Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
File:                     3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft (raw, json)
Hash identifier:          pgavNhxU6YR4WvrQGAbOHk8CZyLLrUooNWKlx5bubvQ=
Subject key identifier:   D9:6D:47:51:C8:41:96:0F:2B:8D:AF:A9:C8:D6:20:06:77:41:EA:E4
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Certificate issuer:       /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
Manifest number:          22
Signing time:             Sat 07 Mar 2026 08:09:07 +0000
Manifest this update:     Sat 07 Mar 2026 08:09:06 +0000
Manifest next update:     Sat 14 Mar 2026 08:09:06 +0000
Files and hashes:         1: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl (hash: CBiPsrnPxwU9YfOZPJbF4v2EXza2D1HcYm5TnrQkW0M=)
                          2: E7A0471CF5FE11F091C416DF536F56BC.roa (hash: k8QEl3i1mj0JdrQoFekMU1jbFfjtjnZk+vYtYEngXQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
        Validity
            Not Before: Mar  7 08:09:06 2026 GMT
            Not After : Mar 14 08:09:06 2026 GMT
        Subject: CN=69abdd23-83f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:74:11:ee:9f:0a:45:f4:5d:55:f9:5a:59:
                    62:b7:19:ae:83:25:e3:50:78:63:36:50:de:c7:8b:
                    0b:d7:68:e2:04:a1:7b:af:57:ff:7b:28:82:76:e3:
                    76:8d:e4:5a:4f:af:4a:8c:79:a1:51:11:4e:7a:60:
                    70:80:d5:bb:d1:9f:f8:60:e3:b5:51:96:b0:d9:d2:
                    fc:34:97:4c:b1:ad:14:09:31:6b:e2:78:7a:8c:f9:
                    53:a3:d6:73:85:4c:71:52:6c:f7:6e:6f:d4:3a:02:
                    60:00:31:13:89:76:0b:c6:03:b0:c8:ce:ac:e8:ff:
                    25:85:2e:7f:18:e8:e4:ee:99:b9:75:01:db:ce:05:
                    08:78:bc:69:60:3e:58:9b:47:b0:f2:88:7c:e8:de:
                    a8:9a:5f:5d:a7:2b:14:7c:ca:c1:54:5c:15:e5:82:
                    85:6f:7b:e3:37:67:cf:50:ef:a6:0d:3a:9c:3d:9e:
                    8c:84:1b:d4:7f:41:e1:9a:bc:4b:d6:00:b4:c5:6e:
                    05:86:1c:ca:d0:62:d0:9a:68:5c:a3:0c:45:10:0a:
                    04:eb:43:1d:45:8a:4d:09:7a:bb:ce:18:05:04:d1:
                    4a:2b:b6:af:48:25:5a:f4:30:d4:43:c3:a5:2f:77:
                    55:cc:95:94:9d:87:32:be:9b:76:bb:5e:8a:cb:a6:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6D:47:51:C8:41:96:0F:2B:8D:AF:A9:C8:D6:20:06:77:41:EA:E4
            X509v3 Authority Key Identifier:
                keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a7:8d:52:fd:97:5c:b5:3a:ea:49:1e:0d:f8:22:62:e6:c8:
         01:83:d5:d3:31:3e:15:11:b8:68:43:b2:73:40:65:07:e1:36:
         7b:72:99:ca:30:e3:ae:cf:6f:90:46:a8:b2:5e:d5:ab:1a:9c:
         60:7f:51:1f:d8:eb:f8:b4:b4:64:db:c1:25:94:20:d7:79:ed:
         34:61:51:b4:61:02:3d:39:6d:fc:a9:15:0c:c5:f9:76:1f:81:
         3b:90:0a:4b:c9:c3:0d:89:5e:a7:d0:4a:d7:dc:68:cf:65:bb:
         28:7f:0e:86:51:85:4e:a2:74:5b:93:64:f4:0a:de:54:7f:59:
         ea:0d:a2:a2:9f:80:bc:39:ed:b2:83:76:c4:ac:17:9b:8b:1c:
         18:68:39:01:04:4d:ec:b7:56:b8:e2:e1:f0:57:11:b8:fe:9b:
         9c:24:c0:66:26:c0:61:25:8b:be:12:d1:a3:a7:77:05:d7:61:
         c3:33:a5:94:de:95:0e:7c:64:17:39:af:27:f6:04:4b:6d:79:
         30:20:aa:45:13:be:77:de:52:94:fb:9b:b8:1c:4a:b5:02:32:
         53:fa:47:c0:bc:3a:9d:98:13:bf:f1:4f:8a:ff:9b:68:a2:56:
         ea:22:17:6d:d2:88:d7:0d:53:f5:dd:0d:98:02:8e:57:a5:33:
         29:e7:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:36:11 2026 by rpki-client