Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File:                     PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier:          Fv0g+lzin98hqfi7UKfE/0zUlgQUTEI674nnOZiwh+Q=
Subject key identifier:   50:59:5E:E7:2D:0A:D1:20:C3:F2:CF:AF:3B:FA:F5:B2:6D:EB:E0:38
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number:          C8
Signing time:             Sun 01 Mar 2026 08:25:26 +0000
Manifest this update:     Sun 01 Mar 2026 08:25:26 +0000
Manifest next update:     Sun 08 Mar 2026 08:25:26 +0000
Files and hashes:         1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: Grzw1xfReH3EEr0hVj2oLPKzzY/YElCTqKHWa+o+k/Y=)
                          2: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: H74KRi+80F2/6qajXnbyfTp0GrCgl3B0cjrXkUooHhw=)
                          3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: pCCnAwXaRpN9Dg/rXaYJXlHCmwbtRDgBNlWvYE6Wu1c=)
                          4: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: BtUlZajv1HPk/12NoFUKXFx9NvRZRnRBIwMfTSx7yeg=)
                          5: D87376860A1511F09D97420DC4F9AE02.roa (hash: Ub9C5wsl142P8R6BoMmyHFy+cj1b1wk885fNQRr/IyE=)
                          6: C8171E8EC04D11F081466417C4F9AE02.roa (hash: oZVY5zrE/d6nR+CvPyMMYsC75V/hbG5bXJraocO+NlA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Mar  1 08:25:26 2026 GMT
            Not After : Mar  8 08:25:26 2026 GMT
        Subject: CN=69a3f7f6-8b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:fd:83:a5:75:05:03:08:7d:7d:c2:18:89:
                    f4:b6:e7:55:38:2c:80:3f:d3:89:6c:ee:58:7c:b6:
                    ef:ba:19:fe:9a:9f:d3:ae:e3:4e:30:70:f1:70:0f:
                    91:af:73:d8:de:5d:73:9a:03:8f:83:39:fe:18:ae:
                    41:d4:a9:07:2b:f8:d4:7f:42:fa:bb:59:f9:9f:93:
                    91:f5:c4:b2:d3:e4:14:ab:e8:d9:18:6e:82:e1:9d:
                    4e:fc:74:6f:73:70:dc:e4:3d:5c:10:6f:36:d4:b1:
                    da:81:8a:06:4f:ba:53:c5:e5:8e:fc:35:b5:31:9f:
                    63:38:d2:f0:81:8c:64:00:b1:74:3c:35:9a:0f:3f:
                    4c:69:33:12:0c:70:75:6d:3f:bf:2a:89:f9:7a:aa:
                    0f:a4:18:9d:61:4e:d9:6a:8e:94:59:9f:63:39:88:
                    81:6f:42:e4:06:bf:69:dc:3d:e4:b0:60:13:a4:3a:
                    71:65:41:f0:5b:6a:5a:4b:28:e3:46:6a:e8:e2:05:
                    4b:03:09:98:b0:e4:8d:eb:ee:22:4e:27:62:69:74:
                    93:54:99:b1:05:59:0e:e9:08:f7:5e:e0:77:34:55:
                    f2:b3:ba:84:b2:cf:3b:b0:d8:1f:a6:d2:37:3c:35:
                    4f:62:f8:01:3c:45:2f:9f:a6:15:2c:ca:f7:98:99:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:5E:E7:2D:0A:D1:20:C3:F2:CF:AF:3B:FA:F5:B2:6D:EB:E0:38
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:b4:ad:a5:82:ad:6c:05:ca:bf:d2:c3:88:55:f6:e3:c9:
         8c:a2:e0:86:c1:74:44:0d:29:4a:bb:41:23:f2:17:6c:e6:c3:
         81:56:38:6c:56:c1:fb:e4:d7:a8:63:b5:97:81:43:70:51:29:
         96:07:2b:80:5f:42:af:c6:71:1b:3b:3e:c1:e3:6e:d4:a6:e3:
         c9:90:01:f7:f4:42:18:4d:ad:ac:4b:a0:64:ef:c2:f5:b5:e0:
         fc:87:b2:0a:af:83:58:c6:5d:b3:50:26:de:b4:8c:7e:87:1b:
         ba:35:6e:08:c8:6b:5d:33:8e:f2:6a:a5:5c:9c:40:72:49:3a:
         7a:ab:ad:86:9b:49:37:17:96:b1:9d:fb:bd:d0:af:9f:cf:cd:
         6b:e2:d5:9b:cf:fb:b6:75:e6:ba:72:d2:fc:f3:cf:4d:d5:9b:
         4c:fc:18:55:c9:50:6d:c1:3f:e5:35:42:b4:01:21:7d:92:e8:
         64:48:b7:89:3e:da:5a:03:b6:7c:ce:dc:bb:87:27:2d:42:54:
         04:1c:d1:f9:71:d9:3a:b1:2e:4a:8e:b8:4b:5c:da:ef:3d:39:
         e0:0a:85:e4:59:ed:c4:fb:0d:e4:3d:38:45:b0:9c:d7:df:f7:
         b4:21:2e:55:78:49:ba:2e:26:e9:fc:6a:27:18:7b:8b:32:6c:
         dc:58:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:22:12 2026 by rpki-client