Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File:                     6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier:          3qs0KiYufWDGp3HHRKMmmwFueS8u5c1RjanPlxuT8sQ=
Subject key identifier:   BB:F0:60:29:B7:BB:D2:11:E5:B3:36:3B:EE:77:D0:71:2E:39:00:00
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer:       /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial:       0419
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number:          040F
Signing time:             Sun 01 Mar 2026 01:15:20 +0000
Manifest this update:     Sun 01 Mar 2026 01:15:20 +0000
Manifest next update:     Sun 08 Mar 2026 01:15:20 +0000
Files and hashes:         1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: EGCtKiUUh9bWR7JRG3sgH/SepGU6SJOWxtHQkgbNpds=)
                          2: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: AFgH6rBWprP5TXP7VnSd6WVIQBawbyHn9rZtCd/WfjM=)
                          3: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: JJotf7VpmSYaDPVQqH2CXAbFgfSH9/zhk44G7WVeO/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
                          rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
        Validity
            Not Before: Mar  1 01:15:20 2026 GMT
            Not After : Mar  8 01:15:20 2026 GMT
        Subject: CN=69a39328-bea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:b6:f1:19:e7:be:1a:e7:b4:dc:31:fb:59:
                    95:d4:ad:de:46:7c:a7:4e:96:87:8b:81:20:20:2a:
                    db:66:a5:95:1c:5a:b7:6b:f4:e3:20:d6:7d:ae:f4:
                    f4:4f:4e:20:2f:2e:f2:e5:76:01:ea:df:29:fd:0a:
                    4b:79:9d:fc:61:fd:74:f8:e8:56:a8:86:8c:ff:df:
                    1e:6b:6b:dd:e2:4f:d2:70:cf:89:70:2c:6f:09:df:
                    b4:be:1c:1e:6a:ae:ec:09:a3:a0:ee:d0:9d:4b:54:
                    e6:de:72:3b:a4:85:c4:fa:90:35:09:be:a1:fa:d4:
                    49:8f:54:8b:2f:1c:7b:37:a1:fa:c3:e7:7b:a1:74:
                    61:a9:4c:87:03:dc:27:ef:43:97:12:52:55:be:e3:
                    f8:76:5f:93:a3:00:8a:ae:6b:4c:dc:5c:8a:5b:b1:
                    0e:db:96:d9:13:5f:fc:64:3b:11:0c:21:d5:21:bc:
                    d2:82:06:ae:77:30:ea:09:49:0c:cf:4e:7c:06:fc:
                    b1:a5:62:ed:cd:d3:88:a1:31:89:93:8b:82:74:74:
                    df:fa:1e:9c:c2:b0:a9:16:ae:24:2f:ed:b5:e3:fb:
                    a4:dc:fe:bb:85:6f:23:83:d3:86:f1:86:71:f7:07:
                    c7:b2:cd:ad:1e:84:ef:c9:dc:c7:b5:ab:96:76:22:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:60:29:B7:BB:D2:11:E5:B3:36:3B:EE:77:D0:71:2E:39:00:00
            X509v3 Authority Key Identifier:
                keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:a3:aa:99:ff:e0:da:15:2a:50:ce:12:da:8a:99:2a:dd:
         2f:78:57:03:db:43:e9:35:3d:69:92:39:a7:14:b8:fe:7b:e9:
         4c:cf:75:ad:dd:ed:d5:19:97:a7:b5:f1:a9:64:01:15:bf:cd:
         c1:b6:59:0c:66:51:4f:98:70:bf:20:ba:4b:ba:e1:6e:02:eb:
         9d:7a:fe:ca:c7:e2:1f:88:8a:12:29:74:df:92:b7:28:74:ce:
         58:a0:5b:cd:1e:d0:aa:4a:16:65:eb:f7:e2:15:8f:34:0e:48:
         69:17:a5:0d:78:42:c3:b4:9b:df:47:8c:fe:d2:55:f0:0f:06:
         97:45:ec:78:fa:f4:4e:af:b0:a4:46:97:a7:9f:b8:8c:8b:eb:
         31:da:fb:0c:a0:7d:3b:e4:91:3d:2e:15:dc:4e:53:38:21:c4:
         f2:da:99:a4:8f:23:9f:fc:7e:ec:9c:ec:c5:82:39:18:11:34:
         a1:94:af:b7:b2:a6:44:fc:3e:dd:51:a6:cb:08:2a:f4:a3:70:
         66:48:49:99:02:74:ea:85:f1:53:88:ee:b8:27:c0:f1:86:f2:
         ec:eb:ed:20:a3:fe:4c:c8:7e:6e:1a:6d:73:91:88:31:f2:26:
         2b:12:a3:8c:2b:72:a3:38:83:6a:e3:1a:8f:41:1c:52:da:a2:
         cf:c4:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:52 2026 by rpki-client