Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
File:                     nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json)
Hash identifier:          V0pB0QygYNqc8LctLfhQvIOawcP/X8QnBQKMCeJWpsY=
Subject key identifier:   A2:F6:34:D1:93:36:67:9F:71:41:DE:98:7E:E9:17:B8:58:64:A2:C4
Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
Certificate issuer:       /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Certificate serial:       0B4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
Manifest number:          144F
Signing time:             Tue 24 Mar 2026 19:00:35 +0000
Manifest this update:     Tue 24 Mar 2026 19:00:34 +0000
Manifest next update:     Tue 31 Mar 2026 19:00:34 +0000
Files and hashes:         1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: wcnC95rywEF6VmQ6vO9+zbjSfLT+0xhF+d73FG604jw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2892 (0xb4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
        Validity
            Not Before: Mar 24 19:00:34 2026 GMT
            Not After : Mar 31 19:00:34 2026 GMT
        Subject: CN=69c2df53-4ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:65:61:93:98:e1:2e:44:bb:d9:22:2c:6b:
                    93:ab:d3:04:2d:6a:4c:dd:60:7f:c4:48:a7:5c:dc:
                    90:be:f7:9c:b6:f6:0a:77:07:86:c7:a4:f6:25:19:
                    9f:e6:d2:80:18:49:c2:47:83:48:de:db:1c:96:10:
                    bf:d0:29:0d:e9:06:85:0d:ec:c4:75:07:78:06:94:
                    48:bd:38:8a:b9:a0:65:32:ff:f1:77:a7:95:36:b6:
                    8c:56:e5:6c:8e:0e:c5:43:13:83:e2:c1:0d:e9:98:
                    6c:ad:05:c8:b3:37:aa:98:88:2a:0b:a2:da:61:70:
                    8f:0b:72:bf:ad:ff:d4:ca:da:ff:96:12:cc:8a:4f:
                    ce:c8:76:17:8b:97:0e:5c:26:07:f3:83:fa:bd:17:
                    ac:c3:e5:7f:6b:b6:65:d0:f4:ff:83:a8:df:0a:2c:
                    72:0e:3c:f1:a1:f5:a6:47:d2:c5:27:c6:0a:78:cd:
                    7d:0b:6a:76:b6:33:33:2a:31:1c:f9:cf:df:47:62:
                    a2:60:3f:04:d1:83:a9:05:aa:f5:e2:d1:83:7b:84:
                    a5:79:e5:8d:24:c0:ad:40:fb:0c:c7:d9:56:77:75:
                    7d:86:4b:d8:29:61:04:fc:7a:26:60:c1:34:40:f5:
                    72:0f:42:39:e2:bf:2a:5e:ad:88:0a:91:cd:be:80:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F6:34:D1:93:36:67:9F:71:41:DE:98:7E:E9:17:B8:58:64:A2:C4
            X509v3 Authority Key Identifier:
                keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:e9:67:ca:71:43:b0:5a:8d:11:07:d3:43:f2:93:b2:cc:
         e7:8f:98:d8:80:04:43:22:e4:6c:75:80:5e:73:73:ea:e4:5e:
         5d:b3:99:1b:31:b9:5a:32:77:2c:01:d2:47:5e:30:41:95:bb:
         ea:17:62:13:1e:e6:79:cd:96:92:ee:7c:e7:3f:44:e4:06:fd:
         ee:b3:09:fa:80:dd:c2:36:6e:bd:11:26:c2:f8:8d:0f:a7:75:
         9d:91:bc:3c:9f:73:97:44:0e:bc:92:cc:c4:37:6f:70:df:cd:
         74:27:a9:6a:7d:15:11:c6:71:14:61:8f:f6:ed:61:da:aa:b3:
         83:15:7f:76:93:84:a9:3c:3a:98:31:b4:e9:65:52:e1:da:a8:
         55:16:65:db:7c:6b:85:d1:ac:d8:ec:10:ad:a6:36:85:6f:01:
         22:b4:ec:f5:3e:5a:db:ad:d4:91:9a:84:d0:d2:d7:1a:a8:0a:
         a4:f2:29:02:f7:e1:0b:51:36:4e:d6:1a:c8:ad:83:59:46:0c:
         b9:b7:20:97:be:c4:6e:f2:7c:9c:7d:ce:92:82:e8:70:25:7f:
         d3:97:78:06:72:13:20:b7:5e:91:0e:16:b6:24:fe:e4:0e:39:
         d4:87:d9:37:60:b9:f9:11:b2:dc:cc:c7:e2:3f:9e:94:2e:72:
         52:48:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:14 2026 by rpki-client