Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          2px3pqYVCQVFyha3bPQTHRTGI0pR7zUHxZcCxY+9NB4=
Subject key identifier:   27:40:E4:F4:BA:A5:A7:CF:41:59:63:47:56:62:54:8E:53:92:0A:1D
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          0133
Signing time:             Sat 21 Mar 2026 04:30:09 +0000
Manifest this update:     Sat 21 Mar 2026 04:30:08 +0000
Manifest next update:     Sat 28 Mar 2026 04:30:08 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: L9iAgtlnkIRC6FWqebvKjQy2rVxgkVmWaQU/kS9zW2k=)
                          2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Mar 21 04:30:08 2026 GMT
            Not After : Mar 28 04:30:08 2026 GMT
        Subject: CN=69be1ed1-bbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:b3:53:b0:43:38:ed:88:44:7e:93:fc:06:
                    3d:88:85:9e:e9:80:e5:5e:51:65:b4:b2:2d:99:84:
                    e5:94:ca:82:ac:4d:1f:76:2d:50:d9:1e:44:4e:20:
                    4a:bc:18:f1:f4:54:94:0c:ae:2d:2f:7d:42:d5:8d:
                    7d:70:76:05:99:d6:ff:ff:3f:f9:e5:65:eb:13:e6:
                    51:20:44:ad:b6:50:58:c2:f2:d1:e9:1c:0d:9b:df:
                    95:98:ba:38:49:84:2a:6e:39:9a:86:09:42:a2:68:
                    ff:50:db:c7:33:19:af:01:ee:0d:57:62:b2:3c:34:
                    55:2f:01:7a:41:f2:55:c6:54:b1:2c:86:9a:d6:61:
                    3c:46:16:ee:47:42:61:40:9d:cc:0c:34:fc:c9:f0:
                    06:c5:86:4e:ce:07:b9:94:9a:4f:5e:6a:06:84:7e:
                    f1:df:ed:e2:67:3f:52:77:a5:ef:99:88:3c:03:19:
                    23:c1:63:6a:e4:c5:48:20:d2:08:2d:06:c8:4b:d7:
                    36:c3:cf:99:e5:97:de:6b:8e:84:1e:38:c0:5f:16:
                    57:6f:02:8c:ca:b1:28:d7:60:13:8a:ed:24:d5:a1:
                    9c:c3:27:9e:0c:f8:7e:ca:d1:85:c8:3c:f6:1c:d9:
                    c6:48:ed:a4:ad:93:4b:13:76:cb:9b:86:f9:e7:84:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:E4:F4:BA:A5:A7:CF:41:59:63:47:56:62:54:8E:53:92:0A:1D
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:c5:63:32:8d:07:49:32:0b:1c:91:2b:ed:ce:e5:c6:86:
         b7:4e:64:0e:cf:12:c6:5a:5b:23:95:62:98:22:0c:a6:ef:05:
         ef:15:3f:29:77:a7:09:30:45:2c:ae:7d:57:a7:33:20:52:8d:
         a2:0f:49:9c:fd:5e:bb:e6:b9:b6:7b:0b:65:ae:d9:a1:5f:0b:
         be:9b:f3:9d:f4:e3:d7:02:46:b7:cf:73:8b:47:0a:7e:38:bf:
         7a:d0:8d:9d:5a:ed:a8:35:7a:4d:16:1c:ac:d6:3d:44:3a:fd:
         4b:88:97:70:ed:7a:1d:42:a8:12:cf:72:86:8b:e7:8c:21:88:
         34:2e:b4:c2:90:14:9f:5d:94:e9:b3:cf:b3:bb:b2:ae:41:ec:
         fb:8b:aa:e4:c9:fd:73:a8:95:67:a8:79:a1:fc:43:e2:7d:d2:
         3c:89:aa:e7:75:ba:2f:b1:21:26:70:3a:84:a0:64:8f:b4:63:
         4d:03:c0:e8:d6:9a:fd:9b:e6:0b:05:94:34:ee:3a:29:5c:b3:
         4e:d4:7c:7d:10:fc:48:f7:f8:b0:4e:47:95:c5:eb:51:76:10:
         db:a4:65:66:3f:39:0f:19:8c:c5:38:4f:aa:b0:48:b2:2c:b6:
         44:0a:ce:4c:a6:3a:c3:18:d9:84:9c:72:72:f6:9b:7e:ff:dd:
         f6:d6:96:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:50:07 2026 by rpki-client