Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File:                     T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier:          /QtqaahpjmqWJ3WSRaaJ+ytLLhMnfa1GUSuY4osC3Rk=
Subject key identifier:   6D:8F:3C:A6:15:A4:2B:2C:B3:00:80:44:51:BF:C8:71:AF:EF:FD:96
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer:       /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number:          0102
Signing time:             Tue 03 Mar 2026 05:43:03 +0000
Manifest this update:     Tue 03 Mar 2026 05:43:02 +0000
Manifest next update:     Tue 10 Mar 2026 05:43:02 +0000
Files and hashes:         1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: zdmvtuM+mZwG0CqVamgytuAsr8oNwMzb8iUSe57O8aI=)
                          2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: GWxvbbNMDfEq6GjtAEuqf8igE/KKZ5xAZH6r5owzQZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
        Validity
            Not Before: Mar  3 05:43:02 2026 GMT
            Not After : Mar 10 05:43:02 2026 GMT
        Subject: CN=69a674e6-d97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:bb:8b:48:7b:28:95:e1:24:de:cc:25:3e:
                    0c:d8:9b:11:16:c8:bf:75:54:6a:3f:a4:f0:80:15:
                    a8:00:f0:69:2c:ed:f2:1e:7c:5d:99:96:fa:3b:f7:
                    b9:f3:64:07:eb:e1:2c:42:a1:90:9d:0d:0c:f4:fb:
                    46:31:c5:cd:6e:45:8b:44:3f:eb:0d:fc:dd:34:05:
                    d2:b4:10:8c:e6:c9:f1:ac:7e:71:03:c2:b1:24:51:
                    d5:74:51:81:c6:6b:23:c6:73:9b:ae:79:c0:0e:d3:
                    6b:6d:79:3e:0b:51:b1:61:d2:ef:3a:34:65:95:b6:
                    49:e5:42:e9:2e:83:99:00:23:ab:7d:5e:1a:b0:ec:
                    ec:34:5f:49:59:dc:eb:ca:b1:23:ff:a8:43:3c:03:
                    d1:77:4a:63:4c:ae:88:5a:97:95:e3:94:92:c8:68:
                    23:fb:ce:a6:be:67:02:42:33:82:4b:d9:d6:1e:23:
                    fa:97:1c:e5:9e:35:f9:31:bf:a3:64:aa:63:e9:43:
                    cd:09:2d:03:0e:54:46:87:80:3c:ae:f0:dd:c2:96:
                    6e:27:dd:43:30:e6:5d:a2:09:f5:1f:6c:f0:c1:e2:
                    5c:b4:91:f1:54:bb:0d:c1:1d:0d:63:23:77:ef:c8:
                    c1:50:3e:ec:b7:85:4b:ee:8c:f7:de:9d:ef:a3:8a:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:3C:A6:15:A4:2B:2C:B3:00:80:44:51:BF:C8:71:AF:EF:FD:96
            X509v3 Authority Key Identifier:
                keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:42:8e:4a:5d:b0:da:80:42:6a:8b:fa:6d:66:e4:d3:a2:
         9a:21:2b:c4:16:6c:09:3f:07:ea:9a:39:e2:06:d7:f7:a2:56:
         b2:ce:ce:8a:f9:7a:1f:e8:58:9f:e0:6a:b9:2b:73:5d:98:b0:
         01:e3:dd:d7:4a:12:43:c6:64:94:5a:02:b9:50:18:49:a4:ab:
         14:17:72:9d:5a:32:2e:1d:c1:0e:8c:8a:c3:e7:eb:28:8c:9d:
         2f:12:f4:40:69:71:cd:77:a5:43:5e:aa:64:98:71:6b:f4:70:
         44:1d:b4:a8:77:18:26:b3:87:6b:f7:18:0b:3a:ad:69:8b:a8:
         80:83:b5:ea:15:0c:a3:ec:9c:cf:99:19:71:43:18:5c:de:cd:
         55:df:0c:b9:f3:9b:e3:af:8c:d3:b3:4c:69:58:dd:07:8e:cd:
         72:96:1e:28:8a:31:28:dd:3c:83:33:90:ba:47:fe:64:89:af:
         6e:62:f5:bb:53:dd:e9:f7:ae:58:03:99:84:f6:6a:b8:43:b2:
         8a:9b:96:3c:7c:15:e2:aa:0e:34:a0:e4:e0:38:6c:56:b5:1f:
         06:72:14:7d:09:42:9f:e3:b9:7b:a2:65:f8:df:c8:21:6c:91:
         62:f1:ba:2d:c4:75:5c:ac:5d:4d:e1:29:1d:ec:d0:c4:05:56:
         80:be:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:09 2026 by rpki-client