Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
File:                     clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json)
Hash identifier:          1VLQtvnXKzbR73t2OzIYkNwlMnEkswUfI7MT7OYxgu0=
Subject key identifier:   A7:FD:0A:EE:87:08:69:A7:9B:0E:E7:D8:CB:28:F1:BD:56:60:60:3F
Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50
Certificate issuer:       /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
Manifest number:          0296
Signing time:             Wed 25 Mar 2026 01:13:14 +0000
Manifest this update:     Wed 25 Mar 2026 01:13:13 +0000
Manifest next update:     Wed 01 Apr 2026 01:13:13 +0000
Files and hashes:         1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: j0pNiL2g+P89rnWnH9VRNkTaQ/e3DSHwY0EgRVGdoz4=)
                          2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: FvWl4kxulrX5op+c9YNYXW1TSJd48nPBwMiQZTc1tI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl
                          rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
        Validity
            Not Before: Mar 25 01:13:13 2026 GMT
            Not After : Apr  1 01:13:13 2026 GMT
        Subject: CN=69c336aa-5622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:81:b1:77:69:91:91:57:9f:74:9d:7d:03:
                    06:de:4d:03:18:f9:d4:13:78:5e:f2:d7:5f:14:13:
                    84:5b:67:fe:d5:b0:3d:f6:07:91:e7:b3:e9:88:e5:
                    61:99:65:da:56:ea:7d:5a:fc:f9:02:f0:99:5a:19:
                    e9:14:68:d7:4f:a2:ba:a8:2c:bc:64:c9:4e:67:81:
                    52:3a:b5:9b:bc:01:0e:c3:03:24:07:86:b1:1c:ab:
                    a1:67:64:5a:3a:96:b4:2e:c0:b6:74:fb:04:0b:58:
                    b9:c9:97:bb:fd:44:e6:f6:75:23:1b:e3:cc:32:f7:
                    31:55:0c:f5:71:ec:3c:e1:e5:72:24:de:a1:ea:b0:
                    0b:e2:57:02:3c:04:2f:92:88:a2:be:66:45:b9:1a:
                    87:c5:00:05:c1:65:df:58:ea:e6:e7:72:bf:64:b8:
                    35:9f:66:1a:bc:58:40:d6:75:4d:7c:c9:d7:2d:38:
                    f4:c9:d8:38:cb:d8:19:a3:6f:d6:37:82:b7:c8:1a:
                    97:d1:4c:69:a9:5d:af:c2:00:3e:64:ec:5f:94:d4:
                    fc:34:ed:04:1a:4e:03:e1:17:bd:8d:72:87:01:33:
                    8b:9a:d0:4f:3d:d0:a7:ba:2b:56:40:03:4f:bd:bc:
                    3f:ef:6d:bd:9d:3c:7e:d6:97:a3:a9:24:46:bd:32:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FD:0A:EE:87:08:69:A7:9B:0E:E7:D8:CB:28:F1:BD:56:60:60:3F
            X509v3 Authority Key Identifier:
                keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:be:fa:b0:ef:47:b7:57:cc:3d:74:18:63:de:c2:34:d9:f5:
         44:02:de:5e:a7:34:8a:7b:bd:3e:aa:0a:4d:63:fa:ae:e1:34:
         6d:9b:24:a9:ec:4d:3b:4b:c6:75:2b:8e:2b:22:e4:c2:6d:a8:
         32:f2:25:2e:c8:8e:53:c0:55:5e:d5:e4:24:74:44:a6:f8:98:
         69:bb:aa:e7:2c:e9:a7:9e:d8:25:31:84:8e:41:6a:e3:f8:2a:
         c3:db:ab:0a:eb:0e:64:73:cf:d0:25:0b:fe:68:ec:b2:61:0c:
         90:ee:96:f4:66:1c:d4:6f:92:9e:a6:a4:70:39:1b:48:de:5e:
         f7:e3:bd:e4:d0:89:83:9f:5e:0e:8f:bf:bb:3a:25:83:fb:94:
         2a:94:16:81:ad:23:83:79:6e:7e:b1:79:40:87:19:ad:c0:11:
         79:62:b6:17:d1:a7:7e:a6:f0:aa:84:2b:cc:80:99:76:06:2c:
         c4:94:c3:3a:5c:7e:01:ef:bf:4c:12:68:cc:94:94:4c:76:04:
         3a:04:bd:e3:4e:72:a2:ca:b4:de:5c:3f:d7:36:66:36:3c:0f:
         48:90:4c:00:23:00:d4:f2:42:8f:2d:cf:1a:c0:1c:a9:32:35:
         bd:d5:47:be:4c:c1:43:34:e4:57:01:61:f7:11:c8:3e:20:cf:
         79:51:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:15 2026 by rpki-client