Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File:                     iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier:          70zgmAl38MjYbxS7duyFGv9LG5CB5fuwCdHxo/v0NXM=
Subject key identifier:   3C:E2:33:52:3D:80:E7:8D:FE:7E:4B:3C:B3:71:BF:3E:D0:66:5F:AB
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer:       /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial:       07BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number:          07AB
Signing time:             Sat 28 Feb 2026 21:59:23 +0000
Manifest this update:     Sat 28 Feb 2026 21:59:22 +0000
Manifest next update:     Sat 07 Mar 2026 21:59:22 +0000
Files and hashes:         1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: DWm/ei/WkJ5ESFJoQUgKz974sv4DUMEuPoqM3/VZssk=)
                          2: 9DFB3106BBB811F0B79DF618C4F9AE02.roa (hash: 9JynBo7HS6HADYcnvYCEtq7zImkU98cFBKE3P93Ru6k=)
                          3: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: I55/P+QqF3ScWXVdtsdcPhGZLCr6f30z4GF4N/wXUM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
                          rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983 (0x7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
        Validity
            Not Before: Feb 28 21:59:22 2026 GMT
            Not After : Mar  7 21:59:22 2026 GMT
        Subject: CN=69a3653b-fe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:85:a9:94:89:d7:d0:6b:61:c5:79:52:a4:
                    c1:43:e8:f2:26:8e:1c:ad:00:bc:a6:89:57:c4:22:
                    0b:e6:54:73:c5:d2:09:f0:9b:48:c8:cb:f5:c7:c9:
                    d1:17:a9:f6:58:ae:d1:e8:f7:76:0b:75:38:5a:03:
                    3c:ba:ff:c7:5d:6f:16:d6:c1:ea:62:21:f0:95:0b:
                    ef:f0:d2:59:fe:27:5c:4f:0d:cf:b3:0a:bf:fe:e0:
                    65:e4:20:48:b4:26:c0:0c:da:2e:cb:ab:43:f6:0d:
                    3a:07:3a:a1:66:9e:35:db:68:b0:f4:91:d8:f5:66:
                    ab:7b:e1:6c:69:37:11:d3:8b:03:cc:df:5a:fa:65:
                    3f:d3:79:ac:9b:a8:9f:ec:6e:fe:3d:65:40:8e:ee:
                    e6:a7:66:38:45:11:0c:a8:1e:40:bf:ee:ff:02:1b:
                    f7:5b:65:46:c8:e3:b1:bb:a2:e2:75:10:e7:79:06:
                    36:0f:9c:32:73:b4:61:f9:4e:85:c2:41:2c:66:dc:
                    fe:09:f1:80:43:a8:de:c2:a4:e8:25:cb:d9:f8:1b:
                    4c:87:ec:fc:11:12:55:53:49:c3:7a:f5:4b:2c:3e:
                    89:d0:20:17:f9:81:7e:2f:22:cf:de:e2:68:68:ca:
                    d4:9f:f2:5a:26:d0:49:a1:09:d5:e2:34:46:ba:a1:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E2:33:52:3D:80:E7:8D:FE:7E:4B:3C:B3:71:BF:3E:D0:66:5F:AB
            X509v3 Authority Key Identifier:
                keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:5f:54:28:b3:07:c2:ac:79:c3:fa:7b:88:dc:4e:7a:5e:
         d7:c4:59:6a:fd:5b:56:5f:72:1c:74:29:b3:61:e1:e3:73:4d:
         c2:fa:1c:2b:7e:78:61:99:fc:cf:b3:42:56:e4:00:90:43:22:
         6d:ec:33:c3:e3:0f:7e:9f:3f:6a:57:1b:c0:cf:3a:f6:9f:1c:
         d1:2b:4c:20:15:ab:06:75:ee:f3:94:58:6e:77:d9:36:c7:8a:
         71:29:5e:89:a1:03:fb:3c:40:f0:74:f9:75:0f:05:38:07:78:
         fe:39:23:f4:f6:1a:37:b9:d8:05:86:14:58:fb:00:8a:ef:90:
         fc:2f:6f:e5:29:41:22:6f:2b:20:1a:9e:e3:cc:2d:8e:9c:5d:
         fc:4d:82:23:2b:06:e7:a9:6f:25:9e:b2:65:0f:69:86:89:08:
         c0:2f:b5:1b:c2:80:90:23:15:fc:a2:8c:43:d6:40:01:ba:90:
         92:06:01:92:51:4c:42:49:e7:31:5f:e3:bd:f4:ed:a3:71:9a:
         6f:6c:53:e5:fe:82:d0:3a:c2:bd:36:ad:f3:c6:81:7d:fe:c2:
         a1:a7:3b:32:c5:58:45:51:7e:ff:6c:99:10:c6:50:a6:d5:d4:
         74:bd:f5:c9:e2:0f:5b:be:87:22:fd:2b:84:e5:f0:c8:00:51:
         54:55:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:41 2026 by rpki-client