Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
File:                     8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json)
Hash identifier:          qfIezKdW0lJrDzuevqw5DHfkV6uvBZTYwukBrtNoDp4=
Subject key identifier:   55:43:71:C2:6D:1F:18:13:D6:5E:E0:C3:B5:8E:4C:B6:92:1B:63:F6
Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
Certificate issuer:       /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
Manifest number:          01B4
Signing time:             Sun 29 Mar 2026 03:40:25 +0000
Manifest this update:     Sun 29 Mar 2026 03:40:25 +0000
Manifest next update:     Sun 05 Apr 2026 03:40:25 +0000
Files and hashes:         1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: TRxYvYBUGolg5EXOkag+I2ECIW5VexEgXfV2iP+Dxzg=)
                          2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: XjFhck5MvAQTRA+OOGEV3q9Dar3ZejU3wR1JyHT6FLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl
                          rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 03:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
        Validity
            Not Before: Mar 29 03:40:25 2026 GMT
            Not After : Apr  5 03:40:25 2026 GMT
        Subject: CN=69c89f29-cf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:dc:7b:03:41:40:54:82:4e:bc:61:74:d1:
                    2c:72:5c:5c:e4:e7:88:32:65:cb:0f:95:67:8e:14:
                    1c:a7:18:1e:02:ea:9f:d5:b0:bc:5a:ab:99:f5:bd:
                    0d:17:4b:f8:09:73:24:de:0d:f7:1c:4c:6b:c5:e9:
                    c5:06:12:48:8d:cf:92:d5:a8:3d:9e:ef:82:06:a4:
                    8f:cf:6f:a9:da:94:ae:10:fb:98:d2:6f:d3:c6:6a:
                    c1:89:72:62:b8:f9:ec:ed:ce:d6:1c:90:f1:d3:c1:
                    04:75:51:5a:4c:63:fb:69:56:1f:34:f4:a0:92:7c:
                    01:44:df:26:76:b5:d2:d1:36:cb:27:78:55:87:09:
                    6f:cb:e4:4f:ef:3d:cb:ec:54:bf:c7:4e:94:6d:d5:
                    e5:3b:b9:b9:da:8a:0a:d8:06:9b:f3:f5:17:28:92:
                    5e:7e:92:9a:48:1c:54:a6:5f:12:c6:47:6e:30:9e:
                    50:84:b9:da:4c:79:2a:66:21:55:11:8f:71:82:af:
                    4a:02:80:87:d6:d8:fc:7d:07:81:ac:34:a3:38:b6:
                    95:b0:d4:18:11:26:7c:d9:66:91:b6:3c:95:6a:4c:
                    ea:d5:74:ef:45:9c:39:a4:a0:a4:d7:18:a7:3d:e8:
                    e4:48:b8:aa:12:3a:60:0f:5a:5d:25:15:63:6a:63:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:71:C2:6D:1F:18:13:D6:5E:E0:C3:B5:8E:4C:B6:92:1B:63:F6
            X509v3 Authority Key Identifier:
                keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:e0:0e:75:70:8b:e3:20:8e:b8:1c:d0:1c:f7:74:d2:c0:
         ed:be:9b:c7:48:f5:6f:52:a3:c9:24:d1:c2:49:9d:95:f3:0e:
         6c:fb:3a:f5:07:da:f8:e4:ab:b8:23:8a:d1:dc:a9:ae:f7:88:
         7e:ab:5c:02:45:d4:d5:09:48:52:14:77:22:bf:86:a6:1e:e0:
         be:3a:3b:6a:0c:ab:16:81:a2:23:4d:23:81:9e:0c:0a:4d:46:
         f6:fd:74:e6:47:4e:bc:88:c0:3b:48:16:70:08:f5:ac:79:e3:
         f6:ed:81:e4:3c:88:b1:35:74:ff:51:01:0b:da:69:54:17:61:
         d6:8e:93:17:83:ae:89:d1:7c:1b:64:02:1e:aa:34:a9:74:de:
         8e:d6:f9:9b:b3:c8:9f:7a:d5:1a:22:f9:06:5c:c5:1d:42:b9:
         58:aa:a3:23:f5:1d:ce:2b:af:3c:6e:2d:df:95:79:70:32:d1:
         3e:57:5b:16:bb:c6:f8:e0:88:88:7d:96:64:d1:dd:08:1d:94:
         e2:bb:dc:b0:93:72:3f:04:39:74:12:52:6e:fa:06:e7:9c:17:
         39:f6:04:9f:b5:15:4f:ad:76:9e:a1:55:ae:53:03:d8:49:03:
         b7:81:87:c8:18:6e:15:95:77:85:8c:fb:58:a8:71:e4:d4:ec:
         47:3c:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:57 2026 by rpki-client