Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
File:                     9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json)
Hash identifier:          31vmJQCEoA8entNy6foBL6QJi7fQia9ZZXIgU2eQVwk=
Subject key identifier:   15:C8:4A:91:EA:E8:CD:65:AA:E7:5D:A7:7B:76:C5:79:FB:12:41:3F
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
Manifest number:          0ADF
Signing time:             Tue 24 Mar 2026 19:40:56 +0000
Manifest this update:     Tue 24 Mar 2026 19:40:56 +0000
Manifest next update:     Tue 31 Mar 2026 19:40:56 +0000
Files and hashes:         1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: HeMPrHl1E7zzF1jAysn+oUPPaHAvi3rCRNVNZQJrvSc=)
                          2: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: hsNkAINjk2ZrSkKYe7O+OAvLcD/yedut/tj8L/fDTRc=)
                          3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: Md5gFpZEYAkNjb3njZGDBbECXerJEDLQA/G2Oi33PwM=)
                          4: 143DD7B61EB411F1BCEF50BD1F3D8C67.roa (hash: 0IuTpckRCU4Q3jTTuR+nuWiQepp3s7lYKom5T1Zo58I=)
                          5: 4F7540B64BE311F096B8CE67C4F9AE02.roa (hash: lEmewPZEKQ+KAyO91wHJfIDoW8azxEDTYzC0XZdatJs=)
                          6: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: woZN1RZ3CcFFDhSK+AWqbDYzTCUQTLV/86fTxGSM89s=)
                          7: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (hash: j3wvdVZdlkttK5LQzYWRv8MyzczrZzv4IowyLYxZ5Ak=)
                          8: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: COoBB02MxjsVzMJ4S0NyDpkOD0uHJhw8SJh40dOTE+s=)
                          9: AA872C46B89711F0A8B6AF18C4F9AE02.roa (hash: L8XeDcqYKfEwtUixbxiuEo2nfMcVKjSSiCD4J312+Jo=)
                          10: 9C2DF5841E9111F1989D25890A3D8C67.roa (hash: HDq7+gSVKnkf/c5eNwZvjr0tOJ7ji6ox/xnWAscgsm4=)
                          11: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: 6AybJyEnaCUIrzFIlAdZVQqdIRL6Z88oDgQ+Wlf2glk=)
                          12: 2A4D3504E07C11F09FEE3C963A6F56BC.roa (hash: pvrAUtNSj5xYTp9GoyYA4vwFLQjwkuK0ozJfp/rLlrQ=)
                          13: 5BAE030A275B11F19E227EF4BC833773.roa (hash: bBgqO9rWr9YMkTxYRxwlYeP/srvBn8X9wnQYhhfy9Xw=)
                          14: 30612F364BE411F09B3BB887C4F9AE02.roa (hash: eopPOPwLkEVbi55WtWRB1v9qi25upZwX13O32WrQgWU=)
                          15: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: tbv3mJpYtopeQGTyPvYuiDpi3ylLpd97qu4zEKbjLRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Mar 24 19:40:56 2026 GMT
            Not After : Mar 31 19:40:56 2026 GMT
        Subject: CN=69c2e8c8-ab71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:6d:b2:69:25:71:82:7a:ee:fe:20:68:6b:
                    ba:19:ab:57:44:6f:fb:1f:27:0f:23:cc:59:01:ac:
                    b6:2d:b5:4e:eb:ab:dd:1f:80:c5:8b:5d:b4:48:e3:
                    57:d7:3d:63:09:2d:ad:6c:bf:06:74:06:f9:55:c7:
                    6e:c8:2b:a1:ef:d7:a5:2d:3c:b5:2d:b6:78:ff:62:
                    54:09:20:08:de:1a:c3:4f:6d:ee:02:de:d0:4c:5a:
                    50:e6:9d:8c:54:fd:b4:61:27:7e:8e:25:ae:db:74:
                    84:3c:8f:8e:b6:65:6d:7c:4f:ef:a6:3f:6d:18:d8:
                    ad:a2:14:0f:69:0b:1f:9a:d1:fc:7e:e3:f1:b9:64:
                    f5:68:69:0a:6b:dc:ae:3d:b1:57:d9:94:44:e3:4d:
                    09:8b:5b:6d:1b:53:36:4e:fc:32:4f:62:87:c0:bf:
                    42:a8:b6:39:19:c3:ac:27:43:a0:8f:d5:43:1b:c6:
                    24:cf:08:88:c8:43:63:1f:20:f6:00:95:eb:2f:2a:
                    89:87:a6:97:af:7c:1e:b2:dd:df:4c:fc:4d:59:c2:
                    d9:11:04:49:98:ce:0f:ef:2f:e9:f5:a3:a2:9d:5e:
                    ff:0c:09:46:2b:ce:aa:75:dc:d4:9f:96:c6:cf:61:
                    ee:ea:fe:a9:dd:9b:15:e0:2d:7b:1b:04:1f:bf:12:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C8:4A:91:EA:E8:CD:65:AA:E7:5D:A7:7B:76:C5:79:FB:12:41:3F
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:a4:14:a1:1f:9f:e6:f8:4c:b1:87:4e:60:a0:84:85:58:
         4a:5f:49:2a:e3:e3:6c:b6:59:73:ab:01:a7:48:cc:7c:87:d0:
         2f:d3:72:62:e4:fa:7c:47:7e:a4:05:b3:bd:b3:46:7e:34:63:
         ea:31:f9:96:4b:18:bf:11:53:1d:32:1f:88:6a:ce:00:db:9b:
         05:da:5c:12:5e:9a:81:b7:76:3a:9a:78:c8:cd:ba:60:8a:3b:
         68:d5:38:9c:4d:ab:b4:7f:89:27:0f:e8:79:06:4f:9f:6d:77:
         56:24:e4:47:61:c0:60:68:01:9f:c9:16:0f:3f:cd:f6:00:0b:
         1d:22:cd:ba:75:94:fe:52:d6:e9:a7:d7:88:35:0e:87:7f:09:
         fe:5c:6f:ea:95:b9:58:36:60:72:28:13:83:8f:f3:6b:32:7d:
         10:b1:51:15:55:b0:e1:fd:37:94:b5:c4:86:81:ad:22:7c:1d:
         3b:26:d1:52:5d:e6:82:09:80:f6:11:65:c6:2a:4c:ee:19:f8:
         28:97:b3:8a:6f:6d:24:1f:70:db:c2:18:e2:2f:68:bf:0c:63:
         79:78:2e:af:b0:f5:9c:e4:41:38:78:b7:dc:ee:62:3a:d8:fd:
         90:2a:2f:75:c4:86:8e:fc:5e:7e:64:54:9e:6d:4b:30:08:23:
         f3:eb:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:44 2026 by rpki-client