Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
File:                     9-atF_jVbGMrJcCb46mBDDEFNIM.mft (raw, json)
Hash identifier:          w0fStFblcXrUSv38cdY+QsIt9/qLB2xWVnVBoPN9Vhc=
Subject key identifier:   57:DF:82:14:D0:93:0D:88:A8:D5:D9:52:97:B6:19:10:7E:AD:E9:7B
Authority key identifier: F7:E6:AD:17:F8:D5:6C:63:2B:25:C0:9B:E3:A9:81:0C:31:05:34:83
Certificate issuer:       /CN=A919075D/serialNumber=F7E6AD17F8D56C632B25C09BE3A9810C31053483
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-atF_jVbGMrJcCb46mBDDEFNIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
Manifest number:          87
Signing time:             Wed 25 Mar 2026 06:48:27 +0000
Manifest this update:     Wed 25 Mar 2026 06:48:26 +0000
Manifest next update:     Wed 01 Apr 2026 06:48:26 +0000
Files and hashes:         1: 9-atF_jVbGMrJcCb46mBDDEFNIM.crl (hash: RX9YgeWlAcf8UbldJPqunnvvBSF+cjGMe7SK6Puf5UE=)
                          2: D72BFBCE5B9911F095D51C3CC4F9AE02.roa (hash: GrpGwKpo7LdnsDGfJd+Vj2m64e9E/xG70miU57aHN+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.crl
                          rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-atF_jVbGMrJcCb46mBDDEFNIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919075D, serialNumber=F7E6AD17F8D56C632B25C09BE3A9810C31053483
        Validity
            Not Before: Mar 25 06:48:26 2026 GMT
            Not After : Apr  1 06:48:26 2026 GMT
        Subject: CN=69c3853b-5983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:2c:29:39:a6:d7:e9:d2:3f:11:fb:71:50:
                    6f:30:ec:ce:45:1d:f4:aa:5d:b5:60:44:03:f0:e5:
                    d8:40:42:a6:df:1e:29:b9:15:2d:f4:0f:2a:06:9e:
                    9f:d1:7a:25:ea:46:53:d3:98:c6:ab:61:ea:48:e1:
                    11:81:04:43:0d:d2:67:4a:8f:2d:dd:6a:39:85:d1:
                    ee:49:ff:85:c9:8e:78:88:b6:50:04:31:72:fe:80:
                    a2:54:08:f9:cf:7c:33:d6:e3:31:8a:a6:da:0c:c4:
                    12:4e:35:52:89:d8:fa:32:2f:3d:36:1c:2d:b8:db:
                    a0:79:dd:e4:51:d1:3b:29:9b:f9:b3:8f:f2:ec:6e:
                    8b:b9:4a:76:67:a5:13:2f:80:8f:55:57:a1:af:9b:
                    81:5d:d1:af:af:fb:14:79:a1:61:62:b0:6c:cb:c1:
                    41:42:16:12:9c:3b:35:9d:d9:11:44:a4:59:3b:10:
                    1a:ae:79:2c:6a:67:a4:35:47:0a:39:a8:8e:48:3d:
                    9d:ee:55:38:ba:e4:cb:86:e9:65:39:c1:95:dd:b9:
                    ac:d7:40:3c:98:03:19:6a:0c:e0:2e:c8:d3:b6:f7:
                    fc:40:93:1b:9c:13:28:3f:a2:f7:a1:c9:81:63:6f:
                    de:e5:48:3d:62:57:0b:62:d1:ae:4c:04:74:48:39:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DF:82:14:D0:93:0D:88:A8:D5:D9:52:97:B6:19:10:7E:AD:E9:7B
            X509v3 Authority Key Identifier:
                keyid:F7:E6:AD:17:F8:D5:6C:63:2B:25:C0:9B:E3:A9:81:0C:31:05:34:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-atF_jVbGMrJcCb46mBDDEFNIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:f1:4f:d5:26:d2:6b:a5:18:7e:69:8c:24:d5:b5:9d:c8:
         3c:32:49:7d:a9:15:35:67:47:61:4b:39:30:05:d5:7f:36:12:
         c9:27:8d:28:f0:83:fb:07:a9:8f:bf:5f:52:d2:f0:81:7b:b7:
         87:a8:9b:ec:d7:e1:f9:d8:44:13:6f:fc:97:cf:52:1b:fb:d1:
         3a:83:cc:7e:4a:69:70:50:bb:6f:a2:52:d0:a5:e5:d7:bf:96:
         3a:4a:a2:6d:ba:d6:c4:f3:71:41:9a:8c:49:98:32:9c:18:75:
         fb:08:40:7c:d0:ef:31:aa:f7:3e:d7:00:fd:ac:bc:11:39:3a:
         b9:ad:4f:27:9d:0e:db:53:73:ea:f0:00:2b:e5:cb:c6:55:bf:
         1b:d4:ee:01:ab:d9:01:d6:71:42:43:36:bf:e7:40:32:4e:27:
         c2:bf:7b:8a:fe:14:73:be:42:af:fc:88:04:50:00:91:a8:4f:
         7b:a4:3d:b6:ba:66:ca:59:1f:4f:f5:32:af:f5:43:43:e1:b5:
         a9:cf:e3:a7:72:b3:30:32:3d:3b:4f:e5:0e:2d:22:c3:22:1e:
         23:71:32:34:a2:b6:30:6d:f7:d5:7a:7f:a4:ed:38:3f:d5:25:
         d5:5c:c8:30:d5:ce:29:93:d0:fb:be:74:db:41:b7:67:b8:04:
         a9:59:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:48 2026 by rpki-client