Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File:                     nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier:          g9UD24DjdtZ7PHEAQlko0iYTkMoekaXNurCwkj2wxCs=
Subject key identifier:   DA:45:4F:98:A7:69:E3:F4:C0:E2:E3:3F:3F:A2:85:9F:ED:F8:6B:76
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer:       /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number:          01D1
Signing time:             Tue 17 Mar 2026 03:05:17 +0000
Manifest this update:     Tue 17 Mar 2026 03:05:16 +0000
Manifest next update:     Tue 24 Mar 2026 03:05:16 +0000
Files and hashes:         1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: hmPcdbhrUWnb+qLpJ5HtsO/TRyqbW8m6+CBb5wTRdko=)
                          2: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
                          3: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
                          4: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
                          5: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
                          6: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
                          7: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
                          8: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
                          9: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
                          rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Mar 2026 03:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
        Validity
            Not Before: Mar 17 03:05:16 2026 GMT
            Not After : Mar 24 03:05:16 2026 GMT
        Subject: CN=69b8c4ed-02f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:d4:1c:bf:b0:59:ed:d7:0f:ce:32:f1:46:
                    78:ac:57:2c:8e:3e:06:49:cc:f8:1f:9d:3f:f3:a8:
                    30:c8:86:ce:61:50:07:47:6f:d9:c5:6d:e5:8d:bc:
                    a5:46:e8:eb:e8:1f:80:48:fb:48:e8:eb:10:09:39:
                    07:a6:96:f3:79:e5:d6:5d:d4:51:6c:1d:d4:8f:8d:
                    65:12:f1:8a:eb:a4:35:7a:44:7e:7b:11:d6:f5:1c:
                    51:e7:b6:69:16:40:91:43:21:67:8a:fe:14:f6:ce:
                    fb:5d:de:32:c2:2a:43:44:5d:6e:28:26:99:6e:52:
                    c0:cd:18:16:ce:ca:5b:25:11:b7:fa:2f:d6:d0:1d:
                    a3:14:8e:21:72:9f:8d:8a:b2:90:ce:f8:0f:b1:2f:
                    a2:17:81:36:88:01:20:fc:4f:6d:f9:fe:ca:96:3c:
                    9d:6a:88:66:56:6d:fc:9e:02:a1:97:6f:2e:b8:51:
                    3e:66:6d:79:ec:c9:fc:1f:85:ee:e7:b0:32:36:6d:
                    2e:55:ca:e0:a4:da:51:4d:85:24:e2:0a:75:66:da:
                    a6:2b:1e:b4:5f:46:44:37:73:3d:d3:e1:c0:dc:d2:
                    ea:b5:5b:3d:dd:fa:b1:da:bb:83:fe:ef:06:8f:65:
                    1d:08:16:af:d4:79:e0:05:01:c5:94:0a:99:13:fd:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:4F:98:A7:69:E3:F4:C0:E2:E3:3F:3F:A2:85:9F:ED:F8:6B:76
            X509v3 Authority Key Identifier:
                keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:75:68:3f:ec:0b:fd:3a:89:8e:c7:2d:cb:ab:56:84:bb:99:
         1a:d5:83:f7:af:ac:5a:d4:c0:01:36:80:bc:6e:af:6b:ea:53:
         d4:42:d5:60:c1:b4:7d:b6:a0:d8:fc:af:0a:b3:26:e2:41:e7:
         c7:5d:ab:57:4f:65:30:cb:6e:eb:bc:57:c7:08:10:d0:2a:f4:
         8b:f9:6a:3d:a6:dc:1e:fb:0c:14:c0:ed:c3:dd:7b:87:28:66:
         b6:f7:73:a6:78:14:b7:03:76:47:de:92:b0:ee:e4:a7:db:9b:
         00:ec:7b:05:2b:00:e7:f1:bf:3e:6a:d8:d8:2b:f6:a4:66:b0:
         f7:10:c4:e1:7b:61:38:03:af:9f:35:70:9f:ed:65:7f:12:33:
         6a:33:65:ea:cc:c7:b3:fe:47:b5:f9:3e:60:c3:bc:01:c6:fc:
         d8:d0:a5:1e:b3:34:34:f5:5c:c8:f6:5d:17:ee:ce:0d:d0:db:
         cf:77:a5:69:3e:5b:b4:1e:da:f7:54:7e:07:7d:86:73:38:a1:
         ec:4a:54:63:f0:ba:e3:a1:12:8d:44:3b:65:e2:ca:f0:c2:8c:
         ed:5a:6c:f4:41:8a:30:13:0e:8e:c8:60:b4:cb:be:aa:2a:96:
         7a:4e:c0:fe:5e:6c:c3:f9:c1:39:78:68:81:9b:d3:79:7c:e5:
         27:84:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 19:15:01 2026 by rpki-client