Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
File:                     0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json)
Hash identifier:          atJO49CMcJ+tUqidbi3G8Gcl5xgPH9UJgPcdWX8NY/g=
Subject key identifier:   50:6D:B7:51:63:3F:F2:0C:E2:0C:C3:9A:23:67:69:85:25:E6:BF:30
Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Certificate issuer:       /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Certificate serial:       0BC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
Manifest number:          0BBA
Signing time:             Mon 02 Mar 2026 00:13:04 +0000
Manifest this update:     Mon 02 Mar 2026 00:13:02 +0000
Manifest next update:     Mon 09 Mar 2026 00:13:02 +0000
Files and hashes:         1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: hMhs1cQDf/S4o4ZEltRFZa7iM9NTzp9c+yXcSa2rsbs=)
                          2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: XKDSZPzMqa5QorcvgY8yeybuV/ov43f+onvjmQy64ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
                          rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
        Validity
            Not Before: Mar  2 00:13:02 2026 GMT
            Not After : Mar  9 00:13:02 2026 GMT
        Subject: CN=69a4d610-a21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:c0:4b:e6:28:da:76:15:73:15:3d:b4:52:
                    54:84:23:64:2c:0a:ca:2c:3a:78:b6:44:ac:dc:96:
                    2a:0a:c0:d8:f6:07:ef:df:c5:e7:74:e0:46:a7:71:
                    3e:dc:ff:00:7e:8f:fa:0f:b9:9d:00:db:1c:ef:24:
                    ff:e0:02:c5:fd:54:db:34:6d:46:42:cc:20:f4:8f:
                    5a:fd:10:f2:53:9e:68:dc:99:8a:10:d0:c2:00:84:
                    50:b5:85:11:17:23:2f:70:92:f9:3a:31:05:e1:dd:
                    31:6d:53:f5:65:fd:f1:a1:aa:ec:95:9f:23:62:b3:
                    b2:4f:d2:2c:9c:80:47:41:e2:37:2f:b8:2d:d9:18:
                    e4:a6:d0:fa:98:8b:8b:72:bb:a0:3e:bd:aa:37:8d:
                    8d:63:e8:c8:7b:90:23:ad:c8:e6:7f:e3:f5:c0:e8:
                    c1:45:be:a3:be:f1:f8:b9:a0:99:ab:3c:c4:e8:ad:
                    a8:3a:2e:2b:77:f6:26:2b:33:1b:5e:27:dd:ef:f8:
                    7d:50:41:3f:c5:89:58:ad:94:4e:49:3e:1a:b0:59:
                    19:50:45:e4:77:c2:2b:53:e5:06:09:88:ce:7a:f3:
                    e7:c6:d5:82:de:ec:3d:a1:7a:b2:68:60:71:61:6b:
                    d3:13:25:d1:d1:d1:79:5f:72:a0:a2:9b:f8:2b:b3:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6D:B7:51:63:3F:F2:0C:E2:0C:C3:9A:23:67:69:85:25:E6:BF:30
            X509v3 Authority Key Identifier:
                keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:29:a0:73:58:6d:1d:f0:dc:49:b8:e4:01:8f:60:7a:01:df:
         f9:22:93:cf:34:45:bd:ab:c0:6a:e2:be:dd:7d:f3:df:7a:f0:
         76:97:30:08:39:43:3d:48:1f:fc:93:64:91:25:23:7c:0c:f4:
         b7:68:77:ce:8f:f5:ba:e0:49:6c:be:c6:62:4a:22:4a:7e:48:
         3a:3f:b5:7a:7b:76:41:80:1e:2c:78:79:8c:db:d3:49:ff:29:
         89:12:f9:2d:73:34:11:8b:11:fd:de:cb:11:84:6c:79:12:c0:
         ab:fd:42:19:f1:48:da:b4:bd:be:ea:21:d8:2f:2c:dc:8e:72:
         c6:55:f1:8a:5d:4d:b8:34:f4:51:77:68:40:55:21:ab:fd:e5:
         98:83:97:d8:1b:83:c0:2b:b4:fc:ff:d7:29:76:76:1d:5f:95:
         ac:c9:98:90:ed:eb:6d:e2:59:8e:36:06:8c:f7:5c:69:91:d2:
         a6:05:03:cd:c1:1a:b0:f2:11:f7:4c:77:f7:10:c7:0c:95:c2:
         33:6c:0d:43:f5:26:eb:36:6f:b4:0f:85:a9:5b:5f:de:d5:6c:
         96:82:ad:91:d7:f7:05:d9:ce:93:dd:1d:8d:61:b3:d2:d3:7b:
         eb:05:d7:98:a8:ce:3e:1b:32:69:4b:5c:95:19:df:43:12:be:
         60:a3:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:16 2026 by rpki-client