Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
File:                     sv9l-pYZFKRbib5RLTNlMInW_7I.mft (raw, json)
Hash identifier:          BdMDhLhpbiQ7Pq47B/wlWCty9slycHTTF4NBhvWBYD8=
Subject key identifier:   CF:60:37:75:F6:13:51:95:14:BD:E8:81:31:89:A6:19:45:24:81:DE
Authority key identifier: B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2
Certificate issuer:       /CN=A918FCB4/serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
Manifest number:          096F
Signing time:             Sat 28 Mar 2026 20:25:56 +0000
Manifest this update:     Sat 28 Mar 2026 20:25:56 +0000
Manifest next update:     Sat 04 Apr 2026 20:25:56 +0000
Files and hashes:         1: sv9l-pYZFKRbib5RLTNlMInW_7I.crl (hash: dOZshWQTj+YAnlvfU43cLVn+l/MYOKZx9mndIQGn2eU=)
                          2: F5BCC96EF7EA11EF917C0251C4F9AE02.roa (hash: wfH9ZSnphBb3TGQSVEi9qxVFMUDtgonfHImgv6HMHnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 20:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2
        Validity
            Not Before: Mar 28 20:25:56 2026 GMT
            Not After : Apr  4 20:25:56 2026 GMT
        Subject: CN=69c83954-e2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:3e:c4:60:5b:b1:67:b2:96:f5:d2:0e:d7:
                    59:70:a0:b8:6e:46:df:4a:35:76:3d:52:11:0b:96:
                    dd:71:b1:3c:06:15:09:5c:91:d5:e1:89:3a:70:74:
                    32:b7:cb:80:3b:fe:f8:e5:c0:d6:39:ed:25:8e:43:
                    cb:34:27:b1:07:1c:92:be:ed:8b:e3:ac:ce:eb:65:
                    50:05:47:77:57:08:7e:81:ec:20:9f:69:66:42:35:
                    a4:43:0b:d9:95:a8:ad:2a:7b:6e:f4:2e:e4:d8:12:
                    e9:e0:f4:97:e5:36:22:a2:a7:23:36:32:b6:43:a9:
                    01:a7:cc:ff:75:52:1a:07:35:02:06:e4:33:42:49:
                    07:54:50:bc:f0:75:df:a8:c8:9a:a3:52:44:83:99:
                    0c:08:1a:9c:86:83:c0:37:8e:e3:6b:ed:31:b5:fd:
                    3d:80:db:d8:e4:e7:22:bd:81:4e:78:8c:cd:da:07:
                    43:50:fc:e6:8b:21:af:3c:f6:f7:e9:b3:4e:e8:de:
                    8a:89:95:dc:97:27:46:2d:60:37:55:d6:c0:82:36:
                    92:f0:6c:1a:fe:0b:12:b6:b0:e1:13:2d:37:79:80:
                    5b:e2:04:16:21:c0:07:04:bb:ee:12:4d:ef:2f:fd:
                    23:16:13:e6:58:7e:82:5a:b7:e1:bf:e5:f9:6b:7d:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:60:37:75:F6:13:51:95:14:BD:E8:81:31:89:A6:19:45:24:81:DE
            X509v3 Authority Key Identifier:
                keyid:B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:a9:e4:96:6f:cd:ad:90:a4:57:76:f6:62:2a:28:c1:57:
         35:89:78:46:a4:3f:27:fa:61:83:d9:5f:25:3a:9e:23:ac:90:
         06:3a:9e:b6:3e:9b:c9:f8:09:9b:76:1b:98:e6:5e:7a:20:31:
         9a:18:00:10:52:54:9f:67:a8:6a:c1:29:a7:b7:34:7a:96:26:
         7d:5c:66:dc:04:da:f9:93:dd:52:d0:04:64:40:e0:e5:d1:ba:
         ef:71:d7:42:a6:b3:25:aa:68:47:02:ff:a0:18:a4:b2:8c:59:
         5e:fd:5f:fe:5d:bf:69:7b:e6:a9:0d:4c:54:86:f0:f0:97:b5:
         5c:8e:c7:ec:f8:c6:2f:ac:23:a9:1f:f7:0e:d5:89:6f:a0:aa:
         41:6c:7a:6b:df:8a:36:23:d7:0e:cb:b2:dc:7a:04:ce:e7:0e:
         a5:2f:75:a9:88:7f:59:da:ec:87:b5:91:2d:0b:9e:4d:5a:8e:
         fa:5c:82:35:ce:f1:1d:c6:a2:6e:55:08:d8:7e:b9:c3:ab:87:
         fc:31:c8:2d:37:ce:13:c7:64:2e:f7:f4:07:8b:83:a1:d4:51:
         88:d2:3d:cf:b2:97:a2:47:1a:14:3d:c9:28:3f:aa:12:19:d5:
         8e:65:98:38:0c:ad:98:9c:73:7d:84:84:b9:3b:7e:d7:1e:d2:
         5b:e8:0a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 21:24:29 2026 by rpki-client