Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
File:                     8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json)
Hash identifier:          tx2j9XM1QqAP2p4xVqs+vxj7lcIjN4mnwpbbnOZqLm0=
Subject key identifier:   51:A4:84:A9:01:62:10:9D:17:C1:A9:32:D3:0C:E2:5E:CD:E4:08:44
Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
Certificate issuer:       /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
Manifest number:          01A6
Signing time:             Sun 01 Mar 2026 23:25:02 +0000
Manifest this update:     Sun 01 Mar 2026 23:25:01 +0000
Manifest next update:     Sun 08 Mar 2026 23:25:01 +0000
Files and hashes:         1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: Ht5x63AnoxnAraW109FZlc808M0MM6uKz0N/6FGYI7Q=)
                          2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: XjFhck5MvAQTRA+OOGEV3q9Dar3ZejU3wR1JyHT6FLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl
                          rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
        Validity
            Not Before: Mar  1 23:25:01 2026 GMT
            Not After : Mar  8 23:25:01 2026 GMT
        Subject: CN=69a4cace-2fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:9b:20:52:ed:ff:e1:99:56:1b:3f:28:fe:
                    b2:b9:54:82:82:ac:ef:3b:2c:b7:a9:40:16:db:c8:
                    bb:81:85:6a:36:cf:bf:19:3f:1f:d7:a8:47:4e:49:
                    ff:5a:24:47:9f:50:cb:2c:09:a3:9a:0f:cd:ee:66:
                    17:03:87:1f:5a:c4:60:45:98:04:e8:46:da:fa:1e:
                    2a:aa:f6:5b:60:3a:1a:40:0b:55:9a:01:70:36:f4:
                    0c:35:71:73:2a:e1:da:6c:db:ab:da:e6:14:ce:d1:
                    96:2a:f9:72:62:ec:0f:ba:91:76:ad:fe:b5:0f:0c:
                    27:1b:6f:18:ef:b8:fe:6d:e0:1f:80:39:1b:fb:c0:
                    e1:d4:d6:39:05:ea:1a:9e:16:ad:ab:c4:65:3f:09:
                    e2:6f:4c:73:a8:36:6d:d2:b5:23:86:11:36:01:57:
                    13:35:0e:1b:6f:4b:2a:9d:48:c7:30:5d:db:6a:f9:
                    6a:4d:18:40:eb:17:bb:64:05:0e:7f:ab:46:a8:0d:
                    66:ea:d7:1e:9f:cd:43:3b:fc:f8:62:cb:4f:02:6c:
                    fd:98:16:db:ea:36:ff:18:2b:64:77:89:ca:38:4f:
                    ac:86:1b:74:7e:f5:25:6d:ff:e7:a8:ab:24:60:01:
                    e2:87:fb:2a:93:42:ab:5b:9a:0f:f3:44:87:33:ef:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A4:84:A9:01:62:10:9D:17:C1:A9:32:D3:0C:E2:5E:CD:E4:08:44
            X509v3 Authority Key Identifier:
                keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:07:55:f3:a7:ee:65:e1:a7:a1:65:e1:85:24:21:06:ad:01:
         7c:02:9a:23:1f:10:57:0c:af:ef:11:8a:02:ed:b7:99:04:82:
         37:f6:03:71:15:1a:25:3b:53:0b:d4:f0:e0:49:9b:eb:3e:8b:
         0f:90:be:f1:46:58:2b:e9:75:d8:05:9c:36:78:f5:fb:25:0e:
         29:9f:0e:de:1f:91:f5:5d:ea:f8:48:b4:c0:8b:3d:56:02:c1:
         bb:bd:d6:99:48:e3:e5:f8:cb:f0:f8:95:7d:98:76:19:b4:c8:
         b3:b0:97:1a:64:15:bf:f6:46:3c:bb:f5:3f:d0:a9:c7:6b:ab:
         81:ab:b7:d9:03:90:39:aa:8b:73:9f:47:9d:32:a0:15:1d:b7:
         4b:59:98:f2:53:ed:4e:84:d3:4f:8f:97:ad:2a:d9:6e:9f:6f:
         52:07:05:c0:24:a0:6b:6f:22:ab:9d:53:e1:74:07:7d:d9:a7:
         a7:0f:59:a5:b8:bd:fa:6e:9c:e5:c9:0b:80:c6:1d:01:64:ab:
         cc:cb:5d:13:f1:fb:81:59:b5:a0:92:e6:a1:53:1d:71:ed:e8:
         10:e9:8d:12:28:6e:96:59:bb:69:9d:3f:69:72:2a:24:b5:34:
         d4:b6:d2:3b:b1:fc:d1:19:e1:f1:61:3f:4d:34:81:ae:90:e3:
         46:1d:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:44 2026 by rpki-client