Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          MPqExG4W38R0mBmn2s8KONadnc/jL+tnYCTN50wBfdk=
Subject key identifier:   EC:53:AC:DA:EF:75:54:FE:E9:3E:67:73:B3:CB:80:CA:AF:ED:1B:96
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          0153
Signing time:             Fri 13 Mar 2026 04:06:16 +0000
Manifest this update:     Fri 13 Mar 2026 04:06:15 +0000
Manifest next update:     Fri 20 Mar 2026 04:06:15 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: WnfxBM7UiOomHass+h/gd8wLEMaHsvGp/oYWPpG1oC8=)
                          2: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QRkcZsDgIJjnFNUASfY5VIlKLs39JH6eip+JITXFwy0=)
                          3: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: B4ENBOCrcVu9vsQndhxBPW5NCETQQHs3UmACZhgsEgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Mar 13 04:06:15 2026 GMT
            Not After : Mar 20 04:06:15 2026 GMT
        Subject: CN=69b38d38-75cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:79:5e:31:96:da:44:c0:07:c5:b1:71:ec:
                    26:38:6f:41:41:30:8f:fd:b3:34:60:63:f7:20:07:
                    06:c1:67:12:6b:db:fc:f1:52:67:ec:2e:6e:bf:87:
                    a4:f6:e8:85:2e:a7:4b:e9:0b:5c:83:da:9e:d6:85:
                    cf:8f:85:eb:6a:d8:fe:35:96:19:b5:55:e8:77:24:
                    70:d4:05:8e:79:e4:3b:40:20:ad:77:0d:87:b2:d8:
                    fe:52:6b:df:f7:9d:e8:b9:64:a9:8b:f2:d4:4d:fc:
                    1d:01:ac:09:ff:1a:af:fd:da:e3:69:04:19:e1:40:
                    3f:30:d4:d0:69:87:5f:7a:93:eb:d6:aa:9a:bf:43:
                    c6:c7:5c:44:58:52:4a:0d:df:f3:3a:02:da:a8:e2:
                    64:3e:48:78:db:2d:84:fa:fc:4c:65:ff:ed:24:bd:
                    2d:73:3b:7c:cd:07:c7:bf:02:9e:af:5b:f7:06:d9:
                    4a:7c:58:c4:00:a4:40:49:b1:48:c0:3e:7f:62:28:
                    c6:67:f1:0b:17:d8:6e:bc:99:e7:4a:37:b3:7c:a0:
                    2d:e9:a4:de:be:de:e4:fb:96:7a:ac:57:e1:93:7e:
                    b1:20:5e:e7:9c:bd:a6:1f:30:89:37:41:d9:8e:8d:
                    da:e5:ce:1b:fc:05:ac:81:f9:15:e2:98:3d:4b:f7:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:AC:DA:EF:75:54:FE:E9:3E:67:73:B3:CB:80:CA:AF:ED:1B:96
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:82:b4:3f:be:83:c2:7a:b0:e9:11:c5:be:43:c8:4a:20:c8:
         59:8b:e5:d1:87:56:f8:6a:dc:3e:02:9e:77:f5:b4:fd:50:12:
         ef:ea:42:bd:57:d1:fb:26:de:7e:8b:07:5f:35:ad:21:68:be:
         74:c6:b5:f0:49:7a:81:c0:6c:8b:99:f8:95:2c:64:e8:b2:2d:
         16:40:63:30:d1:e7:9f:09:ad:65:80:45:0a:d7:83:a1:80:56:
         3e:59:3b:ef:91:91:be:fe:f5:40:97:4e:2d:bb:3b:e0:0e:cc:
         14:f6:9a:8e:0e:b0:6b:12:09:bb:07:8d:d0:5e:26:5e:07:51:
         36:75:a8:32:fc:d1:25:f8:88:8d:ad:f5:b2:e5:c2:2e:5d:72:
         43:18:2b:dc:16:81:a5:62:66:0d:b1:fe:95:90:1c:71:1e:d8:
         b2:71:d7:0f:b7:68:50:99:fb:d2:0f:18:e0:98:d1:1c:ae:2e:
         80:80:d5:e8:38:f1:85:85:11:72:10:e9:74:c4:1c:6a:1b:12:
         f0:03:9a:85:54:6a:c4:92:41:06:09:1b:7b:a7:fd:51:b5:35:
         4d:49:85:86:93:c5:90:d0:ac:f6:97:13:ad:70:f6:3c:18:8b:
         2a:16:83:80:b0:a6:31:69:53:5d:11:52:2f:50:a4:78:f8:9b:
         60:92:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:14 2026 by rpki-client