Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
File:                     eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json)
Hash identifier:          WRvjX8jThXU2DKiAQCSvvr0fVwZtNkKWqk4HI1dO7FQ=
Subject key identifier:   37:D5:37:42:9E:4D:93:44:CB:7B:31:66:9F:92:22:71:D3:18:E4:6B
Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22
Certificate issuer:       /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
Manifest number:          0684
Signing time:             Sat 28 Feb 2026 23:01:06 +0000
Manifest this update:     Sat 28 Feb 2026 23:01:05 +0000
Manifest next update:     Sat 07 Mar 2026 23:01:05 +0000
Files and hashes:         1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: FLmKJcrsb2GxE9k/BFhesTMSGgjikQ1PuNTcpQMDhZM=)
                          2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: OBNzTX6aR4jmrgmRDfzbRnwCFSG478b3wNooMI8zuUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl
                          rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22
        Validity
            Not Before: Feb 28 23:01:05 2026 GMT
            Not After : Mar  7 23:01:05 2026 GMT
        Subject: CN=69a373b2-107d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:81:11:b2:2f:b0:61:aa:7e:85:bc:3d:87:
                    0d:fd:ca:2b:f9:52:27:01:e1:b5:7c:39:20:89:5c:
                    e1:21:70:bd:e0:83:c6:db:97:a7:ff:0e:c1:8a:b4:
                    63:f9:b4:d1:6b:ef:3d:dc:27:c7:79:72:18:6c:b5:
                    e3:1f:c6:ad:e9:f5:54:0f:e9:89:37:7b:06:47:ba:
                    a8:03:c9:7a:6b:0b:60:7c:4f:72:fc:0e:20:86:91:
                    65:96:85:a8:21:a2:bc:e7:97:c5:1b:86:28:e8:f4:
                    8c:c6:3e:b2:42:47:67:0d:77:56:03:6f:6c:fc:bf:
                    b3:ba:33:92:fa:a5:62:a1:9f:10:44:25:87:05:69:
                    cf:6a:38:5b:34:53:e5:cf:18:f2:8a:c0:a2:45:af:
                    ec:fd:4e:87:4e:0c:3e:25:d2:fa:c6:96:e3:65:dd:
                    22:92:61:bb:20:9f:a9:42:c9:08:8c:7c:ec:e3:d9:
                    f4:cd:40:97:41:85:43:b5:bf:9e:50:f2:64:15:87:
                    34:2a:2a:2c:1c:7b:9a:ba:21:54:b6:65:9f:7a:90:
                    21:ab:dd:85:a4:8d:fd:f9:3c:26:e7:14:c1:2b:21:
                    4f:e9:b1:51:87:fc:25:1a:89:f6:4a:15:f5:ad:21:
                    c8:3c:69:3d:bb:08:2b:67:d0:6b:95:94:df:7d:31:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D5:37:42:9E:4D:93:44:CB:7B:31:66:9F:92:22:71:D3:18:E4:6B
            X509v3 Authority Key Identifier:
                keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:37:4f:3a:68:b1:7b:d5:98:a1:4c:63:5c:98:5a:af:92:
         aa:bd:79:98:b1:3c:1f:04:a4:9a:84:27:f3:89:1e:a0:2d:1f:
         8b:f7:dc:b8:7d:29:7a:92:8c:f7:c3:36:83:93:ea:92:f1:79:
         10:f1:51:ab:b9:5e:b5:95:24:05:65:76:ae:7f:fb:e2:92:7e:
         03:4e:97:20:97:fd:51:64:c0:db:da:48:51:1f:3e:62:db:97:
         f5:92:ce:fa:1e:83:d8:68:45:a9:d1:f5:40:bc:ab:b6:2f:67:
         4a:00:37:a6:df:de:a3:a8:74:33:82:87:b1:1d:98:63:d3:57:
         0d:29:a8:73:14:17:60:51:6a:d9:ad:9c:2f:a7:a4:f0:7a:0a:
         ca:af:96:56:23:17:4f:9e:8e:b5:c6:ed:b1:ff:b4:52:cf:cb:
         cf:79:71:f7:c7:d8:f1:e2:6b:0b:0d:5d:fb:06:1c:b1:80:31:
         f0:7f:73:08:c3:d7:06:a9:af:31:cd:dd:f0:04:c0:b0:19:a4:
         2c:92:79:46:44:1d:45:b5:7e:a9:24:b5:c2:ea:b3:9c:b4:d2:
         77:be:20:9f:52:1c:05:21:28:4c:52:41:ea:ac:be:9d:69:e3:
         8a:5e:e0:2b:3b:ae:a5:c6:60:7d:50:29:aa:dc:3a:f1:b7:81:
         b7:72:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:17 2026 by rpki-client