Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          LuURysyP/vkKji9R19zVoD2RnA3qp80szgGZkiJU/Iw=
Subject key identifier:   8E:0B:27:9F:9A:0A:12:EE:FE:F2:34:EE:81:23:04:74:37:6A:99:06
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          025C
Signing time:             Sun 01 Mar 2026 02:47:57 +0000
Manifest this update:     Sun 01 Mar 2026 02:47:57 +0000
Manifest next update:     Sun 08 Mar 2026 02:47:57 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: jA1+sj2sBcus3iTJxUzsVKRy1mFR0gzvgPiV49lp43s=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: HvJRtP/1M+AejuhqdGaCDBK61eDiFrYobniM96LvHvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Mar  1 02:47:57 2026 GMT
            Not After : Mar  8 02:47:57 2026 GMT
        Subject: CN=69a3a8dd-8c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:ad:39:f4:02:22:52:dd:98:91:73:9b:6e:
                    c9:40:ba:06:45:4f:12:05:a3:fa:ff:cb:4e:a3:26:
                    a0:0a:2a:9a:9f:cb:7b:36:aa:c6:72:f2:11:8b:13:
                    29:45:40:4f:21:a5:2b:6e:76:38:f0:19:cb:bc:cc:
                    84:40:3d:a8:c7:7b:68:8f:44:0b:54:90:59:0d:d9:
                    21:c4:36:ee:f3:89:fa:0a:5c:b1:19:43:1e:5f:64:
                    a9:92:32:a8:4d:10:27:9f:db:9a:84:1e:bf:59:8d:
                    72:50:5d:70:4c:27:38:36:f6:03:aa:c0:ef:ac:ab:
                    a5:99:3e:af:3d:ea:73:fb:a5:db:f0:3c:07:50:7a:
                    92:8f:96:dc:40:3c:8b:88:be:3b:66:b7:cd:8a:3e:
                    d4:21:24:02:20:79:6d:0a:d7:54:9b:a6:de:f6:05:
                    de:17:cd:ab:64:ff:6f:c9:f7:89:b7:56:26:c4:2b:
                    94:ac:e0:7f:80:10:b1:c0:99:88:51:a3:b1:63:6a:
                    00:03:b5:37:57:67:ac:05:43:bb:cb:bb:17:2d:66:
                    55:4d:60:ad:2f:18:12:ba:66:52:85:af:39:e8:ca:
                    02:8a:62:dd:0d:61:93:7f:91:7c:0d:3e:a7:a6:85:
                    80:bf:b5:2d:34:e2:32:dd:17:0a:8c:52:7f:30:6c:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0B:27:9F:9A:0A:12:EE:FE:F2:34:EE:81:23:04:74:37:6A:99:06
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:dc:0a:b8:a6:0e:9c:6e:8e:8b:9b:e8:a3:ba:e9:62:74:c5:
         c0:6f:34:a5:5a:be:7d:07:9a:a9:af:8a:50:c3:7e:28:f5:94:
         87:3e:9a:b0:18:ed:24:a0:ce:eb:22:f6:fc:ab:8a:cf:6a:d9:
         9e:2d:f3:26:e4:2c:72:23:27:8b:25:b3:9e:aa:37:af:08:f6:
         1c:cd:8f:97:55:2d:67:1d:d7:8e:4b:23:ec:9c:e0:77:2c:5b:
         b4:ce:b3:c5:76:0c:a4:dc:b7:d8:14:8e:35:c1:49:a8:62:c4:
         c3:e3:c4:b0:a4:c3:8c:21:d8:ed:d7:4a:12:54:ee:3e:c1:2b:
         99:fb:42:6c:09:ba:f0:f3:39:f8:dc:24:69:3f:ea:19:4b:09:
         f0:15:89:d4:25:bd:bc:9d:13:22:d9:fa:ce:7d:f1:ab:36:23:
         b1:df:83:9f:60:b0:d8:68:4f:38:0b:59:7c:22:01:6a:02:24:
         25:90:16:64:72:79:a2:d9:0b:df:80:a4:90:7a:4b:15:26:47:
         f3:a9:28:2a:08:46:4b:47:6b:aa:7d:d9:12:ae:2e:cc:f6:57:
         42:6d:df:50:1a:b8:da:e4:ba:ef:69:7c:d4:54:ca:17:2a:57:
         33:d4:12:6c:b6:3b:e5:83:7d:fb:af:93:58:a0:18:ef:48:60:
         76:a2:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:58 2026 by rpki-client