Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File:                     tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier:          iBt9NTUO0V3xM0qcwNonH4Gwe65y5JJFhSGDnWPTzYE=
Subject key identifier:   78:C5:DD:F1:CD:5B:82:7D:34:F8:30:3A:E3:C6:FA:4E:A1:1C:9D:59
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer:       /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number:          01B7
Signing time:             Sun 01 Mar 2026 04:43:35 +0000
Manifest this update:     Sun 01 Mar 2026 04:43:34 +0000
Manifest next update:     Sun 08 Mar 2026 04:43:34 +0000
Files and hashes:         1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: vXGtknTI0TO+liTxhO0KbNgPohHj3tp9Z4SV75s0q+U=)
                          2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
                          rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
        Validity
            Not Before: Mar  1 04:43:34 2026 GMT
            Not After : Mar  8 04:43:34 2026 GMT
        Subject: CN=69a3c3f7-4930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:a9:fc:7d:05:ef:81:69:f1:db:e2:a9:6d:
                    29:dd:9a:82:57:69:7b:ff:25:5f:f3:d3:59:a0:ac:
                    7d:cd:77:52:01:6d:0d:15:7c:33:bf:98:c8:1b:96:
                    74:23:0d:85:02:62:ca:8b:41:d7:65:8b:17:b2:1b:
                    1c:d6:9a:bb:a0:16:b3:8a:07:00:29:94:d3:4d:e2:
                    68:8f:7c:c9:1f:e9:79:01:32:5c:73:a3:6c:8f:71:
                    4a:91:58:9d:96:0f:4d:df:ed:65:9f:b2:e4:b2:aa:
                    16:74:1e:f9:74:50:d3:63:72:7f:b2:86:8a:79:f7:
                    10:69:3f:e0:5d:0d:9c:1f:6f:60:63:b0:70:43:7a:
                    63:31:85:46:c4:c7:9e:2a:2c:22:81:09:c1:86:ce:
                    9b:41:fb:1e:95:11:93:3c:1c:7c:ea:20:5e:62:8a:
                    3c:13:af:4b:01:43:48:ab:e0:27:94:cd:04:60:df:
                    49:a7:7b:e4:25:82:be:5e:73:20:40:b9:0a:b1:c8:
                    e1:f7:96:10:c8:8c:c4:99:11:0c:43:bf:8a:e5:df:
                    73:61:a2:f2:8d:27:2d:0c:d3:27:7f:b5:b7:06:87:
                    ad:e9:c6:ae:fb:d6:34:a6:dc:8a:af:4f:cd:45:49:
                    ca:6f:15:c3:04:98:b7:93:ab:b4:81:56:b6:d0:c8:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C5:DD:F1:CD:5B:82:7D:34:F8:30:3A:E3:C6:FA:4E:A1:1C:9D:59
            X509v3 Authority Key Identifier:
                keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:8d:42:cc:83:5a:ae:c5:9b:11:78:13:33:cc:2e:db:bb:
         6e:ec:5b:b3:11:39:3c:47:fe:e1:a0:67:ce:d4:63:59:79:de:
         34:d8:26:f8:28:7e:da:e7:2f:6f:e7:2e:1c:83:33:15:27:75:
         63:85:b3:df:36:3d:bf:5b:9f:53:5f:9c:fd:cd:aa:83:d5:d0:
         d9:10:4d:6b:5b:47:11:e0:ef:c3:ef:ba:49:cc:af:b6:07:70:
         b9:64:02:db:49:6e:3f:03:eb:59:9a:f3:ab:4a:2f:a4:d2:40:
         89:ae:e8:24:75:02:47:4c:c9:66:60:93:25:07:a2:5f:b7:68:
         ad:00:28:c6:c1:9c:23:40:d9:61:e9:88:f5:df:56:6a:62:38:
         4d:13:50:17:dd:a4:6a:93:0f:cd:1e:45:94:bf:f8:17:f1:17:
         10:94:8e:9c:36:4a:e7:dc:38:51:e6:ec:36:76:90:ee:3a:fe:
         f9:46:cc:31:ad:bd:0e:f1:40:7a:74:00:37:60:b5:2d:d0:1c:
         9d:b6:5c:32:48:09:f8:af:bf:2b:c3:dd:04:93:6b:30:a6:eb:
         37:f4:48:3e:8f:2d:14:20:7d:c5:74:4b:20:5f:1e:79:e1:c0:
         b7:37:03:f3:31:9e:b1:6a:97:98:d0:f9:cf:ef:9a:04:45:ae:
         11:92:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:35 2026 by rpki-client