Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
File:                     9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json)
Hash identifier:          pTv1gVozPWScjwLZCWvsbK/fNXwxpfgy+oQvmmGB52c=
Subject key identifier:   67:A1:04:91:29:50:BA:44:4D:6B:82:CB:5F:28:D6:58:F0:1A:01:70
Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
Certificate issuer:       /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
Manifest number:          D5
Signing time:             Wed 25 Mar 2026 06:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 06:01:48 +0000
Manifest next update:     Wed 01 Apr 2026 06:01:48 +0000
Files and hashes:         1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: HOgVYjOdJh76gg7l+Xxk4v0eNrudv9y0k99A+mbD7Bw=)
                          2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: O9Yt4bqmeUlYCqj4N4ngu/2vlQ4xip7ftz93ux7SErA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
                          rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
        Validity
            Not Before: Mar 25 06:01:48 2026 GMT
            Not After : Apr  1 06:01:48 2026 GMT
        Subject: CN=69c37a4d-d524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:da:86:18:59:6c:8d:10:26:52:4b:b0:d0:
                    ea:33:19:13:19:68:9f:d5:74:7d:39:5d:e7:e2:c6:
                    d9:d5:97:93:54:02:84:83:1f:98:8e:5d:a0:b9:92:
                    72:86:93:90:b6:cb:3d:53:6d:1f:c0:2c:f3:30:13:
                    f7:b0:7c:23:c7:c4:8f:54:55:79:29:d3:4a:47:92:
                    2f:26:7f:79:64:bc:e3:43:c4:96:f6:62:5e:30:a9:
                    ca:60:9f:d4:4f:97:3b:71:53:5f:f4:8f:16:21:1a:
                    3b:9d:30:b4:39:9f:21:23:59:15:3e:d7:71:8e:36:
                    d8:ed:09:f6:d0:6e:4f:d0:ef:ae:e1:c0:f6:76:82:
                    b0:b3:00:73:99:4f:98:6c:e4:34:71:3f:a2:07:4e:
                    d0:64:84:00:85:71:aa:77:dc:64:ff:f4:37:37:9c:
                    2c:ba:05:3d:53:ea:e3:8c:51:9f:fd:d5:b2:69:88:
                    e0:d5:22:2c:d0:73:07:58:f7:51:73:16:e1:27:00:
                    76:b2:9d:9d:37:83:00:5a:9d:76:63:23:c5:7c:3d:
                    91:3d:b2:e3:a8:b6:f3:bf:c8:e7:8d:54:0c:fd:78:
                    e7:14:9a:e7:74:32:ad:fe:2d:cf:54:2f:7f:38:22:
                    00:a2:af:ee:e8:0f:25:9e:0f:76:34:1b:53:8a:05:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:04:91:29:50:BA:44:4D:6B:82:CB:5F:28:D6:58:F0:1A:01:70
            X509v3 Authority Key Identifier:
                keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:0f:c7:a4:1d:3b:22:ea:c8:b2:91:d9:a0:97:94:3d:ff:
         f0:a5:34:8c:2a:de:4c:d9:20:62:83:8e:b3:3a:d8:09:a1:f1:
         85:ed:7e:70:06:38:ff:c6:fe:ff:16:c9:1d:c8:17:b3:7e:32:
         be:08:50:69:11:6d:94:47:bf:7f:08:b2:c1:fe:02:5a:67:a2:
         6d:34:b7:79:d5:b6:95:ff:59:5e:1e:dc:cb:c0:d5:79:d4:5a:
         a9:56:b0:0b:31:60:b5:6f:f7:0e:17:a0:b6:c8:02:c6:c0:68:
         a1:19:68:18:0c:e8:e7:ca:9b:c4:f2:d6:d3:b2:26:98:ea:e4:
         09:ad:15:3e:27:e0:4a:8d:2a:48:b4:f6:f8:21:b5:67:66:24:
         37:0b:e4:e7:81:fd:97:17:80:33:be:45:cc:7f:c1:c5:0d:42:
         e0:e2:82:28:9f:05:fa:21:64:ed:66:59:9d:41:d8:b9:4c:70:
         c2:a4:32:89:df:bf:89:3b:12:e6:e4:cc:71:ff:9f:ec:0d:eb:
         eb:80:8c:a1:4e:55:df:16:03:c9:89:79:c5:55:3d:1e:66:2f:
         98:eb:f1:4b:9c:66:b2:f7:b1:a6:c9:f4:d2:71:51:6a:b6:72:
         7d:d3:a8:5c:3a:d4:ee:b4:99:fc:43:73:8c:3d:96:f8:eb:18:
         b8:e2:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:11 2026 by rpki-client