Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File:                     R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier:          e2Wtry50kwLEIfbPGhv7BLVfiX2+v1zbtXLuq94WStY=
Subject key identifier:   CD:29:84:8C:2D:70:9A:60:8A:36:1B:5C:54:9A:CC:4B:7C:FA:C9:93
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer:       /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number:          06BA
Signing time:             Tue 10 Mar 2026 21:56:31 +0000
Manifest this update:     Tue 10 Mar 2026 21:56:30 +0000
Manifest next update:     Tue 17 Mar 2026 21:56:30 +0000
Files and hashes:         1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: HJPnGJ/oMGhvYHyeMk/suS7q1e0PXeQBkyEJx6gxJxg=)
                          2: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=)
                          3: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=)
                          4: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 21:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
        Validity
            Not Before: Mar 10 21:56:30 2026 GMT
            Not After : Mar 17 21:56:30 2026 GMT
        Subject: CN=69b0938e-e87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:66:30:41:7c:f5:64:04:11:60:28:3c:1e:
                    59:24:b4:6b:0e:30:83:a0:53:7b:86:da:90:28:ab:
                    a5:79:2d:5f:21:6a:84:0d:54:47:9f:e4:3b:fd:5c:
                    cf:ee:ef:04:ec:9b:76:3f:c7:94:38:bb:25:89:82:
                    67:19:6b:15:9e:fa:11:f1:93:04:32:57:b4:65:5b:
                    4a:dd:cd:ea:e1:31:ad:8f:2f:67:18:bc:f8:09:71:
                    ab:05:3b:cf:4f:89:cc:fe:86:5b:72:9d:cb:43:ef:
                    0d:f7:c3:16:35:18:de:b9:a2:18:4d:82:d6:fa:63:
                    42:b6:3b:b2:61:16:e4:ea:f2:e1:83:87:e2:5c:51:
                    d8:bc:56:8d:9c:0d:dd:0e:26:aa:c8:7e:87:ca:b1:
                    6c:b6:cb:ac:c7:51:87:d9:22:f6:57:35:49:c3:b8:
                    d4:09:e4:03:03:cc:1b:5e:c7:57:a5:8e:0b:03:8f:
                    22:38:b6:dc:12:52:19:8b:2a:8e:00:f4:bb:0b:fe:
                    e0:1f:68:13:5b:db:2d:d1:bb:13:29:3a:7b:95:ad:
                    65:57:01:b0:cf:00:41:df:17:e6:19:96:89:f4:e0:
                    d4:58:c5:d3:40:6d:b8:68:82:a8:5f:f4:0f:ed:fc:
                    8c:9f:58:60:d7:14:93:89:f3:48:9a:95:0b:92:77:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:29:84:8C:2D:70:9A:60:8A:36:1B:5C:54:9A:CC:4B:7C:FA:C9:93
            X509v3 Authority Key Identifier:
                keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:08:90:53:0d:e9:8f:91:ba:27:b5:d9:ae:70:21:05:d5:
         44:a6:5a:4a:76:c5:14:cb:53:5c:b3:a8:c8:6f:48:c2:b0:f7:
         b0:f6:21:81:7e:c8:e6:c6:2f:dd:36:28:19:39:fb:c8:76:08:
         1d:1e:f8:5a:e0:df:16:21:65:4b:53:15:6e:7d:0f:b1:52:a1:
         9f:17:44:86:e6:36:d1:df:d5:ad:27:92:44:04:b0:7f:23:51:
         cd:e8:6b:f0:c0:99:af:03:82:9e:8c:8c:97:29:22:d0:29:03:
         c4:1c:b1:2e:95:ed:9e:95:13:75:f7:30:3a:44:2f:64:12:16:
         bb:bb:b2:41:93:76:c4:94:fe:79:81:22:28:a2:9e:bd:8f:f9:
         9d:7f:db:df:47:72:1c:a1:40:ad:4c:42:4e:65:55:c3:7f:4f:
         67:32:05:1c:37:46:5c:f0:7b:ad:78:3c:20:5d:4d:c2:72:33:
         79:e1:ee:22:7d:b2:cd:d7:32:9a:9a:8b:b6:78:5d:fe:97:4e:
         c8:c0:74:81:8d:c2:98:8c:b6:08:22:c5:47:34:4c:ac:36:7e:
         23:63:d7:bf:7f:cb:c1:95:cd:44:ba:55:06:78:5c:62:2b:e6:
         75:f0:09:54:45:06:a5:66:44:2f:75:85:d5:cc:00:13:48:34:
         d7:2c:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:52:42 2026 by rpki-client