Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File:                     4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier:          NHchkgQwQOEZj9PcbyLgJE/3eam+eOnhpzpyKmJS7rQ=
Subject key identifier:   99:61:03:C1:D8:38:7F:85:AF:95:92:07:32:9F:FA:F6:6C:56:E5:D3
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number:          3D
Signing time:             Tue 03 Mar 2026 08:05:31 +0000
Manifest this update:     Tue 03 Mar 2026 08:05:30 +0000
Manifest next update:     Tue 10 Mar 2026 08:05:30 +0000
Files and hashes:         1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: irB0CLmO3IVSl6OC/Ad7Mg2v4eLG6ZMZuAMMUc/cMmQ=)
                          2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: Mar  3 08:05:30 2026 GMT
            Not After : Mar 10 08:05:30 2026 GMT
        Subject: CN=69a6964b-141f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:38:12:34:a0:9c:8d:86:aa:7c:e8:cb:04:
                    2c:9e:81:0d:c3:16:05:d7:7a:22:a1:52:dd:f9:c3:
                    fc:00:97:18:e6:a0:b6:69:c2:ca:e1:0f:26:81:4c:
                    8f:d9:33:2d:cc:4c:48:4e:42:27:d5:ce:08:3e:f7:
                    f4:ea:50:12:7b:a4:98:ad:9e:52:45:b3:b7:61:2d:
                    09:0f:b8:8d:23:e4:8e:79:28:3e:18:d1:db:18:53:
                    b2:e3:6c:03:bd:9e:16:91:6f:62:17:23:88:3d:6f:
                    2b:72:96:c6:04:fb:64:b1:a9:d7:c1:71:92:e6:ce:
                    34:b2:6e:37:52:57:cb:01:6a:8e:6e:4d:a0:ba:30:
                    0e:8d:43:12:65:92:10:3c:67:e4:a5:43:3f:ad:ec:
                    53:91:da:50:85:e4:32:c8:8c:98:e1:4a:b2:6d:b0:
                    8c:0c:cc:e2:71:f3:52:3f:8b:4a:48:38:c0:ca:11:
                    d5:41:a3:21:49:1f:a9:c2:71:c3:a8:f7:5f:a8:ba:
                    2d:32:98:3b:85:f1:d1:84:16:40:1d:c0:0d:be:58:
                    55:a0:cb:8f:44:bc:1c:6e:bd:0a:d3:c2:dc:e1:3a:
                    03:86:92:7c:58:80:7d:49:62:bd:16:63:96:1b:96:
                    55:dd:41:c0:6c:12:b3:88:77:20:4a:fb:5c:c2:9f:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:03:C1:D8:38:7F:85:AF:95:92:07:32:9F:FA:F6:6C:56:E5:D3
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:0e:9e:b9:47:78:2a:66:ef:a9:55:de:91:61:a4:4d:48:
         24:b4:4d:68:b0:ff:e5:99:d0:1f:cb:2b:eb:1f:f8:c5:bf:9d:
         13:dc:ec:a9:a4:a6:46:69:b8:cd:19:18:bb:8a:81:f7:1a:df:
         81:ec:6e:05:94:58:5b:21:7d:d6:ef:44:96:52:ec:6a:e5:fe:
         7a:14:fb:0e:41:32:fd:c7:7f:aa:99:19:c1:53:81:75:1a:15:
         79:40:3a:dc:51:6b:75:4c:96:d4:72:05:5e:83:f6:a4:1d:07:
         36:30:ca:64:b3:b1:1e:44:74:75:22:ba:fd:f9:2c:c5:c6:5f:
         1b:98:fc:33:8c:a7:a7:61:c9:60:9d:17:6c:4e:67:48:6b:1e:
         48:68:87:15:fc:d3:f3:59:d2:04:4b:75:3b:61:51:da:68:54:
         d4:f8:da:16:1e:bb:72:18:50:de:2d:1a:4d:82:22:5a:ab:c1:
         5b:1a:70:ed:4e:bb:dd:53:ee:f9:ab:80:62:95:8e:29:54:d4:
         38:90:32:eb:44:22:5c:7b:d2:77:3a:dc:ff:9d:32:d0:53:ce:
         41:15:39:2d:4b:c6:8b:c4:56:57:a4:64:f1:e3:20:0f:f8:2d:
         54:5b:f3:ce:ec:f8:28:d3:e9:96:5a:c9:31:b1:90:2c:37:56:
         3c:e8:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:01:40 2026 by rpki-client