Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File:                     MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier:          +MTnQOartsJEYLpjUQ3DRpB8c2MdnQr6KwI9xumYrD0=
Subject key identifier:   AA:0C:AC:32:65:02:D6:72:07:59:3A:22:87:48:E8:7F:2D:E1:2A:1C
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer:       /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial:       053C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number:          0534
Signing time:             Tue 24 Mar 2026 23:12:38 +0000
Manifest this update:     Tue 24 Mar 2026 23:12:38 +0000
Manifest next update:     Tue 31 Mar 2026 23:12:38 +0000
Files and hashes:         1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: xzP7/u3OLF0rbRNzTLEihCtpt1EufDt910ueVNBtSIo=)
                          2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: 02njxqH2L4wOnvQejnJTMQG2JPDgzeMC5zu+OD6du44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
                          rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
        Validity
            Not Before: Mar 24 23:12:38 2026 GMT
            Not After : Mar 31 23:12:38 2026 GMT
        Subject: CN=69c31a66-4248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:34:5d:78:06:e7:93:f3:e4:f8:0f:d4:1a:
                    73:b3:62:bf:55:58:e9:68:e9:00:da:79:74:bd:c2:
                    40:d7:79:e7:04:31:f1:92:c5:f2:52:04:70:d3:1b:
                    c4:de:87:71:40:d0:29:7c:3a:ab:23:02:63:e7:0f:
                    d1:f2:68:d7:8a:bb:37:68:e8:eb:17:e1:65:79:5a:
                    88:22:83:39:26:2c:2a:ed:ae:1b:d2:ea:50:52:e1:
                    db:32:88:f1:94:13:fc:ba:58:fc:ae:7f:19:46:fc:
                    ee:70:37:bd:1a:86:e2:9c:1e:f2:f5:66:4c:2a:3c:
                    b9:f0:1e:ba:eb:6c:7e:ea:24:61:6b:1a:d0:00:d7:
                    90:d8:8b:8d:65:d3:58:28:64:5b:ee:5f:8f:83:34:
                    22:ab:3b:e9:c6:cc:c8:c6:0c:25:48:e5:13:79:dc:
                    9e:1b:c5:24:43:95:d7:b8:6d:cf:61:d3:93:cb:a6:
                    93:0e:3c:16:a0:9b:85:67:5c:29:10:be:44:d0:07:
                    07:ef:2f:95:41:b5:47:eb:c5:b5:c4:af:d9:72:63:
                    83:ff:fa:8b:63:96:c5:dc:97:9c:7b:0d:d1:a4:f6:
                    b1:0f:ab:31:16:c6:37:61:6b:fb:fc:f7:f7:63:98:
                    56:16:7b:e2:18:0e:53:6c:63:67:6f:4f:ec:37:3c:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0C:AC:32:65:02:D6:72:07:59:3A:22:87:48:E8:7F:2D:E1:2A:1C
            X509v3 Authority Key Identifier:
                keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:d2:f6:24:9d:5f:38:18:70:b7:2e:42:ee:95:74:6b:29:
         f7:9b:89:ac:b8:61:a7:16:aa:ee:a9:ec:61:cb:18:1b:34:20:
         52:bf:f4:2c:1d:24:02:67:8e:4b:d2:ae:25:d7:f2:49:74:86:
         7a:9f:dc:91:c1:4e:11:0b:78:fd:81:0e:7c:c9:da:a1:a2:62:
         36:d9:6d:c4:9d:bc:e0:30:7a:9d:f1:a1:d2:d5:0e:d5:39:f9:
         9d:7b:e9:77:3f:2b:cb:ce:af:d0:b1:65:cf:e5:69:dd:b7:31:
         4b:91:5d:e5:0c:a9:9f:88:44:e4:2a:1e:05:ba:55:f1:cd:27:
         70:ed:5f:68:1f:89:2c:d6:e2:c8:4e:ad:93:eb:7d:3e:f8:b6:
         f3:2b:40:cb:3b:27:c5:54:92:e2:d2:df:d1:7f:bd:16:05:ec:
         ba:5e:69:24:fc:f6:35:42:fa:88:10:e6:a0:cb:88:6d:0e:bc:
         ac:5e:ce:12:30:87:ca:ed:38:c6:d8:ba:df:7b:96:2a:6c:51:
         85:23:8f:cc:4a:f4:91:55:cf:c6:6d:d8:83:2c:01:33:e5:93:
         d2:76:5a:99:f2:9b:4c:23:7e:09:0e:42:56:24:76:15:4e:b5:
         0c:44:b1:c0:06:fa:1c:f1:85:f5:78:bf:c5:67:37:ff:38:eb:
         89:1e:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:54 2026 by rpki-client