Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
File:                     k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft (raw, json)
Hash identifier:          WJQPQK96bq+sL7E4gk9g1UWxfj7J5luQSv/u1jQW8EE=
Subject key identifier:   0B:F6:7D:0E:2A:11:39:E6:4E:5E:08:1A:B9:5B:39:39:6E:81:ED:18
Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17
Certificate issuer:       /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
Manifest number:          0E
Signing time:             Sat 07 Mar 2026 08:22:05 +0000
Manifest this update:     Sat 07 Mar 2026 08:22:04 +0000
Manifest next update:     Sat 14 Mar 2026 08:22:04 +0000
Files and hashes:         1: k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl (hash: /hUJlg6nan6wFpdAWIsy/cSZAcQIsxa99qHIYr35tF0=)
                          2: 02093118122411F1AA38F5561F3D8C67.roa (hash: COScsYKWPn8uTa42WHb/HXOiPCDhiIh6ECc0ujsw+yA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl
                          rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217
        Validity
            Not Before: Mar  7 08:22:04 2026 GMT
            Not After : Mar 14 08:22:04 2026 GMT
        Subject: CN=69abe02c-219f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:23:ad:82:eb:cf:e0:b4:34:23:0c:ba:ad:
                    65:8a:01:8f:b6:78:09:03:b9:bb:a2:fc:b2:fa:db:
                    50:fb:a3:bd:9e:15:5c:7d:bb:ff:6d:ed:c3:8d:69:
                    42:4d:9f:99:41:ca:39:69:2f:35:5f:fe:6f:08:25:
                    63:dd:6c:4a:d8:ca:87:33:14:17:96:86:f6:d7:57:
                    c1:5b:be:ba:6a:5c:d7:2a:cc:f2:72:56:b5:02:92:
                    e3:c1:4e:97:75:fe:d3:03:da:eb:38:2e:00:ce:f0:
                    8c:85:66:23:08:6d:f4:04:27:d4:82:a2:71:2b:50:
                    5b:d0:8d:8f:36:42:bb:10:25:6c:32:2f:51:1f:c1:
                    5a:26:cb:c0:93:02:a5:87:34:60:a1:08:d1:6f:47:
                    de:c9:41:0a:e5:50:0b:96:21:27:19:34:02:63:7a:
                    e9:01:ac:09:ad:82:5c:b9:0d:6b:62:9e:70:f1:58:
                    84:aa:eb:66:f4:12:08:c1:76:1f:21:4a:33:13:78:
                    c4:a8:ad:b1:f1:41:e0:62:f5:8f:13:be:0e:e8:01:
                    ae:57:d1:f4:10:8f:2c:0b:d1:db:56:fb:9e:2a:93:
                    46:95:0c:e5:40:e6:0a:8c:c8:8d:ed:4b:2b:c1:ff:
                    ac:4f:6d:d2:ef:88:ac:ee:5b:57:6e:26:c9:f4:93:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F6:7D:0E:2A:11:39:E6:4E:5E:08:1A:B9:5B:39:39:6E:81:ED:18
            X509v3 Authority Key Identifier:
                keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:0d:96:52:b6:c0:15:97:78:6d:4f:2a:8a:91:87:09:46:
         e2:8f:35:f9:78:df:6b:db:27:69:e7:82:3d:cc:d6:62:24:86:
         ef:5c:87:32:31:02:fc:01:51:b9:be:7c:bf:c0:82:3b:b7:b1:
         05:8f:3d:d3:35:a2:9f:b3:da:76:77:49:93:4a:df:3c:2b:c4:
         24:c8:c5:b9:38:9d:f3:7f:cc:b8:5c:34:43:48:fb:ac:ae:51:
         19:78:0e:ed:0a:b5:b1:d5:b0:07:29:31:2b:2a:3a:86:c6:1e:
         b5:30:cc:5e:86:09:ce:04:93:92:71:35:aa:1d:db:72:bf:05:
         1e:5d:03:6c:1f:fc:c7:36:1c:e0:dd:e3:20:28:ed:df:f8:41:
         e3:3a:ba:d7:3c:16:dc:54:8a:af:dc:0b:df:6a:34:b7:2a:1d:
         14:73:a8:ec:eb:03:d4:f2:cc:80:54:36:2a:6d:d0:4b:8a:76:
         5d:be:f8:b0:50:a0:e6:ea:a2:f8:4e:d9:58:f2:25:82:60:0c:
         82:dd:78:47:aa:09:21:0e:5a:a2:0e:f7:57:9a:16:b4:d9:9a:
         19:e7:28:a9:81:47:b6:bf:c9:c1:a7:ca:9d:27:8e:24:ca:39:
         84:92:5a:76:2f:06:33:cd:c9:51:06:7a:c3:92:4d:3c:d6:16:
         61:f2:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:30:04 2026 by rpki-client