Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          Tbn3m0XTlxEQTjleqm4C05Q/lVZG7BpDd79laVxQnPw=
Subject key identifier:   F6:60:CF:08:21:37:F5:6A:D8:85:6F:F3:2F:77:70:BE:B7:EB:F0:39
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          026A
Signing time:             Wed 25 Mar 2026 01:29:13 +0000
Manifest this update:     Wed 25 Mar 2026 01:29:13 +0000
Manifest next update:     Wed 01 Apr 2026 01:29:13 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: aPfN60INZ5gCFD9IQM1zN402Vlr8rcnp42BYpC5VpVY=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: 7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Mar 25 01:29:13 2026 GMT
            Not After : Apr  1 01:29:13 2026 GMT
        Subject: CN=69c33a69-93c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:c5:f3:ea:97:a8:6d:6f:69:24:7c:e2:66:
                    88:95:a9:e7:e4:a4:9e:77:dc:58:8b:60:e5:cf:b6:
                    e2:a8:72:cd:de:45:a6:ef:72:34:ea:64:e6:fb:3d:
                    8d:27:62:55:ab:56:03:f3:95:aa:7b:ab:d2:75:58:
                    68:e8:a6:cb:65:3f:c4:ad:9c:b0:8d:85:5b:ef:0f:
                    22:27:13:5e:12:c0:b6:d7:c6:39:98:9b:ac:98:70:
                    4e:cd:8d:1d:0c:20:08:ba:d6:00:6e:b0:6c:54:d3:
                    65:7b:16:5b:37:00:1b:99:a2:7e:e6:bc:5c:69:b1:
                    fd:4a:94:18:33:51:27:19:9e:61:5a:ca:8b:08:37:
                    df:72:14:69:da:59:dd:51:da:9a:e7:9f:41:21:7a:
                    0e:c8:b5:4a:ee:b5:57:48:22:14:70:22:42:0b:e3:
                    03:e3:03:74:9b:16:43:a5:9d:f8:fe:3a:8b:7c:b1:
                    a3:31:b5:e7:0b:7c:32:bd:5b:43:0a:df:50:25:f8:
                    ff:42:7d:5f:fe:e0:8d:75:a5:3b:7b:0b:11:44:da:
                    67:b0:17:b0:cf:b7:1a:54:82:fe:fc:e7:00:26:d8:
                    62:b1:c4:db:0e:f5:91:4f:2f:11:af:4f:b6:98:24:
                    b6:d8:54:07:98:d6:40:a8:b2:eb:ed:2c:d0:96:9f:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:CF:08:21:37:F5:6A:D8:85:6F:F3:2F:77:70:BE:B7:EB:F0:39
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ad:82:e2:c2:b6:2a:e1:c5:0d:e5:92:17:8b:de:99:07:4a:
         02:05:63:05:5e:9a:d4:6c:2f:c9:03:8a:02:5b:7c:31:13:3e:
         cf:2d:75:52:e2:6c:0a:cd:89:94:b3:e8:17:f8:09:bc:73:42:
         3a:ba:c4:ea:57:77:ed:c2:cc:aa:cb:f7:a5:1a:b4:83:fa:2b:
         b6:c6:b5:71:fc:2d:26:0f:ac:90:70:2c:30:ac:98:b8:fe:73:
         f3:40:f7:19:16:a9:5f:1d:1b:16:25:70:15:4e:7e:cf:9d:b4:
         19:fb:5e:aa:58:cc:d0:06:e8:03:e2:da:e7:7c:f1:65:86:bf:
         f1:f6:c9:3a:a5:07:e3:26:dc:cf:38:1d:50:ec:a8:63:ec:b5:
         ed:be:8c:99:6b:56:07:ec:93:58:72:bb:4e:1b:8a:6b:ab:0a:
         cb:48:f1:c3:d7:fe:da:96:06:ae:cc:dd:7f:28:0b:0b:15:6d:
         78:1e:ad:df:4b:da:1a:01:86:dd:da:4a:b9:9f:c3:35:0c:be:
         18:99:64:29:86:fb:ff:b2:14:61:6a:42:d5:2b:89:18:e0:de:
         a6:d2:6c:bd:9a:6c:8f:ad:15:04:09:d0:3e:8b:ea:62:77:7a:
         d5:81:70:c2:4b:c5:95:fc:f1:ea:e3:e9:29:8f:cd:39:12:4e:
         10:d0:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:45 2026 by rpki-client