Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File:                     99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier:          3CQZnrK6TSLoyxNpo31dGvl+612w4wDZXgjfkKv0XQg=
Subject key identifier:   4B:BA:F0:FD:B9:07:94:AF:97:F3:CD:BE:A7:AC:44:E9:2B:C6:48:64
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1B43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number:          1AF3
Signing time:             Thu 26 Mar 2026 16:17:12 +0000
Manifest this update:     Thu 26 Mar 2026 16:17:11 +0000
Manifest next update:     Thu 02 Apr 2026 16:17:11 +0000
Files and hashes:         1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: e2rn0AYKQu005VLX478dscuPSPPrDbEJWTP+6Q8zhoA=)
                          2: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: +E60rSGUYX8GfoBZfNcoqE6lK5JivMoN19MLhP10yWo=)
                          3: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: TBuvrNVeBsJKro4CZ3FR9nUNf80lrjnYo0JImSNFCnk=)
                          4: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: M8zWm6WUKawoHzJimLR5O8wEYXt57GS8vbOPe6J/SyA=)
                          5: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: ar4CjDKEwiv8hNV8LHXTUs+z+lADBs8QY5ug8DjXXe4=)
                          6: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: iL5if3fKju/R7iAzf9zF9TJsTs13/ku7HzfTITgSLX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6979 (0x1b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Mar 26 16:17:11 2026 GMT
            Not After : Apr  2 16:17:11 2026 GMT
        Subject: CN=69c55c07-c4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6b:8c:bd:63:e4:3c:da:b9:7b:3e:09:85:96:
                    52:6a:c1:99:b9:85:ea:59:4f:ab:fd:83:0f:48:c3:
                    47:bc:7c:07:86:1e:cd:f0:f7:6a:37:97:67:de:93:
                    30:81:17:9f:a4:d6:7c:2f:39:2e:b6:d6:73:7e:e2:
                    fb:d0:10:0c:87:6f:51:ae:a8:08:e3:f2:03:3e:6a:
                    e7:39:7a:bd:bd:3f:00:66:18:e6:ff:6e:d4:79:ae:
                    dd:67:67:96:11:0c:9b:b9:5d:71:03:59:64:f8:08:
                    84:02:18:82:7a:21:41:fd:a4:18:61:0d:90:fb:5d:
                    74:d5:8a:84:1e:d5:0a:8b:f7:dd:20:fd:15:2e:a6:
                    ec:6c:bb:db:47:cb:62:d0:f2:51:0d:f0:03:b4:47:
                    04:16:df:21:37:05:26:3a:e4:eb:4e:d8:1f:dd:8d:
                    33:39:25:76:2d:3a:a2:38:b1:ce:80:c7:76:3d:3b:
                    87:bd:ce:32:fd:61:d8:7a:fb:1b:d3:d3:dd:0d:36:
                    6d:81:7e:8e:15:3d:fe:5f:06:40:b3:26:a1:04:bc:
                    ff:51:fe:dc:a3:e4:50:4e:5c:d7:25:07:d4:bd:33:
                    59:e3:cb:55:1a:fe:68:81:9d:e1:61:5a:4d:1c:aa:
                    e6:b6:0c:55:d4:27:8a:e1:49:cb:1d:50:47:51:f2:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BA:F0:FD:B9:07:94:AF:97:F3:CD:BE:A7:AC:44:E9:2B:C6:48:64
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:9b:0c:6d:fe:cc:d4:98:ee:c4:c0:bd:7e:5c:e0:49:64:
         cc:0e:14:f4:a5:f6:b5:a2:c7:90:c5:73:38:6c:53:4b:28:e4:
         74:8b:c3:3d:29:e9:f8:98:20:03:59:be:3e:3a:7f:bc:fd:78:
         36:f7:14:a8:ed:e9:03:ee:9b:ee:88:2c:0a:64:70:5c:40:c1:
         45:c5:fd:ab:75:d4:e3:a4:40:3d:fd:0e:08:bb:45:e3:e2:3d:
         43:bc:bf:64:26:e2:de:19:9d:1d:e4:21:d8:77:72:d1:80:59:
         a4:2f:dc:ba:ac:66:86:e2:1c:a0:c0:8d:fd:b7:91:74:47:f4:
         b7:11:39:47:d1:fc:28:18:51:96:1e:55:5c:f2:d5:f6:c1:75:
         f3:2a:67:58:17:d5:94:01:29:6c:5d:6b:ba:e3:57:00:bb:c4:
         4d:f8:1f:05:b6:6c:48:75:ab:c7:2c:cf:5c:94:e4:4d:34:59:
         a5:75:b4:de:1b:cc:fe:81:e4:bc:9b:6a:ef:6e:bf:73:f3:ae:
         8c:f4:bd:a5:12:05:7c:16:f0:30:f1:d9:b3:49:88:59:ec:df:
         7b:a2:bc:bf:43:90:f7:05:c9:08:93:8e:e3:2f:d5:31:10:8b:
         b3:8f:13:e2:0a:5d:68:34:44:45:7a:0b:a9:6a:2d:73:d4:bf:
         22:2e:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:31:53 2026 by rpki-client