Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
File:                     vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json)
Hash identifier:          K8FN9dJJuQpN3w5wJICwd2qBwqp3p+cEhLkM0oJOBow=
Subject key identifier:   E3:BD:82:95:A7:16:39:3F:24:ED:07:06:DB:D0:8B:B7:30:BC:42:B1
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Certificate issuer:       /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial:       1F03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
Manifest number:          1ED6
Signing time:             Sat 28 Mar 2026 15:59:34 +0000
Manifest this update:     Sat 28 Mar 2026 15:59:34 +0000
Manifest next update:     Sat 04 Apr 2026 15:59:34 +0000
Files and hashes:         1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: 0WAYsoMiqZGo7IpxB4jFvs3yn7RdSMTDggFSMhKRPS0=)
                          2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: yXfDvxwixQCVNXGXtCqoWdhakT5p23NjgL5kMuTrTAI=)
                          3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: 5Ecw3oats5AkjNp0HP71hd8W4T5v8KM41PLBROx3FeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
                          rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 15:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7939 (0x1f03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
        Validity
            Not Before: Mar 28 15:59:34 2026 GMT
            Not After : Apr  4 15:59:34 2026 GMT
        Subject: CN=69c7fae6-03d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:c0:5d:10:f1:19:df:16:53:15:70:d8:78:
                    51:17:c3:ec:5f:85:4f:e0:d4:7d:e8:c1:07:5a:2b:
                    d3:16:b9:76:0a:c4:7d:14:f1:d7:a3:44:99:4e:3a:
                    69:12:2e:0f:ab:3d:14:ad:45:bc:d4:53:13:e8:0a:
                    9c:0c:46:e2:d4:c0:b9:56:b6:05:e5:d2:b7:ed:e5:
                    27:1c:55:93:f5:12:33:49:92:65:5a:f7:ae:62:e5:
                    16:35:10:55:88:0d:82:71:b5:03:b0:3a:0d:0c:9e:
                    3c:64:fd:2c:5a:bd:2d:40:b5:57:94:e9:63:aa:64:
                    cb:75:75:5f:9a:f0:5b:d7:d3:ae:c4:8a:c5:73:20:
                    1a:d3:cf:be:7b:8b:09:cc:d9:53:92:7c:82:54:c7:
                    ce:2d:1c:fc:07:be:19:17:36:53:04:e5:3e:87:08:
                    d5:ab:d9:63:b9:eb:c4:94:69:d7:82:20:f7:b9:da:
                    d5:4a:46:14:e0:f9:0d:a4:cc:b6:ff:49:68:80:a5:
                    a4:e0:1f:c0:f2:91:9d:f9:19:68:22:66:83:89:22:
                    9a:c8:71:61:40:00:2c:a9:59:a6:bb:1b:ad:62:45:
                    ae:99:99:ef:04:22:65:77:1e:05:3b:25:9e:e2:21:
                    b5:d1:2d:8b:85:77:9b:74:cb:85:55:d3:d5:fe:76:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:82:95:A7:16:39:3F:24:ED:07:06:DB:D0:8B:B7:30:BC:42:B1
            X509v3 Authority Key Identifier:
                keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:39:71:47:58:22:d2:81:d9:37:f8:cf:d7:2c:a0:93:cb:6a:
         83:73:59:b4:6b:b4:24:2a:11:3c:e0:63:1a:0c:eb:e4:34:4d:
         79:63:25:cf:58:43:a5:04:da:ca:74:95:00:07:02:06:38:f7:
         ea:63:44:3f:a8:8c:09:64:62:da:89:57:04:55:d5:52:07:fa:
         89:f8:cf:2e:9b:3c:c8:e2:98:b6:8b:ee:63:0f:36:07:71:fc:
         e1:a6:d8:90:a5:4a:5b:09:11:65:e6:b6:a0:79:6c:dc:e4:6c:
         c1:94:42:b4:d4:27:28:14:00:e9:76:ff:80:ab:cd:b0:12:69:
         d9:f5:84:99:55:bd:45:ab:d3:89:c9:62:44:5c:7c:0d:0c:2b:
         90:44:36:b8:3f:b4:fe:4e:f2:f5:c1:99:7d:3c:d0:71:c5:c8:
         3f:be:50:cd:07:e1:be:91:76:68:4b:ea:07:c7:33:32:30:a3:
         2f:34:97:26:b2:12:29:9b:2a:d8:5f:dc:ab:b9:7b:1c:bd:bc:
         7c:09:26:91:44:b5:02:88:fa:c5:02:e9:f8:5b:45:12:38:52:
         2b:7d:e9:13:4e:49:53:0c:22:c2:b2:65:45:15:73:5c:87:d4:
         06:8c:1c:e7:fd:46:c8:58:19:27:bb:90:75:7b:0c:03:86:07:
         fc:01:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:00:41 2026 by rpki-client