Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
File:                     Si40gGAMyq6JEirTWopQhmCKce0.mft (raw, json)
Hash identifier:          oBnav99g6JuL8vRKcatyquy4xwKZHK81Tel6OypGvig=
Subject key identifier:   81:EA:03:85:39:6C:6D:FE:9F:5C:99:D6:9C:28:A2:59:5C:55:6F:B6
Authority key identifier: 4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED
Certificate issuer:       /CN=A919603C/serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
Manifest number:          1E
Signing time:             Sun 01 Mar 2026 10:22:20 +0000
Manifest this update:     Sun 01 Mar 2026 10:22:20 +0000
Manifest next update:     Sun 08 Mar 2026 10:22:20 +0000
Files and hashes:         1: Si40gGAMyq6JEirTWopQhmCKce0.crl (hash: FYjqdQNvh/Z58LJsLvldwv99gIiIea7+Crm+WYQ0maE=)
                          2: 6D31F08EED3411F08AC2355C496F56BC.roa (hash: twXZ1+cMtQnbloMYaJZUKgoR86O6NyBBWpia0F1MIzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl
                          rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919603C, serialNumber=4A2E3480600CCAAE89122AD35A8A5086608A71ED
        Validity
            Not Before: Mar  1 10:22:20 2026 GMT
            Not After : Mar  8 10:22:20 2026 GMT
        Subject: CN=69a4135c-09cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:2a:e0:f9:1d:d1:57:86:a2:35:0b:50:9e:
                    c9:92:96:ae:94:88:f3:4c:23:35:fe:20:47:2a:95:
                    ef:93:47:4b:84:21:5c:bf:f4:0a:59:13:ff:e3:08:
                    19:15:f8:91:b9:db:77:49:b5:57:52:46:d0:82:05:
                    15:a7:7d:d8:ef:cd:9c:56:f9:82:b6:45:21:e4:6b:
                    0c:fb:00:09:53:e5:b0:4b:83:2d:18:64:51:78:0c:
                    b8:57:27:16:43:1d:bc:7f:39:fa:7d:d3:26:bd:fd:
                    1c:b4:9c:76:e2:94:3c:d5:eb:73:28:e0:cb:cd:ff:
                    dd:e4:84:98:80:23:04:e1:00:07:94:f9:76:e3:41:
                    f4:99:7c:1e:bc:2d:88:f6:f8:25:0c:73:d8:df:8e:
                    e4:20:26:85:fa:bf:aa:1b:ef:ea:b3:7b:8f:ed:c2:
                    08:7f:b9:1d:f2:00:06:e1:bd:b5:dd:70:4f:e2:e2:
                    0d:7d:a9:af:1d:30:80:b9:15:81:e4:a6:fa:bd:63:
                    97:9a:5a:31:11:d1:08:b5:1a:90:e8:b9:bc:1c:8b:
                    eb:3f:0a:be:89:50:b9:e1:1b:f1:1f:9a:ef:78:55:
                    e5:42:39:e7:d9:23:40:98:78:c1:88:d8:4d:68:e9:
                    aa:14:3c:09:b3:d1:f3:04:a7:bf:d0:90:1b:3f:ca:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:03:85:39:6C:6D:FE:9F:5C:99:D6:9C:28:A2:59:5C:55:6F:B6
            X509v3 Authority Key Identifier:
                keyid:4A:2E:34:80:60:0C:CA:AE:89:12:2A:D3:5A:8A:50:86:60:8A:71:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Si40gGAMyq6JEirTWopQhmCKce0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/D9BDF23AED3311F096BA5E0B496F56BC/Si40gGAMyq6JEirTWopQhmCKce0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6e:6a:b2:25:a8:94:49:19:bf:dd:31:e2:78:76:98:f7:d3:
         45:e1:4d:de:2a:8d:e0:c0:62:fd:eb:0d:9b:d1:8c:70:6c:86:
         a3:74:91:34:72:9d:8b:ab:c3:f1:29:ed:a9:af:0f:75:f8:81:
         12:fd:0a:d5:d9:1f:2c:e7:4a:7b:0d:d1:7e:2c:a6:31:23:56:
         8a:58:39:5d:01:bb:9b:b7:78:06:60:6b:c7:18:fa:76:bd:ad:
         01:f0:4f:04:98:25:ef:8e:cf:86:5f:c0:83:3c:55:f0:fb:71:
         22:66:0e:1c:9f:09:55:df:85:fe:5b:3b:c1:8c:67:43:5e:fd:
         3e:37:0b:d8:0b:a0:25:a8:26:45:47:61:89:ba:b6:3d:91:91:
         6e:07:4f:96:74:54:8a:0b:1c:d5:66:18:e3:28:ec:73:1e:fc:
         2b:43:57:82:3b:bd:d6:2c:fc:f4:71:e8:65:34:4a:b6:ab:c0:
         6b:3e:ee:6d:55:b8:12:b5:fc:a9:c9:3a:2f:a5:7f:41:2d:ae:
         ed:8d:bf:42:29:3c:6d:ac:7b:4d:dd:69:9b:82:24:8a:22:34:
         7a:eb:e5:f8:b9:4e:85:66:7b:20:67:9f:17:04:cd:bc:cb:04:
         49:e5:1e:85:7b:73:2d:81:b5:77:49:eb:70:16:86:e1:9c:96:
         b5:3b:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:00 2026 by rpki-client