:     Wed 01 Apr 2026 04:46:32 +0000
Files and hashes:         1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: w2hcJ+ZHdaqdW/rOGLU11QDzAt+G8NEljZdWVRb+zVU=)
                          2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: HIQTkqxEUw6fkREKneLxMJQ3JqOr/SLWIHkepYGIh7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
        Validity
            Not Before: Mar 25 04:46:32 2026 GMT
            Not After : Apr  1 04:46:32 2026 GMT
        Subject: CN=69c368a9-1a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:15:a4:d5:88:3e:20:53:94:13:c1:66:ed:
                    20:2c:62:40:27:bc:f4:b1:b4:85:4a:25:da:6a:9d:
                    70:ee:0d:ad:0b:4b:e9:11:f7:40:8c:9f:2e:ad:fc:
                    6d:b2:68:fd:82:1a:2c:b4:6c:35:8c:d0:e9:12:67:
                    f7:3f:44:c7:f6:3c:5a:64:ee:91:53:10:9a:0d:3c:
                    42:a6:68:ca:8d:6c:3d:87:0a:d3:16:75:ab:e8:65:
                    46:96:ce:ca:3b:9f:20:b4:08:df:8b:df:de:84:ec:
                    fd:af:0c:25:59:41:00:25:77:21:40:df:f2:b2:e0:
                    b4:42:d1:92:78:62:ee:5b:69:ad:71:8e:6c:c3:8b:
                    a0:b8:db:c2:26:9d:0b:25:46:e8:50:39:b5:14:28:
                    2b:5e:d6:32:08:b8:f0:8f:ec:d7:7a:62:cc:1a:57:
                    a2:11:1a:ee:6a:c7:8c:19:5f:9a:eb:e8:f8:46:d3:
                    30:76:4f:82:d8:2e:0b:31:bb:3e:2f:7c:00:a3:e8:
                    d1:95:28:e4:ee:33:de:1a:ee:0d:bd:95:77:80:01:
                    22:8a:c1:66:07:db:f8:4a:8e:b7:12:71:b5:5d:7b:
                    7c:1e:c5:db:46:1b:51:1e:c7:41:e3:a8:8a:0c:3f:
                    ac:4f:1b:e1:eb:42:43:1b:f5:38:30:32:88:88:02:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:67:C1:42:B8:00:79:AC:8C:2E:0C:6F:61:DF:79:85:E6:F6:8B:94
            X509v3 Authority Key Identifier:
                keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:e1:72:7c:fe:08:d3:18:af:e4:2d:a2:21:a3:6f:dc:9b:
         53:7e:3e:c8:59:d4:1e:20:0d:22:88:60:af:55:11:b9:21:e5:
         7f:94:57:4c:6d:6e:e6:98:1f:c9:79:ab:30:c6:30:2c:f0:b6:
         25:28:0b:f7:e1:e0:bb:a4:20:11:06:57:6a:5b:d7:79:f4:57:
         db:33:cc:bd:9a:56:be:30:16:24:fa:98:71:c0:a9:38:cd:95:
         80:7d:fd:d7:2c:34:41:0a:c9:62:e8:0a:f2:40:91:52:15:9f:
         fb:43:0e:77:9e:3c:0d:a8:22:2e:91:66:5b:74:fd:39:05:b9:
         90:3b:fe:c0:cd:64:85:45:92:1b:1b:2a:05:5d:7b:1a:f3:8e:
         48:e5:12:c5:89:cd:45:09:b0:19:bb:b8:57:11:97:89:29:f0:
         ef:f2:ad:a8:56:28:1b:62:a0:a2:3b:d4:42:da:83:0b:58:b2:
         6f:62:b1:f3:18:46:21:6b:12:29:78:30:7e:73:3f:16:0b:2a:
         11:dc:f4:e3:34:a7:69:0b:96:c7:3a:be:c8:38:45:34:59:96:
         61:b9:bc:73:43:29:de:71:8b:c7:c4:01:e7:99:6d:ec:24:bf:
         e9:ae:82:68:0d:87:96:e6:3d:52:5d:3b:85:fd:57:90:08:cd:
         0e:25:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:23 2026 by rpki-client