Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          /CRXEsmN4OS6UIDXqW714dXe31OfqbK31gMj84miapE=
Subject key identifier:   EF:98:F5:84:0F:15:96:E3:2B:AC:CD:F3:1B:24:08:9D:7E:79:7B:D0
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       0839
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          0818
Signing time:             Wed 18 Mar 2026 20:57:13 +0000
Manifest this update:     Wed 18 Mar 2026 20:57:12 +0000
Manifest next update:     Wed 25 Mar 2026 20:57:12 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: ozZfQpZhqMvTmr5sSRqbqTzi3ypNbxzr9AG7wphu0zg=)
                          2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: s0JtQjaquy1haDTdVO3sJ1UiTrHlMay3DOPS02FW8WQ=)
                          3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: Mq0l/N1vCUMtxfQV/uhAAkIAGBUYqoCXgKbxS8XYpMA=)
                          4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: HkzCk2HljndiEq4GBL2zGsRRu25qjHkzwRnuz6BJbuM=)
                          5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: 1KjRG3v8pkaGSW0/hInFx/2rpIZZ7GFqFAtwvgwsN4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 20:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: Mar 18 20:57:12 2026 GMT
            Not After : Mar 25 20:57:12 2026 GMT
        Subject: CN=69bb11a8-64e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:7f:70:7d:1f:c4:a6:be:e0:e1:50:80:37:
                    a9:73:5b:8d:49:6f:26:f1:3f:7c:5b:69:65:02:84:
                    17:30:ef:eb:59:ac:42:bd:0e:a9:39:0a:66:4e:84:
                    c6:d4:02:55:41:09:f6:18:82:39:c6:c9:e9:e6:e3:
                    6a:ef:47:54:1c:ff:b3:f2:c9:0c:a8:cb:b7:99:ea:
                    fb:e2:dd:57:74:f2:8d:fc:40:2d:05:45:41:15:76:
                    9c:f0:4c:da:ef:43:11:f9:d7:3f:c6:8a:54:9f:66:
                    5d:b4:a4:1c:8c:f5:43:02:0f:a6:e8:6e:50:96:41:
                    16:25:6f:f7:47:e3:62:a5:79:c4:f2:91:ba:d7:b4:
                    50:3d:08:26:71:41:aa:7d:40:bc:ff:b8:45:53:e2:
                    68:6a:36:9f:76:49:f9:d0:1a:8f:35:9d:5f:b5:e6:
                    09:42:b6:18:38:8f:a4:80:36:2c:33:b2:a6:73:c3:
                    b8:98:e3:e1:ca:b1:1b:e5:9d:bf:e0:c7:b4:72:34:
                    3b:32:e6:fc:81:c2:98:8b:8b:82:e2:2e:c1:41:ff:
                    e2:c5:41:2f:0d:d7:41:3a:16:d5:55:da:f3:e1:b5:
                    57:47:52:56:bb:6e:d5:58:e8:01:ad:40:d4:e0:78:
                    7d:e8:85:c9:5b:14:64:4a:89:b1:3f:33:6a:08:6c:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:98:F5:84:0F:15:96:E3:2B:AC:CD:F3:1B:24:08:9D:7E:79:7B:D0
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ba:f6:57:4e:73:74:69:e4:f3:c7:9e:83:a3:26:d6:80:5a:
         b6:10:a8:dc:72:be:89:65:84:2a:65:91:a0:f9:f7:b0:9c:b1:
         6f:93:62:30:36:b0:7a:78:7d:58:f6:6e:60:88:1e:5b:0d:aa:
         e0:b8:76:97:7c:d2:28:41:12:32:42:84:f8:5b:0e:8f:6f:9c:
         56:c8:5b:f4:85:e6:89:cd:81:fe:da:92:43:9a:58:0e:c5:54:
         40:fb:c7:21:62:f2:b9:e5:88:cd:fb:f0:d9:c7:c9:53:2d:56:
         01:40:75:b1:4a:e0:e7:20:cf:6e:46:45:5c:e4:62:82:6b:3b:
         6b:62:66:fa:14:d7:a9:19:dd:1d:d0:03:02:d6:5d:13:f0:5d:
         73:96:0f:1b:ba:b0:6b:95:b8:32:c3:99:55:bd:38:c5:9f:ad:
         0d:99:6d:5a:f4:84:24:b3:b6:4e:ea:35:60:af:d7:7c:a6:27:
         60:c5:8d:e3:8f:d7:21:df:cc:a8:4d:af:48:13:a1:34:8e:22:
         e1:53:fe:6b:d4:a3:d6:16:18:d7:d6:a1:eb:9c:42:03:66:75:
         e5:fa:a5:a1:b9:80:f9:48:1e:8d:44:e8:a9:79:86:fc:91:9a:
         84:35:3f:1e:15:7e:0d:e9:86:0e:ea:d4:bb:f4:d1:78:aa:df:
         4c:63:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 13:20:54 2026 by rpki-client