Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          9AhClvJrqsINCdxejjTTPy2lO8dDkpI0miQTSnVozmg=
Subject key identifier:   F2:E0:2C:B6:E9:E8:83:02:FB:14:DE:E1:DD:2A:BA:B8:B1:49:A3:9A
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       3517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          3517
Signing time:             Sat 28 Feb 2026 15:02:01 +0000
Manifest this update:     Sat 28 Feb 2026 15:02:00 +0000
Manifest next update:     Sat 07 Mar 2026 15:02:00 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: FXTq4bXMOKKKlHPhbT+NmOYR6uJ4yFzjikmOXip1LSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13591 (0x3517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Feb 28 15:02:00 2026 GMT
            Not After : Mar  7 15:02:00 2026 GMT
        Subject: CN=69a30369-4ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:fc:ad:c6:09:d7:c4:aa:2e:6b:21:e3:60:
                    ae:7c:68:5c:31:b3:73:cf:4f:c5:89:7f:81:fd:ab:
                    51:8d:ab:26:52:c9:c7:b9:84:75:07:e7:8c:4a:b9:
                    15:3e:f0:f4:88:43:3f:d4:e7:75:66:a8:cf:48:1a:
                    90:ce:0b:38:3d:1e:0a:ed:eb:90:df:29:fb:31:e1:
                    37:5a:1f:a4:00:e5:de:3b:04:73:46:45:b1:9e:dd:
                    02:84:e5:e6:cf:44:9b:99:b7:04:60:44:f3:ee:48:
                    82:7b:78:f1:ae:78:c9:d2:61:e2:eb:c7:55:75:2d:
                    a0:d5:3c:11:9d:45:b7:14:98:c6:ab:bd:6a:b4:3f:
                    c5:1a:56:69:ad:88:16:06:25:c9:98:55:1a:84:a9:
                    c8:a2:c9:46:69:47:b7:c7:c0:2f:5f:2b:92:cd:78:
                    2e:9f:83:15:04:27:0c:07:36:2a:6a:e6:ab:a5:58:
                    11:17:0f:f7:c4:7a:75:8d:d7:6c:5e:e4:ea:9f:ef:
                    ee:e8:13:7e:c8:6e:bb:d2:21:6a:c3:70:3f:32:d6:
                    57:63:14:60:54:1c:1d:64:d0:00:c4:cf:cc:c5:01:
                    8b:9b:6c:de:a9:36:6b:23:a2:f2:16:00:b2:5d:f1:
                    4d:be:8a:b6:b8:66:25:b8:a3:4b:ff:9f:41:17:1a:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E0:2C:B6:E9:E8:83:02:FB:14:DE:E1:DD:2A:BA:B8:B1:49:A3:9A
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:57:f7:0e:ee:4a:80:63:4e:77:b3:43:a3:1a:82:94:d9:d4:
         27:e8:fa:4e:82:ea:20:5b:b1:ae:f6:8a:d5:0e:f6:6e:fd:39:
         0a:00:2f:24:bc:61:bf:88:1b:16:7e:2c:46:6c:aa:1a:18:af:
         7a:ca:3a:a0:c5:53:7e:40:dc:62:57:3a:67:68:3b:dc:2b:d0:
         48:5b:ad:02:48:b8:bc:16:48:a5:1d:8a:4e:c4:c0:64:88:09:
         4a:d9:5e:a1:91:e5:85:92:09:73:42:39:d6:c2:f4:c5:3f:08:
         34:4f:d0:e8:d8:3b:56:53:1c:5e:98:bd:fc:6d:d2:9b:f7:ba:
         1b:6a:4d:cf:67:43:b3:b1:ec:bf:48:ee:ee:1f:5d:c0:3a:9a:
         70:9e:fc:d8:20:ad:a4:1f:5d:f7:29:8d:b0:21:83:0d:25:91:
         b1:f8:ba:82:11:ae:c0:a8:36:c3:e1:4e:e7:8b:01:a0:11:00:
         fd:3d:17:8d:97:ee:92:d7:46:f3:d5:0e:54:a6:60:b4:f8:d0:
         b4:af:95:26:73:b8:cd:b1:c0:96:f1:47:4c:25:6e:eb:9a:6a:
         df:35:cd:76:73:58:62:2f:2a:73:85:8c:f7:04:32:6b:c9:51:
         3b:04:01:e7:ef:d7:77:0d:0d:99:ed:c5:51:04:3f:4b:12:a5:
         05:b2:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:10 2026 by rpki-client