Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File:                     kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier:          fSOV7wzoZnskWq7dDWeL90Bx9le26B+r6BEN14Jp0eg=
Subject key identifier:   C2:C9:C1:FE:96:E9:3A:62:42:15:A3:96:3F:85:E5:E7:96:14:3F:74
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer:       /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial:       06B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number:          06A9
Signing time:             Mon 02 Mar 2026 02:42:26 +0000
Manifest this update:     Mon 02 Mar 2026 02:42:23 +0000
Manifest next update:     Mon 09 Mar 2026 02:42:23 +0000
Files and hashes:         1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: luYUFi71TadHqgz0Ly+3fo5gq9LIcpxYX4k7Yu94Sng=)
                          2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
                          rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
        Validity
            Not Before: Mar  2 02:42:23 2026 GMT
            Not After : Mar  9 02:42:23 2026 GMT
        Subject: CN=69a4f911-e5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:50:40:44:3a:e6:6b:ac:06:5e:03:3c:f9:b3:
                    1c:27:09:dc:ab:06:a0:46:03:18:50:4e:1e:c4:3f:
                    9d:ce:1a:ea:94:6e:15:b3:91:8f:72:37:82:ae:bb:
                    fb:32:ad:27:a7:88:64:62:25:35:15:a6:2b:55:28:
                    32:95:88:a7:0c:5b:bf:0b:b3:8a:62:2b:b9:39:41:
                    dd:be:4f:35:d3:56:6c:41:b1:05:37:5a:f4:60:c1:
                    62:35:dd:f4:0c:4d:46:bf:97:3b:5e:88:4e:6f:4e:
                    61:e5:a2:6e:4c:e9:66:fe:d9:f5:bd:4a:95:d1:bf:
                    e0:3f:15:51:ab:42:32:8f:be:80:c0:67:f1:c3:c2:
                    26:3e:6f:ed:2f:1b:9d:2d:6e:02:b7:4f:2f:92:48:
                    73:7d:7d:10:b5:f2:4c:4e:97:d5:9f:00:b7:af:82:
                    84:a7:bb:50:d3:6a:81:74:7a:7a:7a:af:78:e1:b9:
                    ff:a0:bf:6f:d9:5d:af:4a:e4:65:0a:08:f7:b1:a8:
                    f7:33:b0:9a:a2:8d:55:b3:3a:b1:98:36:57:39:74:
                    2c:9a:81:e4:dc:6b:af:8f:fe:15:7f:8a:ca:7d:cd:
                    11:d1:5e:61:57:4d:db:b7:f0:a1:2b:75:b5:5a:e1:
                    5d:31:da:63:84:5d:d0:80:18:ee:66:4c:35:6c:1a:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C9:C1:FE:96:E9:3A:62:42:15:A3:96:3F:85:E5:E7:96:14:3F:74
            X509v3 Authority Key Identifier:
                keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:f4:4d:33:c8:73:69:b3:bf:41:3f:8c:0d:45:e2:c5:5c:
         e2:08:ce:ee:23:94:35:d7:f9:52:89:39:5c:44:a0:6c:7a:a4:
         52:80:1f:bb:d1:45:ba:f4:28:4b:db:84:38:63:ab:be:15:93:
         08:8c:78:75:0d:94:78:9c:f3:69:f9:29:16:d0:5f:d2:43:8c:
         9b:a3:ff:6f:eb:2c:43:b8:23:a9:00:38:f8:90:89:de:3c:50:
         14:8f:da:68:26:77:28:21:1d:08:67:3b:19:56:e0:0d:a7:08:
         41:2e:01:46:79:21:22:90:09:a9:b1:7e:aa:e1:65:82:55:10:
         8d:28:34:6c:4b:85:2d:4e:c5:31:80:ab:8c:ca:f9:3a:44:fd:
         ac:3b:78:f8:63:c1:f6:01:d4:c9:f9:d5:e3:8c:96:5d:93:de:
         90:c0:ec:d0:b3:a8:91:2f:01:61:94:d5:65:74:c2:8f:52:08:
         62:1c:43:5c:11:94:17:3c:95:6a:97:9d:24:45:a1:b0:4b:8b:
         85:f7:bc:49:b9:87:80:2f:e6:98:8a:2a:45:5a:8e:99:86:5b:
         fe:f8:6f:e1:97:30:a3:9b:f6:09:3f:dc:a6:8c:6a:74:7e:5b:
         65:5f:26:d4:8a:7a:d9:39:ff:18:7f:4a:e0:d8:40:95:17:24:
         f7:c8:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:28 2026 by rpki-client