Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File:                     F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier:          zB+5qslIvdSWpIGCKZbhXAZzAW4TYzwyMfukSjQT9vk=
Subject key identifier:   3D:1F:E1:5B:63:27:E5:74:69:A5:44:A4:9E:88:FC:F3:84:CC:0A:E8
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer:       /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number:          69
Signing time:             Mon 02 Mar 2026 16:27:34 +0000
Manifest this update:     Mon 02 Mar 2026 16:27:33 +0000
Manifest next update:     Mon 09 Mar 2026 16:27:33 +0000
Files and hashes:         1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: a9jYsDn4NasaomtMQJTQIZlXjWnlVIU39pnd3d5xsBc=)
                          2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: EyDqWRIP2HZa6wsll9pUJm6te+t2HIVlnzU+AhtjxWs=)
                          3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: wvK2ETV8i4DCKPkGUmCmcmpFvE7SUGW/xJVm1sWIU9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
        Validity
            Not Before: Mar  2 16:27:33 2026 GMT
            Not After : Mar  9 16:27:33 2026 GMT
        Subject: CN=69a5ba75-f5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:8d:a9:cf:e6:30:87:5d:e3:6b:32:00:aa:
                    7f:48:e0:d0:1e:ec:97:b4:4e:6f:e9:6a:c4:8f:08:
                    a1:04:6b:27:87:f3:f1:3f:60:8d:ff:47:44:34:77:
                    b8:a6:16:68:7a:2e:62:c7:19:90:f9:9b:c0:52:45:
                    92:3e:3a:e1:68:79:a6:35:53:19:fc:e2:ef:c1:2f:
                    5a:25:89:7e:03:1c:39:40:05:fe:a7:40:40:64:88:
                    34:91:a1:f9:6e:aa:11:bd:aa:ae:e5:e9:b5:89:1b:
                    b4:8e:34:13:1d:ed:dc:4b:ec:95:b7:11:09:36:34:
                    1b:77:b3:58:51:cb:52:6b:7a:12:cc:03:32:6f:da:
                    95:b3:fb:39:9d:46:80:bd:25:41:e1:fc:f3:4b:4d:
                    4f:95:7c:87:ce:32:b5:7c:1f:b0:a5:4f:a5:27:13:
                    5d:20:1c:63:40:0d:28:cb:5f:37:d5:8b:82:1d:03:
                    fb:74:47:98:2d:1c:46:76:33:b0:51:f6:4e:18:11:
                    b2:15:27:dc:5a:c4:b8:cc:f6:b3:82:fe:e4:36:ab:
                    a8:c3:a9:e0:de:83:99:0b:3d:12:cc:cc:81:1b:bb:
                    48:57:a7:c8:a1:01:a7:e6:ba:89:32:61:4e:0d:13:
                    37:a6:86:1c:9f:35:f2:3f:bf:ab:ba:ee:9a:40:f8:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:E1:5B:63:27:E5:74:69:A5:44:A4:9E:88:FC:F3:84:CC:0A:E8
            X509v3 Authority Key Identifier:
                keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:23:51:c1:68:0f:be:c1:65:2e:97:87:9f:63:f2:85:48:d7:
         75:fa:bd:9a:a3:34:f2:97:8c:ac:62:d1:e1:f0:74:a3:bf:7d:
         f0:bc:77:2a:46:8e:e3:a3:65:f7:8f:e3:78:c2:99:5d:e9:dd:
         26:f7:27:23:b9:e8:67:9a:df:73:1d:3d:4a:91:08:55:0a:cd:
         ea:1b:da:09:5e:80:99:6f:5b:64:e6:86:f6:a0:54:a9:83:78:
         14:a0:ad:a5:d5:b4:97:77:25:b5:66:68:de:7e:3d:da:f2:eb:
         ec:36:f5:7d:3c:a7:b9:b1:62:0d:98:0e:0d:41:c4:8a:a6:80:
         53:a8:b0:a8:5c:6d:8f:ec:f6:10:5b:dc:e9:56:94:d6:d1:2e:
         d5:eb:15:2a:8b:f0:91:c3:d8:2a:2b:f6:16:5f:4c:61:41:9c:
         0a:4a:c8:92:55:34:0a:e6:d3:94:12:69:c0:86:31:8a:52:62:
         03:be:0a:06:e4:62:a9:3b:38:44:a8:78:ca:98:62:eb:c1:95:
         94:32:3b:78:d1:68:b6:74:5c:a4:a5:31:b0:38:37:7d:81:5a:
         ae:ee:9e:29:3f:74:e8:9f:2e:1c:2f:82:f6:14:4c:8a:b4:31:
         ca:0d:69:61:2d:1e:a5:68:0d:9e:e5:9c:78:cf:1b:45:74:f8:
         af:a3:00:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:19 2026 by rpki-client