Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
File:                     _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json)
Hash identifier:          3ts3xdggxl1zprpJYGkiWnWRvv0YAWytEYKVX03Wlds=
Subject key identifier:   63:C5:BF:86:11:2C:AC:A9:34:C4:07:0E:8C:B1:52:CF:DE:53:11:C6
Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
Certificate issuer:       /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
Certificate serial:       0BAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
Manifest number:          0BA4
Signing time:             Tue 24 Mar 2026 18:51:14 +0000
Manifest this update:     Tue 24 Mar 2026 18:51:13 +0000
Manifest next update:     Tue 31 Mar 2026 18:51:13 +0000
Files and hashes:         1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: vk5wSsYbL9jtqoEsz33npUwTfdEColCN8s4cWxIMG7A=)
                          2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: tgDOCbKwmjyp6bvMW7YcW8XxCX4tWOYG/agYINdY5ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl
                          rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2991 (0xbaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
        Validity
            Not Before: Mar 24 18:51:13 2026 GMT
            Not After : Mar 31 18:51:13 2026 GMT
        Subject: CN=69c2dd21-9e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:29:85:4d:95:0d:ea:04:9f:8a:ba:aa:e3:
                    28:f3:42:9e:7a:ef:9d:3e:c1:c3:d0:bc:32:38:c6:
                    c7:a1:19:fd:b7:b7:f9:53:9f:12:e2:48:d7:a6:ae:
                    e9:0b:e5:68:ec:d0:44:79:28:7b:b8:1e:a9:a7:14:
                    9f:1f:92:d2:26:50:3c:8e:f4:e8:8c:39:0f:9d:50:
                    79:ef:e1:c1:fa:22:ca:d1:10:09:4f:ef:91:58:28:
                    b7:a3:82:05:68:91:ab:48:19:56:f3:3a:e3:44:ea:
                    62:38:d0:c5:e7:cf:d8:98:ca:38:9e:d5:e2:6c:f4:
                    e2:a8:d0:d8:32:52:49:1d:0f:10:a6:13:b0:ad:b4:
                    e0:54:c5:90:31:16:0d:5d:22:05:74:36:a0:ca:e8:
                    f1:e5:8f:e4:7e:96:2c:33:34:72:72:c2:37:f4:69:
                    a4:f8:f0:3c:73:b5:f5:83:c9:50:e6:8c:ba:39:23:
                    72:5c:56:e7:a1:93:84:b5:df:f9:c2:b9:3b:b4:98:
                    ce:3e:2c:c5:b0:8c:16:b3:e1:b7:3b:78:7f:35:81:
                    2f:4e:69:27:f4:10:00:1f:a8:5d:3f:8b:4a:9b:96:
                    f0:b0:44:53:d3:13:a7:6b:27:1c:da:24:56:7d:4d:
                    9a:f1:98:e0:d2:da:c0:6e:89:3f:d4:60:38:c7:1f:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C5:BF:86:11:2C:AC:A9:34:C4:07:0E:8C:B1:52:CF:DE:53:11:C6
            X509v3 Authority Key Identifier:
                keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:32:dd:c8:e8:81:56:e3:48:21:36:21:13:f5:b1:40:dc:
         73:76:89:20:fd:a2:ce:f6:d6:56:a5:5b:8c:9a:9c:8c:38:8f:
         9c:c2:f9:dd:1e:c3:7a:1e:28:a9:ce:05:0b:61:15:8f:86:a4:
         ae:3a:76:53:1a:e2:6f:40:d2:0e:27:54:33:e5:d1:df:85:d7:
         30:04:ac:c8:74:d2:53:9a:b3:78:5c:1d:2c:37:3f:cf:39:e1:
         c6:c1:f0:ae:02:b9:6d:4b:79:64:a0:48:98:ad:1d:0e:83:aa:
         51:4c:af:b6:38:7c:10:b5:ef:c7:df:17:4b:32:71:fd:57:1b:
         13:29:6c:c1:47:e0:65:a1:0f:fe:c8:ca:32:67:68:41:f9:62:
         ee:7a:e2:97:fd:c7:0f:29:31:18:38:82:80:a6:4e:2a:97:81:
         ca:ae:d7:44:52:07:3a:81:63:ab:0a:91:01:76:60:69:5f:c8:
         33:7d:8b:8a:82:e1:5b:8c:ee:46:5d:a4:5d:cb:8d:d0:66:1e:
         a1:71:8d:08:e0:1b:7a:b3:50:59:57:06:0f:9f:89:60:e5:c5:
         1c:ef:09:3c:d3:b8:50:bc:44:74:fc:69:01:49:c1:d7:ae:62:
         eb:1b:f4:8a:5d:c4:0f:3a:d7:ad:a4:3e:aa:e1:a4:c0:f3:19:
         82:1e:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:28 2026 by rpki-client