Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
File:                     9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json)
Hash identifier:          +4eWMQ9qA1130u90dVWrooWjWI4pjQ4ENwkqiqAJQnU=
Subject key identifier:   24:21:B6:3F:6B:FE:88:B8:7E:33:CF:BF:C1:84:2F:8B:80:90:A6:BF
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Certificate issuer:       /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
Manifest number:          0389
Signing time:             Sat 07 Mar 2026 00:10:38 +0000
Manifest this update:     Sat 07 Mar 2026 00:10:37 +0000
Manifest next update:     Sat 14 Mar 2026 00:10:37 +0000
Files and hashes:         1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: ee0P9qUCat4wvJ81NTfTXs+hgysl9+Izw2aZyLpPRek=)
                          2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: BIuosdWuF+4ep+QMwFKZ6npqwjzH0+zcNnprYLZ5I98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 00:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
        Validity
            Not Before: Mar  7 00:10:37 2026 GMT
            Not After : Mar 14 00:10:37 2026 GMT
        Subject: CN=69ab6cfd-d79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:03:5d:6e:c1:47:8e:90:0a:01:6e:a7:0d:
                    ba:04:b1:6d:07:55:19:5a:93:77:2a:cf:d7:95:b9:
                    2e:16:0e:6a:6e:00:99:c1:d7:bf:dc:b8:d8:3e:91:
                    91:c8:c2:ec:83:aa:93:d8:34:7e:b5:ab:cb:9d:2d:
                    4b:62:3a:ff:50:04:14:4b:1d:fc:c0:e7:88:50:8a:
                    f9:84:c2:cc:2e:7b:a5:70:b6:04:80:0d:a2:51:31:
                    cb:24:0e:f2:3a:27:c4:17:e1:c9:76:b1:9f:4e:28:
                    18:e6:5b:f2:ab:c0:45:0d:f8:ad:3d:eb:02:8b:7a:
                    5a:23:22:a2:61:d2:c1:7e:11:bb:69:97:b1:a7:1c:
                    34:b6:fd:b9:6d:b9:df:f7:0c:9c:41:0e:b0:e8:1f:
                    75:41:35:e2:02:19:3b:aa:0c:ee:e3:2f:5e:72:f0:
                    06:b7:bf:1b:b5:f6:12:f3:fe:5e:a8:f7:6a:f3:f6:
                    37:72:5b:db:f2:8e:28:f8:af:e9:6e:96:8f:64:86:
                    dc:92:62:60:a5:b0:6a:61:75:e5:12:97:0a:22:a4:
                    4c:d4:8a:2a:e3:e5:88:a7:b8:d2:60:f6:bd:a4:2e:
                    17:7b:10:7e:69:67:44:00:9a:c2:a8:f9:1d:b3:fc:
                    25:26:6e:8e:8e:cf:f9:ad:bf:bc:52:8e:53:47:5f:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:B6:3F:6B:FE:88:B8:7E:33:CF:BF:C1:84:2F:8B:80:90:A6:BF
            X509v3 Authority Key Identifier:
                keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:7a:0d:b1:89:1f:38:73:55:98:8c:5e:4d:9f:7f:c2:a6:
         29:50:f2:06:96:22:f8:32:15:7c:4b:41:b0:d5:c8:12:2a:6e:
         a6:8f:6d:45:4a:b6:35:de:97:ba:b1:dd:97:87:db:96:e1:64:
         52:b3:05:9b:db:d2:02:76:75:87:4e:a5:ff:aa:7e:35:78:ef:
         9a:ff:df:00:a6:5e:b3:f3:14:d3:26:40:0e:8f:03:35:40:2a:
         3e:6f:a8:e2:09:de:5c:9d:35:2b:28:ca:1f:fe:86:9a:21:95:
         10:fe:e4:ce:68:6e:b5:9d:48:46:19:49:0e:8a:0e:14:7a:a4:
         29:15:d7:e2:37:c6:90:89:4f:41:bd:17:a4:52:4f:d6:a2:e3:
         c6:05:f6:57:a1:3d:03:13:fe:de:49:d4:a6:98:b5:01:42:0e:
         d7:72:24:7a:59:32:d1:2c:ad:48:44:a9:db:1d:80:54:fd:31:
         a0:37:51:5b:cb:0e:a5:c7:1f:98:ce:21:c4:5b:07:75:b2:1d:
         b3:a2:a2:7f:61:43:d0:fc:f7:d6:46:49:7d:62:7f:73:25:d8:
         3b:44:3f:df:c8:23:c6:14:eb:35:f1:20:63:bd:83:c0:36:28:
         41:7e:25:9e:21:6e:d0:8e:ff:a8:d4:03:dc:6a:3d:0b:c4:87:
         5d:3c:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:38:15 2026 by rpki-client