Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
File:                     XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json)
Hash identifier:          ELC6oAou01MFMNaDR0pDAESSTlTKcg8qzAEwV32TH64=
Subject key identifier:   58:20:0D:EA:AD:CF:79:F0:F9:05:FD:29:E7:9A:38:46:F5:7E:8B:78
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Certificate issuer:       /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
Manifest number:          7E
Signing time:             Mon 02 Mar 2026 00:12:02 +0000
Manifest this update:     Mon 02 Mar 2026 00:12:00 +0000
Manifest next update:     Mon 09 Mar 2026 00:12:00 +0000
Files and hashes:         1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: 8E1rgk7QbpoWQ/OVXZX1ZUsCj5nHiOV8Fy3nO4uhg3o=)
                          2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: cYTCxTJqdWhfcLPLf4tTyEX/AXCjDKPWHXDI+ywAuSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
        Validity
            Not Before: Mar  2 00:12:00 2026 GMT
            Not After : Mar  9 00:12:00 2026 GMT
        Subject: CN=69a4d5d1-0dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:41:7f:e9:1d:d7:69:57:52:a0:6b:ec:29:
                    ef:76:99:10:99:67:92:5d:a1:4b:5d:c3:49:03:47:
                    36:4f:b3:14:7d:b5:9d:88:88:c9:e1:b6:39:f2:6f:
                    90:c6:e5:98:3a:bf:40:b2:49:2f:50:7a:3f:04:f7:
                    ee:64:90:86:c1:ef:66:35:e0:2e:6d:8b:b6:27:30:
                    4c:ff:fe:e5:74:47:5e:36:c5:91:f8:9b:59:09:66:
                    66:ff:9b:02:41:70:71:3e:59:63:0e:d7:0c:f2:6d:
                    20:55:b7:5d:6a:33:e1:1f:8f:9f:fd:ce:e0:50:9d:
                    aa:52:34:6d:a8:e7:2a:1c:97:38:80:1c:2e:9f:0a:
                    0f:ef:99:fd:45:82:38:d1:59:36:f9:92:a2:76:3f:
                    d1:90:78:7e:bd:3f:2a:e7:ef:45:71:1c:76:0b:ae:
                    93:04:96:91:93:e1:0d:35:03:22:fc:80:0f:49:b1:
                    f8:99:1a:25:5c:e1:10:1a:49:10:53:35:05:b3:c2:
                    63:c3:c2:c5:c8:24:3b:e3:c2:25:71:d3:d2:5e:cc:
                    c1:c3:76:1f:03:4c:e3:6d:10:d5:ed:26:c0:af:02:
                    9c:a7:23:61:ea:db:e7:07:db:5d:10:b9:ed:b0:54:
                    5d:e5:e2:b0:bd:ad:84:76:62:b7:c4:62:61:de:f4:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:0D:EA:AD:CF:79:F0:F9:05:FD:29:E7:9A:38:46:F5:7E:8B:78
            X509v3 Authority Key Identifier:
                keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:66:23:1a:71:bc:55:b2:5a:3f:54:7e:ff:54:b1:89:0d:
         ea:d5:35:36:63:ec:ae:9a:c2:7b:3d:2d:f0:30:59:31:72:3a:
         15:66:f3:51:45:6b:0a:b8:e0:9e:20:9d:ca:c7:b9:5c:e6:7a:
         88:94:2c:ac:88:bd:f0:10:aa:50:b1:ea:80:2c:38:84:66:f2:
         5d:52:df:b8:c4:af:a9:ed:02:cb:b2:0a:18:a3:06:c0:8a:64:
         9d:f1:f8:a8:f8:30:85:91:68:c5:7f:00:75:83:3b:9a:d4:d2:
         ad:9f:31:bf:fe:11:f2:b3:94:19:d3:2b:1d:b8:a4:ed:ad:64:
         e1:2f:37:99:d4:af:10:57:08:52:f3:04:9f:b5:09:64:61:ea:
         e3:19:66:16:00:40:8a:e4:49:70:ae:8a:80:92:01:7e:06:a2:
         8a:a4:25:55:7a:a6:60:f6:92:02:bc:ee:65:79:51:88:45:bb:
         2c:29:58:f9:59:34:7e:6e:4d:40:b7:df:f4:5b:3d:5a:59:9f:
         65:ba:19:e9:1c:8b:4d:74:64:28:22:de:0d:9e:9c:72:83:7c:
         f4:9b:f2:62:60:57:10:92:2d:4e:24:c1:3e:5c:b4:c8:19:65:
         38:bc:40:b6:6d:88:8f:9f:88:0b:8a:8a:66:0a:06:5e:bc:73:
         77:05:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:17 2026 by rpki-client