Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File:                     xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier:          xZj6Ym8zVwfM1SgNvg377gJsmjlVRtLAUXXFRdwLE2M=
Subject key identifier:   B3:56:A7:56:B9:DE:00:F7:C4:5A:33:8F:C4:EC:4B:19:00:73:3E:5E
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer:       /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number:          0103
Signing time:             Fri 13 Mar 2026 03:04:48 +0000
Manifest this update:     Fri 13 Mar 2026 03:04:47 +0000
Manifest next update:     Fri 20 Mar 2026 03:04:47 +0000
Files and hashes:         1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: Vlmh5OzuPE2/I3xofWuGLf3y4JZtdYzGOv9o6LvSjGo=)
                          2: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: fdQvyXJ/WQPf7MvdyljKOEY7VxKzLOji0CmCTZOXpHI=)
                          3: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: PK2V6pJkKs1cUfHH+NplffRcxO64GLqymLJjQgGE2VI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 03:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
        Validity
            Not Before: Mar 13 03:04:47 2026 GMT
            Not After : Mar 20 03:04:47 2026 GMT
        Subject: CN=69b37ecf-0253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:3a:10:1a:4d:bc:31:57:d2:d6:2f:e8:cb:
                    1e:05:0f:80:3a:de:c7:17:8a:74:9e:85:c0:92:e2:
                    c0:1f:fc:0a:0e:89:46:63:00:25:f9:36:23:ff:0d:
                    f6:83:00:25:b8:9b:ed:bc:86:0e:b6:87:d3:c5:2d:
                    16:ba:da:07:54:31:39:55:5e:a5:e3:81:f9:03:20:
                    ff:55:9a:9f:7f:8f:e3:8f:6e:24:29:9e:f9:c1:56:
                    44:00:81:26:56:94:3e:e6:96:58:46:df:01:fa:aa:
                    a0:30:1d:e6:8c:65:43:d7:3a:07:02:79:be:60:98:
                    7f:48:eb:e2:c3:a4:01:e8:f1:a7:79:fb:fb:56:9f:
                    a9:ce:d9:29:08:5e:fe:1e:dc:df:13:b4:cd:fc:5e:
                    ea:6b:08:49:39:8f:e1:59:d2:a8:ac:e7:54:a1:70:
                    0e:c9:4c:a2:df:ad:a8:0b:00:7a:6b:fd:e5:fd:da:
                    ab:e4:77:64:bc:63:1b:bd:62:9c:13:5b:50:f4:c8:
                    30:d4:8a:31:4c:c9:66:e5:a8:ff:bc:d0:99:4b:8d:
                    28:c7:57:cd:18:2a:35:3d:a8:72:30:10:f0:9a:4a:
                    d7:82:69:43:a4:be:39:03:0f:4f:47:31:ab:07:37:
                    c4:60:85:da:6d:2a:c3:7d:4e:60:de:09:ab:20:64:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:56:A7:56:B9:DE:00:F7:C4:5A:33:8F:C4:EC:4B:19:00:73:3E:5E
            X509v3 Authority Key Identifier:
                keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bf:9c:a8:11:df:36:bd:99:88:d4:b7:ef:75:bf:ed:b3:74:
         c2:0b:9a:9a:fe:ca:91:48:09:0a:b3:c6:c8:25:e2:c0:f4:b2:
         b9:e0:62:f8:4d:9e:29:84:97:50:cd:08:0e:1f:f8:e7:30:8b:
         d5:fb:51:82:78:97:41:9f:14:be:f1:a2:5b:63:49:2e:b0:1a:
         d7:c9:31:f7:74:97:bf:bf:f5:73:84:7d:61:f4:0a:90:b5:ec:
         7d:d2:0f:5f:8e:ae:3f:bf:52:ae:01:02:89:9c:ce:da:3f:1e:
         f1:dc:f9:c5:cf:70:c3:62:5d:1e:17:88:05:a9:13:7e:41:47:
         55:15:d6:05:6d:80:05:e1:d7:34:8c:8b:c8:fd:c3:e5:ef:d1:
         94:08:a6:11:1a:c9:e2:ad:f4:47:5b:70:0e:f9:80:f2:70:5b:
         5f:e8:04:3a:cb:98:0d:8a:74:95:88:c2:e2:a1:40:e7:5b:fa:
         d2:c0:34:8b:7f:23:98:64:51:a0:cc:71:1c:40:23:b4:5f:fe:
         98:4c:bb:04:38:59:17:d6:63:74:c2:5e:5c:17:0f:d7:de:29:
         a5:b9:2c:33:c0:3d:e8:e2:c2:13:08:fb:69:2d:9f:ab:5a:ae:
         e1:2e:6b:e4:b0:78:e8:5e:2a:23:3b:07:4c:8b:02:a3:0b:b0:
         41:66:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:05:35 2026 by rpki-client