Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File:                     9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier:          WIr0bRY0NoA2YFCUR46YOoqc+fqObvJxC8wKFc9BvZI=
Subject key identifier:   89:32:DE:2F:10:56:76:8F:2F:44:69:2E:ED:6F:D9:FE:7F:E4:81:89
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number:          0E16
Signing time:             Tue 24 Mar 2026 17:41:38 +0000
Manifest this update:     Tue 24 Mar 2026 17:41:37 +0000
Manifest next update:     Tue 31 Mar 2026 17:41:37 +0000
Files and hashes:         1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: t+bXX1oxJ/IIbJqjeWckE++AaahBpBiWBxlehG82564=)
                          2: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: jTINudEF1PytBKZidbXRaxHONjKZ1aZaJMZAVtgeI8c=)
                          3: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: BuWqwvZP/WAlc5pltyqdqjYN2tYsPZenNwkSyiZ+IjM=)
                          4: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=)
                          5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: zwfI7z3VRHjM1UE44yYU3R88zP61K+ImfUlgTgT4/G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3641 (0xe39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Mar 24 17:41:37 2026 GMT
            Not After : Mar 31 17:41:37 2026 GMT
        Subject: CN=69c2ccd2-a6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:32:ae:85:44:f3:d5:f1:8a:25:e8:a4:9d:
                    a8:8e:3a:f8:d8:bb:78:c2:75:96:61:45:70:c2:f1:
                    40:73:f6:ad:8f:c5:0a:0e:26:bd:8c:3d:04:15:0f:
                    46:fc:be:c1:b9:98:32:8b:60:6e:10:15:45:4c:0a:
                    21:e1:3d:1e:ff:3a:1a:84:4b:e0:53:4a:5f:d7:a1:
                    74:46:04:4d:e1:99:6b:55:0d:4f:b2:bd:49:be:11:
                    60:d4:c3:42:3b:c0:7b:1e:3a:0b:e0:0d:91:0d:72:
                    9d:72:e4:0c:f9:a6:0c:71:af:48:79:4f:0a:7c:e0:
                    39:87:4b:8a:5d:0e:c5:83:e4:74:aa:95:2b:53:8c:
                    73:8a:d4:c0:f4:dc:83:27:0b:f7:db:14:a7:07:06:
                    f2:82:3a:c1:a8:73:46:24:79:e7:5a:4c:24:44:2e:
                    06:f3:9a:d4:2b:dd:4f:21:71:e7:18:74:b1:ba:b0:
                    24:bb:f4:ce:4c:5b:97:0e:e5:2a:88:5f:33:f4:88:
                    f1:8c:f4:c9:6a:51:10:7e:90:3c:22:6e:b8:87:3e:
                    5b:e2:5a:d0:63:84:3e:88:11:af:ca:31:7e:96:71:
                    51:5c:d3:9f:3e:d1:af:ea:8d:e3:54:0e:cb:96:e8:
                    27:05:74:c7:22:5f:75:63:a4:5a:32:e3:df:ee:99:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:DE:2F:10:56:76:8F:2F:44:69:2E:ED:6F:D9:FE:7F:E4:81:89
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:53:26:1d:c9:01:64:56:f0:9b:e5:42:0a:79:f7:d4:db:
         6f:3f:2f:4c:e3:0b:1d:88:da:08:f8:e6:68:26:b0:54:de:73:
         de:76:60:cb:81:c3:ce:4b:63:9c:21:af:aa:99:c9:8c:9d:d6:
         2f:c7:38:91:51:5e:18:32:be:54:3f:53:3e:bf:2e:5b:31:f7:
         3d:81:6e:11:32:01:cb:8a:99:d4:89:a8:c6:f8:e4:61:f7:3e:
         ef:0a:01:ab:6b:4d:0b:a5:db:be:f2:08:bf:a3:90:af:c5:24:
         95:55:ec:07:95:9a:3b:97:81:6b:f3:60:53:73:01:97:48:ca:
         f4:36:9b:cd:0b:c0:a3:fc:b6:ad:b1:24:4c:56:0f:76:cf:c1:
         2b:d2:ed:2b:6e:61:ea:97:a5:1a:f3:a1:7f:27:ff:0a:97:76:
         37:cd:82:4c:c2:82:9d:4c:ea:d9:61:ae:12:44:09:e5:0e:82:
         b1:11:e1:ea:64:7c:fd:9c:26:ac:0f:a5:f8:e0:86:8a:be:8a:
         25:44:24:b4:00:cb:be:ac:96:df:4e:a2:b0:5c:19:04:77:43:
         e9:40:2d:c1:b3:22:12:e3:29:4e:4d:33:cc:00:f5:9d:91:61:
         5d:e5:e5:f9:9f:0f:4a:40:3b:13:c4:81:a2:b9:c2:dd:db:59:
         bc:ed:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:18 2026 by rpki-client