Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File:                     6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier:          x2lILyxGGY9ZaZ8ZqdozKD09uZM6QC7VVTzyqNiBSMU=
Subject key identifier:   4D:71:B6:00:B6:85:4C:4F:61:A5:47:90:A6:37:20:FF:23:E3:4C:AD
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer:       /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number:          0267
Signing time:             Tue 03 Mar 2026 01:48:57 +0000
Manifest this update:     Tue 03 Mar 2026 01:48:56 +0000
Manifest next update:     Tue 10 Mar 2026 01:48:56 +0000
Files and hashes:         1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: crunWcuBqM23jtoZpbTNnDxsRvugELkavcWY2LqUB34=)
                          2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: oC6miXWdaPojqcpO8i3+8D+CMDRbnsGghAkCPd5g198=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
                          rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
        Validity
            Not Before: Mar  3 01:48:56 2026 GMT
            Not After : Mar 10 01:48:56 2026 GMT
        Subject: CN=69a63e08-1942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:8c:c2:5c:29:14:11:d8:54:42:3f:ea:b3:
                    ab:3d:56:59:68:0e:8d:de:6e:5a:ae:4d:6f:c5:44:
                    4b:29:de:03:a7:86:18:e1:68:32:06:b0:7f:af:db:
                    12:d1:b6:4b:14:8c:32:5d:89:f7:bb:32:44:5b:f3:
                    97:ae:16:62:a1:32:48:7b:9b:a1:f9:80:af:fc:b6:
                    08:84:c2:62:c4:e8:c3:5d:54:8c:71:67:d2:28:b0:
                    2f:bc:5f:c6:ab:4b:11:01:58:6a:bd:42:84:db:ae:
                    f2:b3:e1:81:7e:6a:eb:76:c3:37:51:d7:c9:1a:9e:
                    9d:66:a5:57:a8:03:22:22:18:33:05:cb:f4:ab:03:
                    de:9e:c9:7a:cd:e3:0f:01:cd:ec:60:29:73:ec:29:
                    ab:e2:35:d9:e4:9a:0b:c4:81:7e:ee:1e:f0:ec:31:
                    44:fb:48:e7:90:af:aa:b3:72:3b:6a:a0:73:92:3f:
                    ae:0e:b7:d8:d6:f9:8f:27:cc:90:ee:2c:d4:8c:5a:
                    56:b2:47:07:e6:3d:de:2b:4b:00:66:4b:c9:cd:d1:
                    b1:1f:f8:8d:88:59:21:b5:58:85:b4:04:90:7d:3b:
                    9e:5f:9c:ba:cb:1e:04:0d:f4:1d:f0:bc:a9:cd:f1:
                    19:af:dc:59:95:18:6b:e4:81:2f:cc:f9:bd:15:d4:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:71:B6:00:B6:85:4C:4F:61:A5:47:90:A6:37:20:FF:23:E3:4C:AD
            X509v3 Authority Key Identifier:
                keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:67:47:7c:a5:56:2d:f8:f2:7b:52:6f:3b:41:f9:ad:1a:7b:
         a2:df:11:27:53:08:56:a1:80:24:a5:27:d0:5a:a1:27:94:45:
         b8:79:0f:4a:59:64:6b:2f:bd:07:cf:71:12:b3:b3:80:8c:c6:
         ab:af:e5:eb:51:7a:f3:e7:68:1e:02:7c:46:20:22:d5:b2:e1:
         be:a1:8b:42:aa:79:c5:35:f5:e2:e4:d0:c1:c1:7b:81:a1:d5:
         b3:d9:f0:b2:2e:9c:ed:d7:bc:9a:11:a1:12:08:02:03:08:46:
         dd:bf:ee:6b:89:8d:a4:c2:3c:13:0d:b9:20:89:f4:cb:ac:07:
         c3:1d:ec:67:22:cb:30:1f:8f:d7:84:33:b3:b3:f6:85:6c:d1:
         e3:4f:f9:64:37:4f:13:fc:ba:8f:94:d3:e0:95:db:31:de:af:
         95:0d:6c:2f:f1:18:78:c3:e2:1c:de:4e:96:eb:d6:ec:93:ed:
         1b:2b:43:5c:1b:9f:4d:25:25:12:87:de:02:e5:bd:63:8a:3c:
         84:8f:30:c4:ce:63:ba:99:29:91:2e:71:d0:53:77:ce:1d:01:
         bf:25:ac:3f:0f:6d:01:44:28:82:74:97:cb:24:f0:35:22:2f:
         8c:0c:ce:55:fd:70:4f:23:a0:c4:05:dc:81:41:97:f0:f6:01:
         e3:3e:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:55 2026 by rpki-client