Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File:                     r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier:          +WxLz42EnIOe65zSb4EwmCwFIv7Y142QkqnqEfsBwmA=
Subject key identifier:   A3:70:42:22:12:98:3E:91:D2:07:3C:0D:C0:55:B1:00:F3:F6:5A:9B
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer:       /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number:          0809
Signing time:             Fri 06 Mar 2026 15:50:30 +0000
Manifest this update:     Fri 06 Mar 2026 15:50:29 +0000
Manifest next update:     Fri 13 Mar 2026 15:50:29 +0000
Files and hashes:         1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: os0+cMQJzdWsH+f+DnsMKfkAUANV4uhAaVwoA2BwCEc=)
                          2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: MdKj745wIJAm1a/+fD8XVUD4Xm85NkWf5HLxKsTPL9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
        Validity
            Not Before: Mar  6 15:50:29 2026 GMT
            Not After : Mar 13 15:50:29 2026 GMT
        Subject: CN=69aaf7c6-97f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:83:87:3b:3c:f9:33:e9:ba:89:51:32:b3:62:
                    35:ec:cc:d4:ff:8e:95:89:d9:f2:43:18:d5:2a:3b:
                    db:b8:93:cc:8c:16:8a:f5:20:c9:b2:73:0d:48:a4:
                    a4:5e:b9:33:67:a4:af:5c:40:5b:58:f0:88:84:1b:
                    f7:30:8e:2b:7e:ee:e6:e1:ca:5b:16:db:ec:ca:b5:
                    62:99:83:03:a7:7d:b2:72:bc:5f:0c:01:b3:6b:bb:
                    eb:bb:8e:76:f9:4a:1c:e0:3d:a3:d9:4e:25:2b:7f:
                    2a:90:5c:d1:4a:08:a5:ef:50:86:71:1d:86:c3:d6:
                    ea:f9:cf:94:e4:a6:1d:a4:f4:4d:4c:fe:81:fc:fe:
                    35:85:16:ee:f1:84:bf:c2:3b:c3:0d:ce:0e:d6:ce:
                    f7:ef:e0:91:a1:82:c3:fd:4c:2b:59:fb:89:2c:0b:
                    f8:f1:90:12:50:82:24:59:4c:b5:1b:65:4e:82:0b:
                    11:14:d1:ba:03:06:d2:a5:56:d3:07:37:01:b4:fd:
                    20:38:7f:70:12:44:a4:83:70:d1:bf:81:0d:6a:ee:
                    64:77:5a:90:62:86:a9:d9:97:b3:1a:ed:5d:e1:82:
                    d0:c4:26:91:27:a6:a2:b8:e7:94:d6:36:c6:d7:df:
                    53:50:d1:e8:1f:8f:13:ff:74:2e:07:0d:af:5b:1d:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:70:42:22:12:98:3E:91:D2:07:3C:0D:C0:55:B1:00:F3:F6:5A:9B
            X509v3 Authority Key Identifier:
                keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:63:b5:2f:47:b6:3f:b8:10:1d:01:18:7f:6f:68:32:0b:
         f0:48:b2:f8:40:6f:06:3f:ce:af:71:6e:c2:9d:f6:00:e3:0d:
         7a:b9:aa:72:06:97:2c:3d:18:37:89:87:a6:e5:fd:6c:d1:8c:
         75:df:a4:dd:81:26:8a:9f:ea:10:8a:b6:59:bb:f1:ab:81:1c:
         75:cf:4e:0d:02:04:a0:b7:05:8d:3f:7f:db:42:f9:fb:93:83:
         4c:19:f2:d3:49:57:34:34:1b:6a:3c:4a:4a:44:70:32:e3:e8:
         b7:36:db:fd:7d:c8:75:c9:66:b1:0b:b2:ec:84:f4:76:0b:3d:
         1e:a6:98:4a:da:a7:0f:80:ee:b1:cd:8a:b0:41:8b:f1:77:fe:
         ed:72:f6:c4:4f:c5:db:71:97:3f:39:f1:2e:26:4d:59:1b:70:
         84:49:a4:32:6b:cf:28:45:3a:76:33:5c:22:31:56:9a:f3:44:
         8a:28:66:b4:ac:f2:ea:72:dc:2c:2b:67:e1:cd:b6:a2:6f:bc:
         b9:f0:18:26:5a:86:14:7b:01:a6:6c:4b:4a:04:c2:25:88:5f:
         8b:95:b1:40:59:c7:90:9e:be:19:13:1d:87:42:4b:c3:49:e5:
         0b:43:0c:63:3f:6b:e6:a2:11:45:9e:85:6b:2a:9a:87:e0:46:
         af:a4:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:38:37 2026 by rpki-client