Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
File:                     6bYAyebdjO7JchldY0nImDj3Rb4.mft (raw, json)
Hash identifier:          LF+hSlhNPUMVCq9L1YFS/nRi0RHmh4wbVy2PODFtiNg=
Subject key identifier:   F2:89:09:BD:58:06:F8:AC:55:DC:4E:BD:E8:49:1A:93:86:6F:BE:96
Authority key identifier: E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE
Certificate issuer:       /CN=A9117257/serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
Manifest number:          0201
Signing time:             Sun 01 Mar 2026 04:01:21 +0000
Manifest this update:     Sun 01 Mar 2026 04:01:21 +0000
Manifest next update:     Sun 08 Mar 2026 04:01:21 +0000
Files and hashes:         1: 6bYAyebdjO7JchldY0nImDj3Rb4.crl (hash: +Suvj6v0VZINHvYnf10nnR7yOhX4EzDCALSqaz3Zayw=)
                          2: B09305FACED711F0A1339C83C4F9AE02.roa (hash: QXbozYfql3zf0npdws1N3orSmKNu/Aqt6/GVn0LZhfc=)
                          3: 7138FC520BBE11F0B8594F31C4F9AE02.roa (hash: jpNuNdu2QleRdRw+2Vwgv3Axf5tDqHuqhdfOEdsZxUs=)
                          4: B38B0F188C8511EF8E80211BC4F9AE02.roa (hash: PtbLVUOnJNkoi8KvQTAiyARz3OXKFtHD7Am5CVafI/U=)
                          5: A257B948E56D11F0BFC731FA3E6F56BC.roa (hash: nFxacFKilQpZ/teATUTUTKOc2E4uLhS3+/GyQmioO3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117257, serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
        Validity
            Not Before: Mar  1 04:01:21 2026 GMT
            Not After : Mar  8 04:01:21 2026 GMT
        Subject: CN=69a3ba11-0908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:92:ff:ae:8e:48:56:2b:6c:2d:b2:87:50:
                    e8:56:0d:f4:4b:2a:8b:fd:23:fd:5d:dc:39:50:6e:
                    1f:16:18:6a:97:13:7f:7d:28:96:b4:c3:bb:f9:ed:
                    fc:88:52:57:99:c3:c6:ec:ca:76:3b:64:30:34:1e:
                    ec:8f:49:fb:66:88:b9:51:a3:82:9c:18:26:2b:90:
                    f7:df:cd:9a:94:81:00:6d:dc:d2:51:12:a1:0c:e8:
                    e5:19:44:95:06:57:fc:5a:31:79:44:15:ca:b8:55:
                    85:2e:4f:13:34:bb:3e:e8:f6:c2:ab:df:bf:d1:b1:
                    1b:4a:cd:74:ed:41:91:6a:02:72:23:34:7f:1c:c2:
                    e6:66:4f:a2:73:b9:13:bc:5f:20:7d:62:6d:a4:76:
                    e8:c8:c2:a9:7a:d5:2a:94:64:e4:51:9b:f8:6c:96:
                    af:16:5b:6c:48:02:a1:0c:61:c2:9c:7d:5d:9a:96:
                    9b:65:29:88:21:5f:77:71:b2:9e:d8:12:85:9f:03:
                    b6:f2:8c:4b:22:8e:44:62:ab:99:e9:c0:87:a4:67:
                    38:2a:a7:cc:25:03:45:9d:cf:dc:39:b9:ee:21:3f:
                    32:fe:4b:ca:70:ec:44:f1:49:84:a7:6e:6e:52:7a:
                    d8:69:6f:fb:e6:09:53:cf:b4:4c:68:dd:df:73:94:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:89:09:BD:58:06:F8:AC:55:DC:4E:BD:E8:49:1A:93:86:6F:BE:96
            X509v3 Authority Key Identifier:
                keyid:E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:ce:84:38:5e:32:13:40:7d:a2:90:a9:11:f3:b2:c4:bb:
         36:89:d2:a6:a5:e8:11:8f:07:7a:f9:41:fe:30:04:0a:5d:1f:
         22:48:0a:a1:fe:3d:96:69:5f:4a:9e:1f:62:3c:4d:fd:2a:fb:
         66:cc:72:4d:10:01:c7:c7:55:41:b9:b2:37:33:1f:32:50:9e:
         c8:ee:d7:ab:d3:0c:14:da:b3:40:ea:e7:0d:1b:bc:3a:fc:f0:
         32:fc:96:d1:a5:cc:af:79:8b:1e:33:24:e9:a2:a9:66:f3:65:
         fb:e3:ce:ac:f2:01:2a:03:49:8b:94:2f:c5:a5:2a:32:1b:f3:
         26:ff:7f:34:f5:31:43:bd:ad:ed:89:e9:a8:cf:50:d6:22:fb:
         5c:59:c8:59:2a:eb:70:cf:71:19:c8:54:5e:77:ee:32:f6:85:
         2d:83:e7:a7:9f:21:ab:04:84:f9:53:fe:ce:89:c3:b1:f1:2c:
         71:03:dc:29:2a:6d:52:9a:55:e1:c6:0b:6b:52:e6:c0:c9:57:
         a0:a4:93:e8:13:68:76:ce:44:79:66:3e:6a:5d:13:78:80:68:
         4a:3a:37:4f:e1:bf:47:c6:5b:b7:d7:59:5e:e0:39:51:64:6a:
         cc:83:cf:21:4a:f6:42:82:0a:ed:c2:ac:a3:2e:c9:41:30:ae:
         95:10:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:19 2026 by rpki-client