Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
File:                     w9DuaJTOj1bPawcKsT-YFp39QR8.mft (raw, json)
Hash identifier:          l6EKNmshe5Nu3KPS7uMPSqpT5/2q+25fOswC6wXBhi0=
Subject key identifier:   58:97:E4:93:67:AE:04:C7:23:31:E9:73:D1:6D:D3:8D:3E:C5:61:C9
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Certificate issuer:       /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
Manifest number:          23
Signing time:             Sun 29 Mar 2026 08:30:16 +0000
Manifest this update:     Sun 29 Mar 2026 08:30:15 +0000
Manifest next update:     Sun 05 Apr 2026 08:30:15 +0000
Files and hashes:         1: w9DuaJTOj1bPawcKsT-YFp39QR8.crl (hash: 1aaZrXcNwfIjBIHYlWFQfDIgJmkp+5XmL9Oj/mZp8go=)
                          2: 5147C064FFE611F0819299B6756F56BC.roa (hash: dxqWrt5xYEHSokLX0i3WpHa5o0vkk7mwt4FA5//2TjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
                          rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 08:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
        Validity
            Not Before: Mar 29 08:30:15 2026 GMT
            Not After : Apr  5 08:30:15 2026 GMT
        Subject: CN=69c8e318-9d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:5e:87:e5:b9:a3:58:d7:24:54:86:19:1c:
                    7a:75:60:ab:f6:55:6b:82:0f:e9:a2:34:9c:41:09:
                    c8:a0:bd:54:c0:2f:ef:76:ad:19:f9:6d:60:62:a4:
                    18:25:a6:75:03:c0:c4:98:4b:70:ea:4e:9d:d8:d0:
                    93:08:b3:20:f8:29:3a:aa:c2:80:5a:34:bf:24:1c:
                    a5:5a:d3:41:c8:f3:a1:65:58:fd:ce:9a:f3:2a:4f:
                    b1:67:88:b0:3e:88:8f:5c:47:c6:6f:d2:0d:38:78:
                    16:5e:dc:cb:47:cb:d0:aa:38:17:b0:ed:2a:0c:bf:
                    33:07:cb:5b:a9:30:85:38:34:0f:3d:e9:f0:0f:75:
                    a5:9f:7f:3e:cf:85:96:e4:64:00:c1:8f:ef:f5:f6:
                    71:6a:17:bb:82:e3:46:c9:f9:4b:f6:15:fb:60:b7:
                    e7:c2:44:12:dc:83:e3:8d:4d:d8:fa:df:59:36:cb:
                    1d:f0:9b:8c:02:69:9b:ff:35:c2:14:c2:65:fe:91:
                    c3:60:5a:e6:ba:dc:51:02:12:4c:65:8e:b9:09:e8:
                    0d:a8:fd:16:2d:7d:f7:94:ac:6c:5d:26:8e:bb:22:
                    80:f6:4f:92:49:a4:59:bb:f1:56:30:b0:e9:7a:46:
                    c7:a3:c2:bc:fb:97:4e:71:50:0f:de:c4:04:d1:8d:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:E4:93:67:AE:04:C7:23:31:E9:73:D1:6D:D3:8D:3E:C5:61:C9
            X509v3 Authority Key Identifier:
                keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:86:53:1b:3b:5b:7e:23:47:5b:7b:71:97:73:78:8a:b5:d5:
         49:05:5a:ed:cb:47:46:10:a8:74:e0:c2:9d:20:68:7e:15:3d:
         ac:46:e5:d6:51:90:c3:fd:2c:16:a4:f5:d4:e5:61:4a:d0:81:
         92:80:e4:1e:bb:47:dd:63:64:79:cf:a7:26:0f:b2:f2:39:47:
         be:59:c2:0e:39:70:ec:5e:cf:72:2c:f6:30:d7:04:14:3c:0f:
         88:29:d6:fd:66:f9:79:04:b0:9c:c2:5a:df:f9:d5:3c:d9:fb:
         6e:74:bf:e2:23:35:8d:b2:e0:dd:a3:75:ac:59:b9:0b:ad:98:
         b4:66:95:74:0e:7a:2b:bb:73:43:f9:a3:f6:ee:5a:16:7c:06:
         56:be:a3:f4:45:6c:26:d0:69:36:da:df:24:c6:83:4a:f8:5b:
         96:92:c8:a1:f0:f9:2e:62:d2:63:81:26:68:6c:76:46:43:20:
         09:28:86:37:d8:b2:ad:1e:e0:04:41:50:72:14:1b:ab:6f:ee:
         c1:c4:eb:12:1d:a3:1d:f8:03:68:d7:1c:56:3c:69:a6:4b:24:
         f6:29:ed:80:e2:67:c5:c8:8e:f9:63:6b:c2:e1:e9:1d:a3:e5:
         a7:af:e9:b4:e5:fe:ab:d9:3a:f7:ec:c3:75:71:5f:13:e4:08:
         7b:74:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 13:22:21 2026 by rpki-client