Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          3QBebpdUJQggJvFg3Hx9zQl+TMjj3XEXS4kI2f907Ak=
Subject key identifier:   F3:FF:52:8B:A1:38:65:B0:03:DE:98:2C:36:08:11:D8:FD:CC:A8:62
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          0172
Signing time:             Wed 25 Mar 2026 04:08:25 +0000
Manifest this update:     Wed 25 Mar 2026 04:08:24 +0000
Manifest next update:     Wed 01 Apr 2026 04:08:24 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: ph8+LOUFrGhzQTojdSe2Rg1VXf8VgpRWFMIdRPTlAYM=)
                          2: 55FE0314581811F09A0AB17CC4F9AE02.roa (hash: N7AUGdtpdgDTVd8OKlZjcyU8Mal3SiWnaXbx/LfK/K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Mar 25 04:08:24 2026 GMT
            Not After : Apr  1 04:08:24 2026 GMT
        Subject: CN=69c35fb9-3e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:25:f9:ef:93:8d:38:9f:2e:02:88:35:bb:
                    ec:6b:8d:e0:74:92:74:7f:7b:af:e2:bd:a9:90:0c:
                    bb:e9:89:75:f9:de:7f:ea:26:54:76:ae:02:32:a5:
                    3f:ec:86:aa:8e:f3:76:6b:e7:11:85:24:95:f3:54:
                    65:d4:c2:02:d5:06:7e:cd:5c:2e:fe:ff:a3:8d:e6:
                    12:f4:f0:c3:92:e9:a1:96:bf:c7:cf:32:ac:2e:85:
                    37:ea:70:1c:71:20:4d:f8:90:33:9b:6d:8f:0f:62:
                    36:17:8c:c0:e3:43:f2:3a:61:16:69:72:34:54:11:
                    c3:29:a2:a1:93:7b:e0:ec:50:2b:fc:e8:44:da:6a:
                    a8:be:50:60:53:e5:c1:83:cb:ca:1c:1e:f0:5f:59:
                    63:42:4e:a0:e9:e4:c2:86:2d:84:a3:a6:1a:da:cc:
                    f9:1a:21:7c:bd:d4:ad:92:b7:c0:ab:86:4b:e5:8d:
                    14:51:64:da:1d:28:09:2a:7e:c7:dc:a3:15:ed:d2:
                    eb:84:23:85:ec:f8:2d:9b:3c:fa:d6:db:56:01:c8:
                    7b:ed:47:0a:c9:c4:90:92:63:3f:bf:d3:9c:14:72:
                    23:da:45:0b:72:33:6a:23:d2:40:c9:a3:ff:e9:58:
                    73:9f:f3:a0:98:11:14:1f:64:f4:ca:87:4d:3c:f7:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:52:8B:A1:38:65:B0:03:DE:98:2C:36:08:11:D8:FD:CC:A8:62
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:d7:0f:06:1c:10:d4:d5:fb:e2:84:fe:d3:a0:b8:99:ce:
         5b:87:d0:e5:2d:dd:de:8f:90:b7:54:cf:5f:57:07:a6:09:b9:
         7e:96:30:7d:7d:20:cf:84:29:72:07:c0:6d:38:f9:03:86:13:
         64:29:ae:18:8d:8d:ff:4e:6b:9b:72:fb:52:f5:f0:97:6a:5e:
         2d:ed:3a:ea:c6:29:48:fe:c6:c7:f0:3f:07:47:bf:ee:64:81:
         1c:76:72:3f:64:3a:16:33:c0:06:9f:02:0d:c6:2e:41:e7:d1:
         d5:ea:9b:9b:7c:17:cb:3d:9b:00:19:0d:50:2d:97:fc:d8:0c:
         b9:1d:00:61:39:b0:8c:eb:8a:4f:ea:da:86:99:79:fc:e0:0c:
         9c:72:ae:2c:46:5d:c1:c0:f1:3a:f2:46:63:0e:91:d3:7e:ad:
         3e:47:3a:c0:ba:9b:66:d1:01:46:ba:98:8d:3f:da:23:bc:68:
         75:23:ee:13:fc:8d:dd:21:7b:b6:9c:1c:0c:93:65:2e:04:07:
         d0:04:dc:15:8f:cc:89:b3:7f:21:bc:48:85:8f:ff:0d:fc:12:
         b4:66:d0:f5:90:f1:78:92:71:14:63:42:cf:33:dc:a1:e9:cc:
         c3:b9:ff:bd:b2:e5:e8:f4:5d:08:b1:1d:0a:a1:d4:ff:7c:e6:
         54:23:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:20 2026 by rpki-client