Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
File:                     4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json)
Hash identifier:          wWhphrX8dB4Zrdi9oKRftrGm//OmpWJ8NY97c8unmlA=
Subject key identifier:   57:1E:A1:F9:2A:BC:04:2C:DB:DD:B8:99:23:E2:D2:66:AE:FE:AD:C9
Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
Certificate issuer:       /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
Certificate serial:       0312
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
Manifest number:          030B
Signing time:             Tue 03 Mar 2026 01:15:12 +0000
Manifest this update:     Tue 03 Mar 2026 01:15:12 +0000
Manifest next update:     Tue 10 Mar 2026 01:15:12 +0000
Files and hashes:         1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: +zfxArNZOi7HLURNMMJyY4hPARyq2B1iW8mAXDTbz1Y=)
                          2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: r5uKcofx90HTHUTbqd06vEskUT1MLjmemfMajVokYGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl
                          rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
        Validity
            Not Before: Mar  3 01:15:12 2026 GMT
            Not After : Mar 10 01:15:12 2026 GMT
        Subject: CN=69a63620-b4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:18:b0:30:a0:df:07:00:80:37:53:0f:e5:
                    a2:7d:55:1d:d0:07:71:65:a7:96:32:9f:a2:37:c4:
                    ea:7e:a3:99:f7:0e:96:40:76:69:75:0d:af:99:0b:
                    80:33:78:92:ff:41:a0:c5:0d:07:93:b6:e9:8b:98:
                    f8:7f:9c:52:20:b7:2d:eb:3d:a8:be:49:f7:1f:da:
                    56:a9:82:23:f9:be:92:37:10:87:0f:b3:d6:fe:cd:
                    57:21:7b:52:1e:48:8e:1a:bc:42:bb:33:10:50:14:
                    60:0d:af:4a:0a:ce:98:b4:cc:2a:3b:23:9d:96:ac:
                    45:e4:12:99:dd:5c:c7:1b:09:f7:57:3e:0f:b1:97:
                    90:a8:52:66:8e:81:da:d5:c9:18:54:6e:82:fa:9a:
                    17:c2:ca:3a:98:11:11:b8:9b:d6:85:d7:75:d0:4e:
                    0e:4b:a7:b4:4c:11:67:34:20:08:58:56:0c:21:50:
                    60:ac:53:e0:dc:76:e2:e2:65:db:91:e4:f8:65:15:
                    34:16:70:4c:56:f1:c9:07:84:11:95:b5:0d:79:d7:
                    c2:24:67:ba:d0:96:c2:e9:f7:9e:33:f8:bf:18:7f:
                    b1:af:8f:49:a9:1a:43:40:5b:9f:4a:d1:d2:15:5e:
                    cc:75:fb:57:d0:f4:f8:a1:80:8b:63:be:93:a3:b8:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1E:A1:F9:2A:BC:04:2C:DB:DD:B8:99:23:E2:D2:66:AE:FE:AD:C9
            X509v3 Authority Key Identifier:
                keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:7d:46:14:d3:2e:8a:8d:32:eb:99:42:0d:c4:b8:9a:ec:8b:
         2f:14:e9:44:7b:d1:8c:14:1c:e0:f5:3f:22:66:d0:98:a7:8a:
         7e:44:d8:30:d9:81:db:4f:f3:3d:19:2d:30:aa:60:ae:b8:85:
         8b:2d:d2:fc:37:6c:e5:e7:13:e4:02:4e:c3:3b:22:22:b1:a8:
         56:06:e4:49:8e:bb:38:51:ee:be:6d:14:07:96:34:fc:a0:c9:
         86:d7:ba:d9:a2:9d:c7:f9:28:08:a0:30:b8:85:b7:34:03:fe:
         59:63:63:e7:37:27:22:0d:bb:08:8a:25:d1:6e:47:fb:22:4c:
         b0:9a:c5:44:d1:27:0d:5a:cc:35:12:a2:b1:fd:f0:a4:fa:68:
         c7:27:16:31:65:fd:a0:24:ac:0c:a3:ce:e3:66:c1:ee:28:66:
         87:3a:00:4a:b6:1f:72:7c:ea:37:bf:a6:d1:ef:c4:d1:0e:c0:
         e1:eb:8c:a9:e3:01:92:96:1f:83:0c:7b:f3:f1:11:27:28:d3:
         6a:c2:2b:a1:5e:46:7e:1c:92:bc:77:2d:1e:7d:d5:69:e5:d3:
         07:3b:05:34:e0:15:d8:5c:8c:82:c2:c7:c4:62:09:0d:82:f7:
         51:db:45:62:81:58:80:88:34:57:9d:7a:0a:7c:99:61:92:ce:
         a5:94:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:19:21 2026 by rpki-client