Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
File:                     c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json)
Hash identifier:          wbtJk6SYT7FINPOorhu/i5fjXseGpblfIQKv6Oov9m4=
Subject key identifier:   3E:DD:B9:40:F0:C4:7B:41:EF:E9:09:77:13:0E:29:52:58:BC:A2:7B
Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E
Certificate issuer:       /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
Manifest number:          0140
Signing time:             Sun 05 Apr 2026 04:44:41 +0000
Manifest this update:     Sun 05 Apr 2026 04:44:41 +0000
Manifest next update:     Sun 12 Apr 2026 04:44:41 +0000
Files and hashes:         1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: HiMtyKpfUg2S9aZTmCcu7jD3I4cKDVHLPRwkrHvZbmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl
                          rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E
        Validity
            Not Before: Apr  5 04:44:41 2026 GMT
            Not After : Apr 12 04:44:41 2026 GMT
        Subject: CN=69d1e8b9-44db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:84:e3:7d:1f:32:05:ff:75:24:8c:51:34:
                    73:e6:b3:e5:38:9f:56:2c:aa:c3:d7:7c:20:39:18:
                    89:e9:0b:77:81:6b:45:b4:bf:8c:ae:65:f0:6d:a6:
                    49:e3:fb:43:98:ec:c4:61:da:ae:32:5e:d6:cf:83:
                    b1:85:7d:b1:72:50:2e:69:6e:07:5c:c6:c7:90:e6:
                    b8:bb:45:c2:3d:b5:3b:7a:4c:4c:c9:a2:48:15:26:
                    e1:a1:9c:0d:21:e8:97:76:0e:35:23:06:51:c3:f7:
                    d8:eb:73:a9:62:25:eb:c9:83:43:5c:0f:4a:3b:ef:
                    c7:f3:06:cf:88:65:85:2f:72:94:7e:7a:36:4c:e6:
                    1b:3d:5c:1b:34:0d:ff:9b:61:53:fc:87:67:e3:cb:
                    9d:cd:45:ca:ee:69:25:92:97:09:9c:d2:00:a8:f9:
                    85:b2:88:f5:46:4e:bc:f2:de:37:22:5c:b4:bc:30:
                    e2:af:93:73:a7:dc:f3:20:00:21:d5:8e:5d:84:00:
                    ac:1b:c3:fb:18:a8:38:00:8a:0a:56:a7:e5:5b:de:
                    8b:85:bd:a3:e9:94:2c:ec:4c:b0:cb:fb:0a:7c:3a:
                    be:fb:c5:9b:03:e3:d0:db:41:58:6e:2a:d2:9f:9f:
                    50:03:11:17:52:c8:68:68:7d:f7:1e:29:1f:04:20:
                    7d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DD:B9:40:F0:C4:7B:41:EF:E9:09:77:13:0E:29:52:58:BC:A2:7B
            X509v3 Authority Key Identifier:
                keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:64:4e:e1:43:f3:01:29:30:25:92:2f:08:5e:61:50:e3:9f:
         e0:d2:e7:b2:ab:d4:f7:33:82:41:d0:63:e1:60:eb:43:52:94:
         16:9a:a3:e0:bd:7c:31:c6:f0:37:03:d0:fa:8f:46:a8:67:5d:
         33:f5:01:28:4e:94:44:61:06:01:0b:d5:9f:16:2b:26:d7:48:
         b2:cd:6a:92:b9:3b:cd:82:b1:84:7f:71:fb:ce:10:f8:05:27:
         f4:63:c2:18:bf:79:32:7a:35:e5:41:42:c7:27:88:ff:30:f6:
         5c:2f:7e:fd:3f:77:ef:3c:e0:cd:c4:62:bf:44:a3:53:68:0c:
         bd:6f:80:3f:20:bc:d7:6a:78:e5:dd:95:ba:9b:8b:0a:00:32:
         d0:8f:46:54:14:cf:78:38:d8:68:a8:fc:d6:b2:c1:00:c5:bd:
         27:03:69:3d:e7:04:8e:c4:30:d3:5b:9f:ce:01:fb:e1:e6:fd:
         c3:7d:c5:68:b8:69:b7:d9:e1:71:1a:85:e6:de:9d:57:d3:1a:
         73:d5:a7:b8:5a:d5:82:0d:01:91:63:ce:48:4b:d3:db:5c:6c:
         15:81:cb:17:90:10:39:b7:84:89:b1:bb:de:93:94:62:e9:4a:
         58:87:9d:01:38:53:f4:1b:a5:3c:0f:b9:93:ef:d4:2a:17:4c:
         14:93:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:11 2026 by rpki-client