Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
File:                     w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft (raw, json)
Hash identifier:          gzyOwA/+2JHqMrn9ldIL6zOxGoWsw+RWQALyafHTObA=
Subject key identifier:   9D:06:62:9E:D5:46:EB:14:EC:F1:56:BA:B8:7F:7E:8A:A0:ED:4F:FD
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Certificate issuer:       /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
Manifest number:          36
Signing time:             Sun 01 Mar 2026 09:59:05 +0000
Manifest this update:     Sun 01 Mar 2026 09:59:05 +0000
Manifest next update:     Sun 08 Mar 2026 09:59:05 +0000
Files and hashes:         1: w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl (hash: 1HRnkmDmu7uj/Dogn0xX0am52A6HtfdDRwiOYfwqfCk=)
                          2: 217645DAC5CC11F0B5963A5AC4F9AE02.roa (hash: b9SLnnmjCzEPCkObeuo8/EHmdYFDq+wqAL43fh98qxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
        Validity
            Not Before: Mar  1 09:59:05 2026 GMT
            Not After : Mar  8 09:59:05 2026 GMT
        Subject: CN=69a40de9-7d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:76:ff:5b:99:a2:cf:fd:f6:26:a6:47:38:9e:
                    8f:10:24:f2:13:be:9a:80:80:29:15:dc:b8:2d:e2:
                    9a:f8:87:24:09:2c:a2:78:bf:22:a6:4c:21:5d:53:
                    b8:24:fd:fb:60:e7:8b:3a:ac:93:9f:52:4e:11:74:
                    c4:93:69:71:07:8a:f1:b4:8d:bc:83:1a:27:a1:91:
                    6a:f6:ef:5d:57:15:0d:06:bc:7b:c0:d2:34:16:87:
                    98:a4:5e:fd:a4:29:fa:c4:71:e5:33:30:34:26:61:
                    d7:b8:6d:ff:e1:9f:4a:0b:cd:af:40:27:02:7f:2d:
                    d9:ef:57:3c:f6:29:45:0b:62:a8:a5:43:e0:0c:fd:
                    1e:2f:fa:33:ac:26:70:50:16:02:6f:c1:4a:06:49:
                    e2:3b:ea:5a:3d:1f:f3:3a:ea:82:d9:48:26:e5:17:
                    ba:2d:ea:c7:f1:3c:73:ae:04:d5:53:25:fd:eb:69:
                    88:7c:19:1a:b2:5b:9d:1b:a8:d7:65:a8:f7:0c:01:
                    16:11:75:63:8b:9b:42:bb:67:cb:0c:32:53:98:04:
                    63:fb:05:e1:ca:0a:c7:c5:13:ac:72:34:69:e1:e4:
                    55:ba:6f:fe:17:fa:17:de:be:92:33:cb:50:1d:10:
                    b9:1c:56:d1:cb:b8:13:fe:6d:4c:1c:c6:e3:20:3a:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:62:9E:D5:46:EB:14:EC:F1:56:BA:B8:7F:7E:8A:A0:ED:4F:FD
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:63:5a:0d:49:0a:4a:2d:52:17:72:af:11:3d:24:23:36:b1:
         80:b1:c5:dd:2e:fd:ca:c8:34:b4:a9:b6:83:5d:43:e7:61:92:
         fa:78:14:1a:36:28:da:d5:10:16:c1:e4:f5:89:22:77:46:d0:
         46:7a:04:5b:30:0f:9d:0b:33:c1:b7:fa:1b:52:46:b6:49:50:
         97:4f:6c:a8:8a:1d:2f:f8:3a:4c:91:cd:2f:8c:1a:ca:ae:51:
         8b:1d:c2:62:53:0c:01:26:38:b8:8a:5d:96:31:35:ee:58:f4:
         d6:3c:c3:6e:2a:89:04:bc:1f:4e:a3:5b:e5:04:da:36:33:bb:
         a8:a4:17:c8:ab:2d:44:53:29:b7:91:5d:1f:db:64:b5:33:8c:
         48:a1:20:91:5a:83:90:f6:54:63:c7:39:ec:dd:d1:a8:fa:55:
         74:7f:7a:e2:88:7f:41:fa:38:af:c5:fc:a7:50:59:9e:0a:14:
         2e:7a:75:bc:b4:01:5a:f1:ea:c2:1d:5b:6f:24:2a:d3:3e:43:
         40:3b:c5:76:fa:52:c7:62:56:a2:80:28:42:e0:04:b0:88:f3:
         fc:5b:69:c7:de:f9:1e:6f:ff:ca:05:a4:6f:4e:f1:0a:83:85:
         c4:22:00:e7:85:90:aa:b3:3b:28:e8:b7:f9:11:45:96:25:82:
         44:cc:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:17 2026 by rpki-client