Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
File:                     cA9SATINxKfw-nMFyVWhmUwYJgA.mft (raw, json)
Hash identifier:          qMq6MsFwDoOiKpx4P0d1Z7n7kSaejmbxtQinKAO8/hw=
Subject key identifier:   88:0D:11:20:82:D2:A4:3D:AC:02:0C:9A:B6:79:AF:C7:9D:A8:EC:7F
Authority key identifier: 70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
Certificate issuer:       /CN=A9151290/serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
Manifest number:          22
Signing time:             Mon 09 Mar 2026 07:37:57 +0000
Manifest this update:     Mon 09 Mar 2026 07:37:56 +0000
Manifest next update:     Mon 16 Mar 2026 07:37:56 +0000
Files and hashes:         1: cA9SATINxKfw-nMFyVWhmUwYJgA.crl (hash: axRvp/gHpPTEw4AdMFJFVTwFViJ0G8SMQa9EHiXWQX8=)
                          2: 90360F96F35D11F08865480C646F56BC.roa (hash: +hYht0+VhMqie7zs0TemkZjgGj97GrUe4MXcjgwo+x8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl
                          rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Mar 2026 07:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151290, serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
        Validity
            Not Before: Mar  9 07:37:56 2026 GMT
            Not After : Mar 16 07:37:56 2026 GMT
        Subject: CN=69ae78d4-dde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:43:58:cd:75:97:8d:b7:83:cc:a1:a9:94:
                    16:35:0c:58:82:db:49:85:f8:f2:73:8b:cb:43:b7:
                    6d:f8:80:34:54:24:30:c5:54:07:e7:ae:b5:94:1b:
                    ca:54:73:2c:f4:de:dc:68:70:e7:8c:c8:d1:b0:46:
                    f3:4b:ae:af:2e:52:8f:57:10:3c:7b:32:8b:a8:d9:
                    76:73:0d:5b:ab:e8:5b:b2:01:ef:3a:e5:14:3a:bc:
                    cf:fb:f5:f7:d7:48:95:7b:e6:c5:74:c2:10:77:04:
                    65:c6:18:8c:74:96:05:ba:67:6a:ce:9b:c4:9d:5d:
                    50:fb:70:0b:00:03:7d:22:61:f6:87:ce:db:5b:a1:
                    2c:cb:45:0a:10:f6:bb:39:43:87:47:37:ba:a1:e6:
                    f2:e3:b0:4f:6a:82:c6:97:f0:e6:8a:7e:89:57:82:
                    e8:de:0a:19:0b:db:8a:b2:f0:05:56:0c:56:a3:1c:
                    dc:6b:ab:4f:8b:c0:f8:f8:b2:78:b7:fb:62:30:d7:
                    a4:ce:b9:ce:7e:53:5a:28:d8:ca:f9:f7:13:1a:cd:
                    90:4d:a0:24:1a:a0:5b:01:79:4c:c3:ef:b0:47:0f:
                    27:b9:e7:04:70:32:a1:41:87:84:9a:a5:51:58:b6:
                    43:d3:02:e5:e0:ba:04:2d:25:6a:f9:21:ae:2d:7f:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:11:20:82:D2:A4:3D:AC:02:0C:9A:B6:79:AF:C7:9D:A8:EC:7F
            X509v3 Authority Key Identifier:
                keyid:70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cf:e9:a3:2a:4a:84:87:4b:06:88:cd:e6:4b:c0:91:0c:ea:
         5a:78:16:26:21:bf:7f:4f:3b:28:0a:24:b1:f1:bc:85:65:3e:
         5f:0e:dc:f4:52:d8:d0:68:63:69:47:0e:e7:ff:b3:4e:63:81:
         dd:27:63:4e:32:69:ee:59:fc:57:16:c9:22:fd:ef:15:99:7b:
         24:6a:a9:35:52:fc:61:fd:89:ec:29:a1:89:1e:82:6e:e0:20:
         3b:5c:ce:05:c1:76:6d:df:4c:bf:c1:dc:70:62:00:77:60:a4:
         61:7f:a6:47:9a:30:98:27:15:b5:91:11:3d:a8:86:d2:8b:c9:
         17:bd:be:13:96:ed:d4:1e:47:47:99:93:31:2b:43:6b:c0:53:
         13:a4:8b:ec:5a:f0:db:ad:68:a1:84:d9:ef:76:65:a9:19:c9:
         4a:9d:7a:47:00:9f:54:f6:7d:a7:38:d8:21:23:d5:fe:fb:ae:
         00:dd:ba:96:46:f9:55:ea:ad:73:2a:29:65:dd:c1:40:e7:a2:
         46:43:72:25:43:42:e0:07:4c:6d:52:80:ef:b6:2e:ea:20:f6:
         78:8f:8a:32:cf:d2:b6:6b:83:72:ab:87:81:2a:57:d8:d9:63:
         0f:b9:42:6f:4b:b6:52:24:65:43:74:01:a7:6f:6e:9e:5f:ef:
         8b:30:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 12:02:44 2026 by rpki-client