Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
File:                     s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json)
Hash identifier:          /RwwEMKs/jPWDKALBJXi9d6ob3iMWhV5NcfLCiumDUQ=
Subject key identifier:   29:42:47:0B:4F:27:A5:13:C2:3D:3B:DF:95:C2:F9:2C:6C:54:04:D4
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Certificate issuer:       /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
Manifest number:          015E
Signing time:             Sun 01 Mar 2026 06:00:14 +0000
Manifest this update:     Sun 01 Mar 2026 06:00:13 +0000
Manifest next update:     Sun 08 Mar 2026 06:00:13 +0000
Files and hashes:         1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: 9cHU9g7JsGeKZkk/6zBaIKFyHpCBFJxuIXWXCbB2Elw=)
                          2: C591C650781311F080669C0EC4F9AE02.roa (hash: WdqV1sxOirOUn9ZhlZhPe2M8qixZkx77pHk6AUB3MBw=)
                          3: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: jXqxc10SyUCzWVj9PPPMNw2b7v248uGR+j4feRoYBdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
        Validity
            Not Before: Mar  1 06:00:13 2026 GMT
            Not After : Mar  8 06:00:13 2026 GMT
        Subject: CN=69a3d5ed-35cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:f7:77:e2:4a:dd:ee:6a:2e:b6:52:b4:5c:
                    78:dd:5b:29:33:9a:70:a5:42:e9:1c:0a:c6:d1:2f:
                    de:d2:74:13:c9:60:49:41:8a:0b:f0:d2:5d:5e:5e:
                    b1:0d:a8:a0:96:db:60:5b:04:bb:c5:17:7b:b1:12:
                    f7:da:93:cc:98:c9:0c:fb:81:cc:b7:41:a2:56:ca:
                    ee:7a:1e:db:f3:6c:27:31:03:05:8f:86:6c:ec:10:
                    00:69:fd:36:12:a7:62:5f:cc:a8:d2:2e:d3:3e:f4:
                    e7:84:f9:15:6f:6d:5b:fa:8f:8d:2a:6d:1b:82:c2:
                    c0:67:06:0b:8d:06:7d:dd:ad:11:a1:7f:c4:e1:ae:
                    1f:12:cf:e5:1f:79:49:e1:c0:7a:34:5b:da:57:26:
                    4d:ea:ee:b9:7b:57:10:05:0d:5a:6b:6d:0b:19:57:
                    7c:1a:f9:bc:45:af:35:b9:0e:7f:bd:39:15:45:2b:
                    3a:87:61:2c:86:22:65:69:11:eb:ce:62:c4:73:59:
                    e3:15:2e:2a:de:c8:59:4d:f9:5d:86:43:22:91:eb:
                    d1:ca:6d:ca:30:78:56:98:16:3e:93:41:a5:0a:5c:
                    ea:85:c5:e3:32:46:2e:c9:17:7d:bb:1d:a7:12:5f:
                    d3:97:2a:29:8e:5f:16:2d:e2:d8:5c:93:75:fa:3e:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:47:0B:4F:27:A5:13:C2:3D:3B:DF:95:C2:F9:2C:6C:54:04:D4
            X509v3 Authority Key Identifier:
                keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:9c:ba:fd:e7:2e:b3:f3:a5:1f:14:4e:90:04:77:a2:ba:
         19:1e:b3:83:e5:00:8f:e5:c5:14:a5:44:42:b5:ca:b6:54:a7:
         0d:95:b4:5b:00:22:24:ff:2e:f9:a5:98:f5:b3:25:a4:0b:a9:
         26:06:54:cf:0d:25:9f:75:93:dc:5d:d5:a5:99:da:83:44:1e:
         b8:c8:b5:32:54:a9:9b:80:9f:ea:56:39:5a:6f:47:42:bf:6b:
         ff:8c:2e:be:54:26:59:92:8a:35:4d:9b:1a:af:99:5b:3d:4a:
         9b:2c:de:98:4b:28:6f:79:78:64:91:e5:47:33:c6:43:d0:22:
         3c:8e:fb:5a:73:b3:19:c6:92:70:95:4a:be:07:19:fc:cd:ad:
         19:3a:46:83:6e:63:d6:29:03:13:9d:3d:bd:38:57:82:4e:e5:
         95:b7:48:bd:67:fa:c1:dc:75:0e:2d:90:c5:b9:67:f2:6f:c4:
         18:06:92:56:25:57:4b:f6:6c:c4:4c:0c:bb:5a:f4:57:c3:89:
         d5:89:29:a0:49:8a:0e:ee:4a:93:4c:7e:a4:bb:58:99:d4:ba:
         85:1c:bd:50:77:33:f4:f3:8c:ed:7f:08:06:88:56:0f:46:19:
         e8:17:25:0f:ec:ff:20:a1:3e:2a:fc:07:c3:77:a6:8f:26:1e:
         4b:82:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:13 2026 by rpki-client