Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
File:                     8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json)
Hash identifier:          mIYXQjxEABVfYBl7D36xmp/zb6mhVkBYJVjclsxu1e4=
Subject key identifier:   F5:1E:C3:72:85:C8:E4:76:C3:5A:0E:8F:40:2D:28:6A:5D:18:B4:36
Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64
Certificate issuer:       /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
Manifest number:          D9
Signing time:             Sun 01 Mar 2026 07:43:40 +0000
Manifest this update:     Sun 01 Mar 2026 07:43:40 +0000
Manifest next update:     Sun 08 Mar 2026 07:43:40 +0000
Files and hashes:         1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: SvkAhBq/pHqmn2n0qdWJqpqxcMqDkHh4O5eu3GruSNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl
                          rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F536, serialNumber=F3367D74448399C18EF67C7C986107B814B12D64
        Validity
            Not Before: Mar  1 07:43:40 2026 GMT
            Not After : Mar  8 07:43:40 2026 GMT
        Subject: CN=69a3ee2c-6a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:45:1e:8e:fd:90:1b:b7:21:44:49:16:de:
                    18:87:08:3c:04:cc:55:1e:1a:e7:69:87:96:ab:77:
                    ce:26:a4:9c:80:8f:d4:6b:d9:eb:25:cb:be:22:6a:
                    b5:ca:89:a5:8a:f1:3b:2f:fb:28:c3:f8:e7:4f:82:
                    a9:0b:e4:c1:7e:b8:8f:9e:7f:71:db:03:e7:99:47:
                    49:03:98:3a:64:3a:fe:98:be:80:01:93:39:cc:de:
                    d5:31:c3:4f:4c:4c:f9:47:e9:9a:1e:d3:b6:34:a6:
                    01:ed:bf:5e:c9:6a:ac:72:56:88:a1:b8:2e:b7:36:
                    d5:ff:fb:03:38:85:5e:2a:0c:54:3f:2c:a0:9c:13:
                    fa:5f:24:7b:38:a0:80:fa:63:56:ee:8e:1c:26:1e:
                    2e:5d:c1:17:15:93:ff:27:af:6e:69:38:35:60:46:
                    bb:8d:81:9e:90:7e:45:41:f4:44:9b:0e:5a:03:4a:
                    3d:f0:11:bb:ec:85:97:88:5d:d2:74:8f:d2:0e:9e:
                    84:18:98:75:cd:6c:3c:40:c6:f5:dc:73:c0:b5:33:
                    9b:92:d8:65:11:8b:8e:bb:59:b7:41:af:d8:17:92:
                    50:ab:7a:f3:8a:54:5a:c8:40:34:b8:fb:1b:68:d7:
                    06:d3:e2:70:01:6f:56:0e:d2:e6:10:ed:3b:f3:ce:
                    64:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1E:C3:72:85:C8:E4:76:C3:5A:0E:8F:40:2D:28:6A:5D:18:B4:36
            X509v3 Authority Key Identifier:
                keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:71:61:e3:a4:de:ba:f6:47:1d:77:0d:13:66:10:bd:8b:
         43:6c:d9:b1:93:a8:91:4a:00:77:6e:d3:f6:4c:3a:a5:69:0c:
         07:f0:6b:29:12:05:1e:6b:67:6e:a7:a9:27:80:cf:20:c4:fc:
         d7:4c:36:50:41:b3:71:0d:53:e1:ee:b4:18:8a:26:09:d5:b9:
         20:a8:e2:89:61:7a:61:de:77:c3:44:7a:62:0e:b5:f4:26:45:
         4f:ec:59:03:3a:6c:28:c8:6b:a5:6c:d5:d9:7e:74:f0:13:5b:
         90:bb:8b:2f:67:0b:bc:53:0a:22:7f:38:28:5a:b8:85:52:e0:
         6f:48:b4:e8:e3:e4:5a:ca:35:a8:9c:97:cb:e9:ab:34:16:c5:
         b0:6b:49:c9:db:1a:b8:9c:8a:5f:b6:43:39:40:c3:bd:5a:61:
         c9:fa:04:c2:51:e2:e2:5d:6d:a0:b9:70:d7:25:7e:72:31:a5:
         79:ad:57:f7:6b:42:fb:33:ee:ce:b0:87:69:df:6c:14:e7:59:
         bf:f2:38:16:00:06:ac:6c:3c:c3:1d:9f:fd:e7:95:81:66:75:
         ad:a3:b9:2d:7c:ce:63:98:59:d6:14:8e:fb:cc:cf:8d:a6:8a:
         ef:4f:ce:9f:6b:87:9b:76:01:d3:a1:73:76:42:cf:ae:9d:2e:
         c1:9f:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:30 2026 by rpki-client