Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
File:                     t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft (raw, json)
Hash identifier:          LuoOJGNVh5IPZDYE9mpAEsNJuHI9ZE386cF1htv5QGI=
Subject key identifier:   AB:C6:AB:BC:82:EE:13:B8:41:E7:F6:33:BB:AD:9F:28:B4:4D:5E:53
Authority key identifier: B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF
Certificate issuer:       /CN=A911EE4C/serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
Manifest number:          4C
Signing time:             Sun 01 Mar 2026 09:40:03 +0000
Manifest this update:     Sun 01 Mar 2026 09:40:02 +0000
Manifest next update:     Sun 08 Mar 2026 09:40:02 +0000
Files and hashes:         1: t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl (hash: MPbPpUP1mNh2IY4zDqKULcL+MoKUHd8uGuw+2X4/i48=)
                          2: 8D06A40AA1DE11F0A041111BC4F9AE02.roa (hash: CtuQzwGllfJ59SjM+rzLZycPJacOoACuk/ktiuBDrZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl
                          rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EE4C, serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
        Validity
            Not Before: Mar  1 09:40:02 2026 GMT
            Not After : Mar  8 09:40:02 2026 GMT
        Subject: CN=69a40973-fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:84:e8:40:a7:bc:24:d7:0d:1b:6a:2a:68:
                    35:af:20:40:14:32:6a:e2:2c:97:dd:98:38:08:11:
                    79:b1:3e:ad:9b:a6:ea:57:59:80:13:f4:75:5e:6d:
                    6f:b0:18:05:54:e2:7b:a9:7a:ba:4a:78:ad:20:40:
                    58:b2:01:c8:06:55:66:38:62:4e:e3:a1:dc:27:51:
                    74:d4:b2:3a:1d:b9:18:98:1e:e7:36:64:b3:e6:4c:
                    8a:22:57:37:62:e2:9c:37:8e:f3:92:b2:8f:09:08:
                    96:13:e8:fc:79:e1:82:3e:29:32:a0:e4:e4:45:dc:
                    00:24:22:69:3b:bb:9b:16:b8:c3:08:04:1e:2d:e8:
                    86:04:6e:1e:a4:93:07:c6:66:b6:b0:f6:bf:c7:3d:
                    ca:4c:38:ef:08:94:b3:be:fb:f0:70:c6:d9:2d:5a:
                    00:69:6f:73:56:ef:38:e2:b5:12:6f:48:05:b5:bb:
                    c2:2e:bc:d2:67:52:f3:77:55:6f:4a:36:2e:0f:f7:
                    c4:dd:91:17:78:0a:47:3c:61:b0:97:1e:d1:43:84:
                    10:b1:f4:27:14:5d:00:98:76:9a:ce:38:bf:ab:ef:
                    f3:92:8e:8f:bf:d3:19:f7:bc:10:b1:a8:a9:c1:8c:
                    e9:eb:73:ea:13:0c:3e:a4:55:61:b6:75:10:97:1d:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C6:AB:BC:82:EE:13:B8:41:E7:F6:33:BB:AD:9F:28:B4:4D:5E:53
            X509v3 Authority Key Identifier:
                keyid:B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:33:bf:29:21:b4:1b:23:86:a4:86:3c:46:ea:ea:36:8d:54:
         cb:fc:82:05:38:98:f9:ee:c5:64:6b:f1:c5:d7:7a:95:a7:9c:
         14:6f:92:ff:13:11:3e:26:b8:55:f8:a2:8e:ef:cf:d4:b2:14:
         c1:01:e7:f0:8d:04:3b:db:84:74:a0:e5:37:42:59:77:fe:78:
         5f:2c:14:e3:0a:ff:5c:57:b4:f1:f4:8f:58:21:60:4a:07:68:
         22:0b:f1:b7:40:cd:e5:18:d9:2c:e1:cf:58:c8:1e:69:aa:0b:
         d0:fa:9b:7d:c7:ef:e8:b9:2a:60:e2:0f:86:1f:9a:c5:4f:06:
         97:45:89:c3:78:57:da:36:c3:dd:ef:e4:a5:17:37:70:6d:c2:
         b1:f7:8a:33:22:1d:30:d9:11:bd:1e:ad:9a:a0:a6:e8:e2:77:
         09:cc:76:64:69:04:49:24:7a:d8:f8:57:06:36:51:ca:c3:15:
         97:04:1c:0f:a2:ff:5a:79:18:16:9a:27:a5:c4:4a:17:2b:de:
         c5:26:5b:e2:96:67:e9:ad:a3:ec:98:89:1a:29:99:13:c1:71:
         61:b6:59:67:82:46:71:29:b9:ae:e7:ed:3b:31:9d:c1:cd:aa:
         89:3c:ae:44:03:e1:51:1c:40:a4:b2:7a:de:30:56:f2:86:6c:
         b7:2c:84:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:14 2026 by rpki-client