Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
File:                     voedoSIo9Sr7TRD2P4DgJvSFFqA.mft (raw, json)
Hash identifier:          ll0+KYrkVZRTfi4/TsJILPWc7F+12y4etxBU9Pb0RYk=
Subject key identifier:   76:38:C4:26:B2:7E:F9:17:08:38:49:83:77:21:B1:85:30:75:2D:96
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Certificate issuer:       /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
Manifest number:          3F
Signing time:             Sun 01 Mar 2026 09:52:33 +0000
Manifest this update:     Sun 01 Mar 2026 09:52:32 +0000
Manifest next update:     Sun 08 Mar 2026 09:52:32 +0000
Files and hashes:         1: voedoSIo9Sr7TRD2P4DgJvSFFqA.crl (hash: OHJHKreJEnegX+Tu6gosmQrKvzQmBr9zNHbE2OtUAuw=)
                          2: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (hash: Id7suSsBB7TTPuhlLWbghNG7hbdjnTVpkz27ylBkiVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
                          rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
        Validity
            Not Before: Mar  1 09:52:32 2026 GMT
            Not After : Mar  8 09:52:32 2026 GMT
        Subject: CN=69a40c61-36da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:87:f2:6f:f6:4c:30:b9:6b:84:2c:c6:31:
                    4a:0b:8e:74:5c:ee:f4:b2:d5:92:65:ec:d3:c0:45:
                    31:f7:75:25:e7:30:c9:23:cc:f6:ea:4b:60:b8:50:
                    7a:fa:39:4a:c7:a0:96:cc:cd:6b:dc:b0:4c:b7:6c:
                    4f:4a:da:2c:10:9b:df:15:68:33:b7:19:50:47:35:
                    d0:21:ee:31:70:24:b0:53:8c:2b:43:77:b9:6c:ac:
                    94:39:83:35:e6:5a:50:15:45:54:89:cf:98:44:60:
                    26:b9:f6:01:ae:a4:11:1e:de:ca:28:7d:b9:38:ba:
                    ec:b2:d2:cf:b0:8d:e1:f5:e0:89:c2:41:ba:62:eb:
                    49:ae:fd:d9:e7:a1:ea:41:cc:c5:22:9d:f4:8b:a3:
                    49:8e:b1:d3:63:dc:5b:d4:72:30:a6:10:9d:a8:5a:
                    e3:3d:39:ec:ff:39:96:96:0e:d7:af:fa:3e:5b:43:
                    f4:f4:21:35:d3:11:45:76:e3:46:1a:dc:1b:d9:6c:
                    b9:bc:b2:3e:ae:a6:eb:61:0e:52:47:df:d0:0c:79:
                    d3:e7:27:d0:db:f3:73:93:c3:a9:44:12:66:99:7e:
                    cd:f4:02:c6:44:3c:90:c9:1a:9e:3d:16:67:09:e5:
                    e4:eb:35:78:d8:6b:a8:1f:31:b4:a6:71:2d:e1:7e:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:38:C4:26:B2:7E:F9:17:08:38:49:83:77:21:B1:85:30:75:2D:96
            X509v3 Authority Key Identifier:
                keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:45:ab:9a:7f:5f:9f:27:4a:14:24:ec:92:17:89:a0:a3:
         00:a2:89:5d:39:fa:10:6a:b5:48:93:59:47:a0:8f:91:5c:08:
         7e:bc:fc:f4:bf:e2:61:d1:67:8c:ec:1b:62:49:c8:94:aa:9a:
         82:5b:47:83:71:6c:37:8e:7f:1f:56:f3:52:ff:f2:dd:94:2b:
         6c:b6:e9:73:88:e5:8f:dc:9f:3e:82:dd:eb:db:52:c4:32:cf:
         57:0e:b6:fd:64:13:fd:c2:4b:39:ee:2b:1b:6c:8a:ea:1f:84:
         65:b7:a7:a4:60:b5:f6:69:1f:a3:ec:96:69:7a:16:b5:67:70:
         20:39:e7:81:c2:ea:9e:39:17:ad:b4:80:3b:92:db:10:18:c2:
         ce:3c:22:76:40:28:af:ef:61:5e:76:1e:95:0b:e6:15:05:fd:
         f3:3d:e7:46:02:9b:5e:73:8b:34:d8:e2:00:59:32:55:8e:54:
         f4:82:43:72:cf:f3:8f:2c:b4:8e:5e:c3:eb:d5:13:0f:83:95:
         a0:bd:6b:21:c5:ba:db:a1:83:c3:0d:35:82:8a:c7:31:4c:62:
         f8:ce:07:42:b5:f0:5e:66:a0:2b:a7:f7:17:5b:81:29:ab:68:
         a1:a3:1c:dd:1a:6a:62:1b:34:16:fb:10:4c:55:1d:9b:fa:0a:
         e8:34:29:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:27 2026 by rpki-client