Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
File:                     m1FsBRZinvsTjrDmhbBboA6_Tn8.mft (raw, json)
Hash identifier:          ymxt3ya5jrPBHVQebnBYYLPGN1iivzQ0igvs2Lj9II4=
Subject key identifier:   D9:E3:D7:88:38:A6:A3:AD:B3:F6:80:9D:19:11:72:80:6D:BC:D9:59
Authority key identifier: 9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F
Certificate issuer:       /CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
Manifest number:          0142
Signing time:             Wed 25 Mar 2026 04:29:39 +0000
Manifest this update:     Wed 25 Mar 2026 04:29:38 +0000
Manifest next update:     Wed 01 Apr 2026 04:29:38 +0000
Files and hashes:         1: m1FsBRZinvsTjrDmhbBboA6_Tn8.crl (hash: errcVKmaFTs2iQase9jAvN6+k+DtjGqWSzX80JXIBYY=)
                          2: 8426E9543A8211EF9F1ED16FC4F9AE02.roa (hash: yi5wJuHZmSdhiChfR5aA3lJpvPVvVscuOI8btYz4htU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl
                          rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193552, serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
        Validity
            Not Before: Mar 25 04:29:38 2026 GMT
            Not After : Apr  1 04:29:38 2026 GMT
        Subject: CN=69c364b2-d3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:35:91:dc:d5:ab:ee:0c:12:0f:b4:e2:27:
                    5e:e4:60:71:2d:72:ce:bf:a4:85:86:83:20:40:ed:
                    63:46:22:a5:71:e0:c4:db:46:91:1a:58:66:ad:94:
                    50:1e:a6:f9:c7:70:71:bc:26:a8:7f:16:06:fc:48:
                    bc:62:e7:2e:ed:24:7f:27:12:7a:84:9e:2d:c2:24:
                    2e:98:91:47:e0:9e:9b:2e:8e:7b:73:12:b1:5b:a5:
                    a9:43:cc:b1:09:aa:c5:31:ed:57:b9:e2:2a:f2:4d:
                    3d:58:41:c2:79:a4:94:70:b6:b5:06:3c:23:a7:44:
                    8d:81:8c:f4:53:db:27:4c:ea:30:e8:39:57:a3:fb:
                    81:b7:04:53:e0:b6:58:65:a4:77:c6:6c:1b:33:75:
                    ce:32:7f:17:0c:84:fb:1b:c3:59:78:e2:e2:9e:47:
                    1d:cc:6b:e8:3c:04:77:2f:9c:76:0c:6f:db:38:22:
                    ed:c0:83:a9:5c:da:32:be:db:f9:5f:e7:2d:36:9b:
                    58:16:e4:fb:96:ee:d2:2f:ad:65:aa:11:b5:ce:de:
                    02:e9:2f:ce:47:9b:bc:de:bc:a2:be:ac:4e:0c:26:
                    6b:a3:13:a0:db:65:18:da:92:a0:48:93:f7:85:65:
                    db:85:bd:00:14:04:2e:79:9a:4f:d3:80:23:a5:c8:
                    94:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E3:D7:88:38:A6:A3:AD:B3:F6:80:9D:19:11:72:80:6D:BC:D9:59
            X509v3 Authority Key Identifier:
                keyid:9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:ce:a4:de:78:de:fa:05:55:95:81:f2:2f:d8:2b:7a:50:
         d5:bc:7a:f9:c0:b5:ef:c1:06:84:b2:d3:a6:c7:2f:29:6b:5f:
         e5:21:6f:86:f8:53:f3:0a:0b:ce:e0:7c:cb:1d:68:64:ee:9c:
         56:0c:e5:8b:4e:46:74:62:d8:f0:b4:25:30:0c:51:9a:fa:09:
         4c:ea:13:0d:28:62:f8:e9:ad:0d:0a:86:83:95:9e:69:b5:b8:
         94:56:20:56:10:0c:c1:d4:c8:cb:20:bc:11:d6:4b:43:f4:e7:
         2a:45:ba:80:96:50:eb:ef:43:49:23:a2:5e:9c:90:ef:99:c1:
         df:39:d9:51:c2:d0:d0:4f:a6:42:0a:ca:75:85:97:4d:4d:0a:
         57:cc:07:2c:b8:ac:e4:0f:c6:55:04:43:93:4e:bc:23:70:8a:
         69:ba:3a:72:bf:28:67:74:bd:93:1a:6c:36:6a:7f:c0:d9:8b:
         ac:1b:8b:6f:ed:ab:6f:b2:37:b9:ce:33:18:5b:ca:6b:aa:58:
         d2:f1:b7:20:7d:26:28:7a:df:77:78:d2:9d:02:18:37:ed:bf:
         29:29:b0:83:e7:ea:6f:6d:d8:ee:fb:5e:0c:5b:c2:39:52:f5:
         61:32:02:a5:46:95:83:86:76:96:27:f7:a3:79:35:d8:bc:62:
         3b:c0:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:08 2026 by rpki-client