Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
File:                     qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json)
Hash identifier:          AmSXlvRmJimvcoi0PZ3HXHrKDEOtrLN4Qcf6fFZCrx0=
Subject key identifier:   E3:31:32:42:14:EA:5C:BC:B9:C1:1F:F5:EB:C3:A1:D2:6F:76:83:38
Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
Certificate issuer:       /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
Manifest number:          C8
Signing time:             Mon 02 Mar 2026 13:59:44 +0000
Manifest this update:     Mon 02 Mar 2026 13:59:44 +0000
Manifest next update:     Mon 09 Mar 2026 13:59:44 +0000
Files and hashes:         1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: EU/OlxI0Hznw4gd003Dw/+LZAR4a1xBtUHg8Mrjfx+Y=)
                          2: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: C4PktSIqyer8MO6XphzB29DbUJzhVWW55CATe9fFwVM=)
                          3: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: oNKLcDDjauc2LSkFEeIeDtuA3XxvzZa1yPoz4Zcyal8=)
                          4: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: ueAfbCMkj1wTXyISOQ5e3CCqBKbOGTMXBSwXfehkPHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
        Validity
            Not Before: Mar  2 13:59:44 2026 GMT
            Not After : Mar  9 13:59:44 2026 GMT
        Subject: CN=69a597d0-0b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:ab:f5:3e:f3:f6:25:09:53:4b:3e:ff:93:
                    dd:b6:bb:e4:45:d8:a1:cf:d1:92:0a:c8:cf:1a:e4:
                    ff:23:6f:94:fb:aa:35:98:eb:a5:48:0d:64:7d:6e:
                    3a:0b:16:62:ef:33:6d:9e:89:d8:34:38:5f:c9:6d:
                    b4:7e:8f:7b:6f:a0:3a:ae:e3:7c:48:76:41:8f:69:
                    53:4d:d1:82:73:65:b5:92:81:74:20:91:6c:68:7e:
                    d0:ea:ae:51:0c:92:33:ea:60:3e:f8:4d:0e:5a:fc:
                    bb:3f:e6:47:4e:60:38:56:6b:28:7d:f4:c0:be:df:
                    9d:c9:31:e7:99:02:89:d0:9f:55:e5:e6:24:72:3c:
                    f0:b2:59:81:8a:7d:e6:d9:71:91:bf:f0:31:72:0b:
                    8e:a5:f0:3f:27:c1:f7:5f:70:0c:fa:c4:90:d8:c6:
                    ba:02:5d:1d:3f:ad:09:46:c0:09:f5:13:1a:f9:fd:
                    df:70:72:c2:21:c2:90:e2:9e:ca:da:aa:a9:80:ed:
                    89:c6:ad:cd:ba:7c:74:d4:5c:ad:02:ff:4d:19:83:
                    01:5c:f1:db:fe:e2:ee:bc:8b:b9:2b:6f:2b:85:73:
                    a6:7a:a5:89:f2:d3:1a:83:23:68:b0:2b:90:58:d1:
                    bc:99:99:44:a1:e7:c0:ba:a7:d6:83:1f:0e:3a:b7:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:31:32:42:14:EA:5C:BC:B9:C1:1F:F5:EB:C3:A1:D2:6F:76:83:38
            X509v3 Authority Key Identifier:
                keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c3:21:3c:ff:ba:f7:2d:fc:bc:0b:5d:ce:12:8e:8d:36:84:
         17:04:37:a7:04:ce:32:d9:57:c0:d9:76:43:42:de:17:57:5f:
         95:3e:cf:5b:91:b9:3e:25:51:68:d2:30:9b:79:42:ac:57:37:
         ee:6f:da:d7:5b:17:48:9b:92:8b:97:7e:77:01:35:7b:35:11:
         40:06:42:68:38:6b:99:9c:5a:d8:eb:f1:f9:f5:bb:4e:8c:1c:
         44:42:b9:43:7f:ca:4e:ba:27:ee:55:54:64:59:db:de:31:ed:
         e6:72:fa:52:ef:70:e0:94:b2:cd:a3:3d:57:f7:23:00:a7:dd:
         14:32:23:1b:41:b6:a0:01:5b:38:84:1f:f9:de:a6:f1:24:22:
         4d:0a:78:1a:c2:37:d7:99:c9:53:43:5f:3d:72:f3:51:2c:ef:
         e9:fd:4f:2b:dc:88:d9:9e:1a:aa:1e:b8:13:f8:eb:53:d3:bd:
         02:38:51:94:12:a7:79:74:38:f9:3e:e9:77:28:f9:f1:d5:41:
         4f:d7:54:a3:d6:12:4f:17:46:91:d5:e5:4a:6f:32:c9:43:2b:
         5b:74:45:46:13:83:8c:58:93:f1:18:b9:0e:7d:57:af:9c:d8:
         89:bb:eb:da:34:16:e7:58:67:05:83:d5:dc:ed:3d:1a:23:f1:
         c8:47:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:56:45 2026 by rpki-client