Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
File:                     IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json)
Hash identifier:          cmpV/dLfFXnlaULlWBEKwary75FB517sC9aVIZA+4k4=
Subject key identifier:   9B:CE:BA:20:24:F6:E6:4A:26:52:F1:FA:B2:3E:B9:2A:DC:CF:98:19
Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F
Certificate issuer:       /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
Manifest number:          0215
Signing time:             Sun 01 Mar 2026 03:38:03 +0000
Manifest this update:     Sun 01 Mar 2026 03:38:03 +0000
Manifest next update:     Sun 08 Mar 2026 03:38:03 +0000
Files and hashes:         1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: tuuRoSFeY85fywAYBSx4p0gZultSWnRz1OdVqdTl3O4=)
                          2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: KHyj1otfkf2S5YApB/OtC5OI1QkNCQ8X27Eo+XCQipE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl
                          rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
        Validity
            Not Before: Mar  1 03:38:03 2026 GMT
            Not After : Mar  8 03:38:03 2026 GMT
        Subject: CN=69a3b49b-824b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:a1:28:dd:66:f0:87:6c:3b:32:69:ea:dd:
                    17:43:57:ed:7e:33:eb:61:c8:c7:13:2d:6d:df:8a:
                    66:05:78:91:94:17:24:e1:86:f6:34:b6:b0:97:0f:
                    ab:2e:b2:a9:70:b1:86:53:76:67:2d:da:2d:06:fa:
                    fb:83:34:61:92:ea:e0:6f:83:9b:6e:f3:2f:dc:17:
                    77:13:6d:08:d8:6d:64:c9:f4:c3:4f:9d:e3:59:9c:
                    7f:16:57:36:b5:74:1b:40:f4:b4:70:91:1f:68:00:
                    89:5c:aa:57:f7:e3:e0:b2:a9:b4:ca:35:3f:85:48:
                    d9:ad:15:a2:3c:7e:d6:59:00:44:6e:7e:f7:af:cf:
                    2c:48:25:fc:f0:fe:a8:35:9c:3c:4b:30:cf:bb:a5:
                    0e:44:f2:ca:b6:3e:39:15:b6:ae:72:60:eb:4a:ae:
                    ea:0f:62:f0:65:25:21:d0:be:e1:33:43:19:17:6b:
                    d7:a5:f4:90:af:9e:84:31:bc:f7:e3:14:12:ee:80:
                    e0:f0:4d:51:3d:f5:f7:2b:c0:85:58:2a:d4:ee:e0:
                    e5:49:54:32:a5:eb:3d:e8:3a:07:a0:e6:03:a6:8d:
                    64:92:25:ae:d8:59:7b:20:b4:4c:67:1e:94:51:1d:
                    b6:79:8e:8f:e6:1d:0a:6f:8b:dd:fa:1f:e3:bf:dd:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CE:BA:20:24:F6:E6:4A:26:52:F1:FA:B2:3E:B9:2A:DC:CF:98:19
            X509v3 Authority Key Identifier:
                keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:01:25:81:f6:d9:ae:1c:e6:5f:9d:b1:52:2f:d6:93:a9:bb:
         c4:ee:5e:a4:20:03:ae:33:5d:55:f3:41:ad:86:d9:2f:9e:ce:
         38:22:bf:8f:59:97:2d:b6:75:bc:42:e1:14:13:ad:b9:3b:bf:
         01:1b:9b:78:7f:f0:ec:f2:68:41:22:49:0f:0e:66:24:43:5f:
         97:60:83:8e:af:b6:d8:b4:63:60:b3:e7:93:2f:8a:ca:50:ca:
         a1:33:44:df:bf:ee:70:2e:e9:59:bc:3e:9f:5d:1f:7f:65:b7:
         af:92:51:d5:c7:ec:57:8a:e9:a0:b1:d4:b3:4c:9f:e0:ce:05:
         7d:03:74:e1:45:2a:60:91:a2:92:44:7c:14:f2:d5:44:54:13:
         0a:a0:fd:51:b2:20:18:1e:c8:14:88:f2:1f:e4:eb:75:93:ec:
         5a:2b:66:65:83:6d:31:02:bb:5d:73:7d:af:14:6e:5c:10:16:
         99:c9:3f:4b:db:b6:a1:58:9a:ce:99:9e:a5:26:0f:46:52:a1:
         75:28:75:c7:f0:e3:17:c7:34:a4:ac:02:a2:7a:c2:f9:1b:80:
         2d:05:2b:92:d8:33:43:0b:c2:23:a2:fc:0c:93:37:a0:f6:64:
         04:c6:06:d2:93:9c:fc:13:f3:14:f4:51:a2:db:38:a6:38:d6:
         81:48:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:47 2026 by rpki-client