Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File:                     pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier:          WRJeXJjkOI1td+sNSx/A50HvSkKcnwMPbJ9HfFQ3bN4=
Subject key identifier:   97:C7:66:51:52:E1:4C:D3:12:94:E3:1E:4B:9C:A9:B0:5E:20:F0:E7
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0E3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number:          0DFE
Signing time:             Thu 12 Mar 2026 17:43:05 +0000
Manifest this update:     Thu 12 Mar 2026 17:43:04 +0000
Manifest next update:     Thu 19 Mar 2026 17:43:04 +0000
Files and hashes:         1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: ofax1WxvdjTv0PcDwKQKEYd3umFAURnTyyZANkZX4Zg=)
                          2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: ltbYxws7Rw/rSPye0/WcjsDqeiqLOxoMXvKf46ZTVAo=)
                          3: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: b7gH2EkdhzRI0Z6FhasKunf9OM1B3XL5SRlAsaUsy5U=)
                          4: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: h4mHAhf5A9DDgDOZFjKTZuq9CuZjmVVongMunDCFuGg=)
                          5: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: McIgsASpGkGyxbUUg/oDEhbFGdsxWQYiizXWy8fJF2Q=)
                          6: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: AaMW+LlCOA85lK0XL2X+XTiK4VwW2KOVSnP7ROjHAcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3642 (0xe3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Mar 12 17:43:04 2026 GMT
            Not After : Mar 19 17:43:04 2026 GMT
        Subject: CN=69b2fb28-d0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:cf:0f:5a:52:60:1f:a1:04:a6:83:ef:62:
                    a6:00:d4:0e:ea:e5:11:5d:93:fe:a5:a4:49:f3:c8:
                    66:54:9c:53:38:5e:08:a6:7a:fa:8a:58:8e:40:a7:
                    0d:ff:88:f1:3b:01:6e:06:ef:e4:bc:c1:ac:e2:bf:
                    90:ca:08:4c:35:0a:fb:a0:7c:d5:d3:3a:38:e3:3c:
                    33:6f:66:df:f7:e1:f7:92:2d:1d:10:3c:47:99:92:
                    dc:a8:73:90:75:66:e5:3c:b4:ad:26:a4:d8:4d:f0:
                    cd:07:df:9c:97:b6:1e:13:72:08:c5:d7:ed:30:5e:
                    96:40:20:39:04:da:f9:05:7e:8e:9f:df:1f:e9:82:
                    43:49:2b:48:20:bf:e9:a3:81:9b:ec:b5:d4:06:11:
                    fe:e4:8e:cf:5b:f1:d9:52:c1:e7:0c:fb:3e:b9:b3:
                    63:6b:54:83:5c:3f:c9:4b:f8:d7:dd:03:f0:89:7c:
                    e3:ef:23:af:ec:e4:4a:bc:a5:61:b5:d6:08:ea:c2:
                    7c:e9:14:ca:45:3e:3a:f2:da:4c:f9:62:5f:cb:3b:
                    62:9f:25:60:74:2b:3f:98:4e:03:8c:b4:cb:78:91:
                    15:6a:79:8a:61:67:2b:06:9f:2e:dd:f9:82:4a:e3:
                    8e:da:b4:51:a6:e3:6d:39:1e:86:bf:c4:5d:f3:01:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:66:51:52:E1:4C:D3:12:94:E3:1E:4B:9C:A9:B0:5E:20:F0:E7
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fb:0b:fc:52:a3:6b:cc:5d:00:42:cf:54:3c:d8:08:b5:c8:
         53:72:67:6f:6e:04:23:59:31:1c:d7:0e:9d:64:d7:f7:f5:c5:
         38:e2:25:26:59:72:36:e6:fc:45:fd:f9:3a:8b:3e:6f:10:69:
         e3:d0:01:9e:d4:07:d7:8b:11:d0:ec:a6:5a:73:dd:26:61:9e:
         55:ae:25:ed:2a:eb:ce:3c:eb:46:fd:8a:b1:f4:98:a4:92:3a:
         6a:df:07:c7:a4:03:cb:19:1a:b9:4c:9e:02:e5:ee:4e:7e:ec:
         bf:16:8a:be:f6:b1:1b:b3:48:7d:aa:ca:7b:b0:ad:a4:d1:f4:
         96:51:c5:cb:f2:61:46:69:a4:35:c1:80:63:6b:0c:d2:63:d8:
         d8:6f:84:88:5f:49:45:f2:3b:f0:e9:29:cb:93:ba:81:e9:b0:
         1f:1c:80:a8:7d:97:55:34:03:1c:7a:de:a0:f5:48:7d:6d:18:
         3a:4b:64:38:32:45:9f:28:47:e3:46:d3:d4:13:7a:c1:29:42:
         9b:b5:23:8f:e0:0b:7d:8c:f6:60:71:93:d4:0a:54:e5:5a:99:
         38:ea:84:32:b9:83:62:c1:a1:6f:5d:b0:1e:d7:b1:eb:00:29:
         4f:6d:cb:c5:6d:b5:0d:8d:f0:1d:82:2b:67:83:c6:5d:df:b9:
         4d:70:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:52:55 2026 by rpki-client