Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File:                     madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier:          kA3jisZkjGXDaKPD+MxzHILz/Orc+jtd2R+gNPZ+J7s=
Subject key identifier:   22:CA:1F:01:FE:FB:82:ED:D9:1E:52:C2:C8:6B:B7:A1:13:1E:B5:CF
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer:       /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number:          012F
Signing time:             Sun 05 Apr 2026 04:59:14 +0000
Manifest this update:     Sun 05 Apr 2026 04:59:14 +0000
Manifest next update:     Sun 12 Apr 2026 04:59:14 +0000
Files and hashes:         1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: WkCb9vDMiq0YBiDpfgQe5ono8d7+j5MYGZJAs1cz1Qc=)
                          2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: VOUYAm4vUARPOBx8hzx51ITs/3U+Tn4nx1d9cHtgB/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
                          rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
        Validity
            Not Before: Apr  5 04:59:14 2026 GMT
            Not After : Apr 12 04:59:14 2026 GMT
        Subject: CN=69d1ec22-3bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:01:ac:04:e5:dc:40:2d:00:88:9d:e8:98:
                    f3:82:6d:df:6b:a6:4d:f5:f0:ce:44:6c:65:c0:44:
                    0f:a6:50:66:4b:37:3f:b6:b5:d2:8d:b6:2f:05:78:
                    57:d5:2b:32:9f:0c:48:d8:a5:7b:ab:e9:bf:8e:02:
                    e8:ba:5f:0a:e1:7b:b7:79:5a:6d:fa:43:fc:69:5e:
                    34:b3:aa:83:a2:8f:f7:45:c5:3a:e2:5d:8e:12:42:
                    21:84:12:8d:ea:b8:52:11:ff:0a:42:83:f6:09:3a:
                    cb:ef:21:50:07:f0:6c:0f:33:05:38:6b:3a:e1:a9:
                    76:6f:f3:e0:1b:9d:55:53:c5:e4:b3:ca:50:a9:aa:
                    14:79:d7:6b:a9:4d:1a:b8:64:95:9b:c6:0b:db:1b:
                    2e:3b:d1:67:cb:79:2c:f1:06:2b:44:23:c7:c4:16:
                    4e:bb:be:11:2c:cd:bb:ae:e2:2b:61:3f:43:dc:c8:
                    b6:f3:d7:6e:07:b3:1a:5f:93:3c:50:60:ce:82:05:
                    6b:27:2e:bf:73:c4:59:2e:ce:19:a2:e4:ce:67:42:
                    87:77:94:1a:27:f0:e0:da:eb:b8:b6:b8:35:a2:47:
                    48:c2:7a:ac:dc:21:58:07:6e:76:7f:31:6c:f6:af:
                    d9:a3:c8:45:39:4d:ad:5d:31:8f:40:c2:e6:73:8a:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:1F:01:FE:FB:82:ED:D9:1E:52:C2:C8:6B:B7:A1:13:1E:B5:CF
            X509v3 Authority Key Identifier:
                keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:eb:c9:1d:23:7c:0c:6c:f3:92:25:0d:5b:c2:b0:f5:67:
         aa:9e:34:e4:26:5f:4c:b5:55:bd:89:7c:a7:fa:3c:e9:a8:fd:
         14:29:b0:95:5d:f3:6c:6e:80:3e:d5:ec:e6:0d:f6:33:78:f0:
         d2:70:53:ba:56:44:a5:f4:a2:c6:85:e8:7f:b9:dc:18:1c:2d:
         c9:07:a5:21:4c:93:0b:db:19:59:57:c1:f1:d8:48:80:7d:6b:
         9d:26:4a:ef:c2:79:f9:55:36:f2:bd:92:03:41:dd:22:22:81:
         79:8a:11:87:c4:e6:65:2f:cc:5f:80:19:d3:4d:da:32:ab:f5:
         02:36:42:b0:35:b3:68:a6:80:f1:bb:68:28:6f:38:b8:72:ec:
         17:4e:bf:47:ba:cf:91:ab:00:3e:1f:52:5f:16:e8:c0:8a:83:
         b2:a2:f2:3b:02:7f:24:74:13:26:38:1b:40:aa:01:92:87:32:
         ef:be:55:71:71:eb:c2:08:28:db:6d:36:03:3a:62:f6:cf:64:
         3c:ce:49:e0:0a:f8:33:cc:92:83:38:00:bf:36:76:99:2e:ad:
         b9:99:0c:5b:6c:c8:d1:12:ac:bc:05:70:d8:76:06:7a:4f:bf:
         8f:4d:d6:95:08:45:66:be:e0:d6:a3:84:b5:f1:48:b5:b0:3e:
         f5:b4:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:36 2026 by rpki-client