Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File:                     8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier:          EefXbD5dbnBNGek9tGz+B6e4XVniMa65s3ai9BF0ce4=
Subject key identifier:   8E:93:34:DD:2D:20:30:4D:6A:45:E2:5D:D5:87:1B:2E:BC:ED:AE:35
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer:       /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number:          94
Signing time:             Tue 03 Mar 2026 07:09:49 +0000
Manifest this update:     Tue 03 Mar 2026 07:09:48 +0000
Manifest next update:     Tue 10 Mar 2026 07:09:48 +0000
Files and hashes:         1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: pljJXPrRwKDjyaOfrgmcIpvJbFfDXhFgQAhMbndmw28=)
                          2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
        Validity
            Not Before: Mar  3 07:09:48 2026 GMT
            Not After : Mar 10 07:09:48 2026 GMT
        Subject: CN=69a6893c-0add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:0a:f8:75:bc:45:ee:4a:8e:1c:76:c9:fd:
                    9b:4e:dd:27:a2:4d:97:6a:9d:1e:23:f7:e3:14:06:
                    40:e4:1c:1a:3a:72:6b:50:32:6b:62:fc:d6:8e:c3:
                    fa:e6:5a:07:7d:85:4e:c3:12:68:f2:b9:4e:67:a0:
                    d5:15:cd:57:59:f3:b7:5b:26:d8:8b:7b:03:72:a8:
                    1d:0d:16:3b:8d:d8:da:50:4b:18:c7:d1:c0:ce:db:
                    77:ba:90:e5:34:62:42:e6:14:b5:cd:23:d7:94:7e:
                    46:a3:fb:31:b4:0c:b7:92:b3:64:3e:ff:b3:5b:10:
                    f9:02:9b:e5:7a:0f:c6:32:70:83:7b:39:6c:52:bc:
                    cd:2c:00:bc:60:30:c3:2b:ef:f0:15:7f:44:2c:dd:
                    5f:39:a6:0f:be:5e:84:56:5f:41:1d:5a:01:33:3e:
                    9d:96:e2:f1:84:60:e1:78:fa:71:4c:51:51:c1:6d:
                    69:cf:99:47:0a:94:cf:77:fb:86:35:87:a1:c7:f4:
                    76:0a:0b:48:c1:e7:81:04:16:79:63:7c:3f:35:da:
                    37:6a:fd:67:65:85:85:9c:35:3a:1d:df:25:ed:81:
                    b0:b8:bd:49:8d:ea:ce:c2:0c:cc:ee:56:2f:79:9c:
                    9b:5f:a2:05:95:60:d2:dc:ac:c6:79:8a:5a:02:d2:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:34:DD:2D:20:30:4D:6A:45:E2:5D:D5:87:1B:2E:BC:ED:AE:35
            X509v3 Authority Key Identifier:
                keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:91:91:d2:39:d9:78:e2:c0:0f:c6:9f:6d:52:85:ad:11:1a:
         32:b7:b8:c0:0d:b2:96:66:77:3b:43:04:19:33:8a:2d:7a:38:
         22:2f:59:82:2f:cc:19:24:b3:13:80:eb:f6:6b:e9:8f:fa:fa:
         39:09:8b:12:3f:a0:41:37:0b:e6:59:bb:c4:b1:5f:b8:5b:2e:
         87:d3:a7:9b:5b:47:05:42:dc:af:e0:fb:62:58:29:37:0a:4e:
         5e:e7:d8:48:29:22:a4:47:3f:b1:01:dd:b6:e1:69:70:bc:58:
         62:c8:97:e6:67:9d:14:93:f8:90:07:f7:a4:bd:55:37:bd:9b:
         2b:0e:0c:5e:6e:cb:c8:e7:04:ae:fe:a6:3f:88:ae:af:c7:e0:
         d4:2c:f7:2c:c9:98:78:6a:35:84:7f:23:9e:9b:a7:ed:8d:e2:
         57:a7:fe:36:4d:d5:27:ea:25:6b:9b:ee:f5:36:be:59:51:89:
         0f:a6:f0:d7:e0:b7:74:90:a9:1d:dd:71:29:6a:c0:35:44:6e:
         50:6b:76:4b:c3:26:6f:d4:ad:37:89:a4:f8:c7:03:20:f4:19:
         df:4f:96:f7:04:84:88:b4:28:8d:e4:e5:f7:1d:27:75:de:d7:
         2b:79:fd:53:29:5c:13:07:ab:3f:29:f6:c6:74:42:b8:4c:04:
         ac:67:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:49 2026 by rpki-client