Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File:                     r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier:          wBVmtFb+50TAIVv/+VOXmIOflLzRVIQQxl2WaJqVxzg=
Subject key identifier:   06:55:B0:07:A1:27:C0:AA:E3:FD:48:7A:FE:3B:8F:BE:CA:EB:A9:60
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer:       /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial:       0810
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number:          0807
Signing time:             Mon 02 Mar 2026 16:00:10 +0000
Manifest this update:     Mon 02 Mar 2026 16:00:10 +0000
Manifest next update:     Mon 09 Mar 2026 16:00:10 +0000
Files and hashes:         1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: Tt7fRBxIXmcW6vlqCuHtPtUJedWWfaV+qdkQ3zYzR8Q=)
                          2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: MdKj745wIJAm1a/+fD8XVUD4Xm85NkWf5HLxKsTPL9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
        Validity
            Not Before: Mar  2 16:00:10 2026 GMT
            Not After : Mar  9 16:00:10 2026 GMT
        Subject: CN=69a5b40a-3ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:5a:48:7f:81:10:77:dd:bb:10:24:3f:f3:
                    b4:fd:b7:88:a3:c6:48:9c:7e:03:64:d1:f9:66:d9:
                    e0:18:22:2c:fc:c7:7c:64:9b:9c:92:db:c2:b6:29:
                    07:07:e1:69:dc:f4:2e:45:8f:02:5f:6c:d8:c5:27:
                    1f:ad:fe:5e:33:59:a9:00:2e:5e:db:b9:f4:79:a5:
                    3c:df:2e:d9:86:e4:f8:78:44:ed:47:22:b0:89:24:
                    a1:d0:3c:37:4a:e9:10:46:4e:20:b5:7d:55:c8:80:
                    cf:f4:1c:0f:b0:c2:d0:76:f9:3b:6d:cb:6b:84:bc:
                    ae:f7:b9:1e:69:b4:56:5e:f5:ef:f3:e1:82:57:1c:
                    67:ae:be:6f:c0:96:fb:ba:a9:7a:9f:2a:d8:a1:30:
                    40:2f:c7:83:36:69:fa:1b:58:cf:1a:4f:cd:71:22:
                    56:7e:94:a7:ad:76:87:90:e1:bd:f2:4e:ae:ca:f5:
                    7c:87:ef:68:b7:07:2c:da:61:94:c8:c8:ca:56:1a:
                    28:8b:2c:82:2b:b4:fa:6e:8f:d6:58:d9:df:c4:71:
                    2d:3f:1a:65:f7:62:25:1a:b0:d8:b6:af:06:f9:12:
                    e9:cf:4b:62:f4:36:ab:e5:2c:39:f7:f3:dc:72:c4:
                    46:0f:28:a1:f9:a6:bc:04:9e:6d:3e:b6:ef:86:6d:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:B0:07:A1:27:C0:AA:E3:FD:48:7A:FE:3B:8F:BE:CA:EB:A9:60
            X509v3 Authority Key Identifier:
                keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:85:ae:a3:4d:d0:83:59:bc:e1:79:bd:f2:48:f0:6a:93:
         01:56:70:92:f6:f1:03:b7:88:7c:76:7b:cb:75:9a:4a:0c:16:
         8f:12:bc:33:62:09:13:88:e2:95:82:f2:d9:92:04:8f:30:3b:
         18:43:1e:62:4f:00:49:ba:a1:f4:88:41:b2:f8:16:a7:2a:bf:
         4a:71:70:07:73:f0:aa:37:1c:f1:39:57:5a:cf:75:b7:71:91:
         ed:d2:e0:f9:ef:a6:79:0b:97:51:9a:76:7d:dc:d2:11:7e:f4:
         d1:c3:3d:f3:b7:04:64:1e:c4:40:f6:cf:28:0c:bb:60:37:d8:
         32:c8:1b:40:63:0f:20:1b:6b:79:80:59:5d:c8:c3:f8:8b:9d:
         a1:87:f5:0e:2a:9d:42:8c:80:77:e5:e0:04:c5:e8:04:ce:1d:
         91:24:6e:4e:7a:bb:15:af:ad:88:9a:f2:2d:28:6e:07:1f:8d:
         7f:cd:1f:7a:f9:c2:00:21:ec:50:41:ee:37:a6:2d:e6:bd:e0:
         0e:27:a9:43:49:1c:b4:0f:c2:c8:cc:c8:f3:47:50:aa:61:6b:
         75:2d:37:0a:a9:f6:c4:5b:15:f2:d7:52:f5:7d:fd:3c:43:93:
         28:f4:57:33:1a:36:37:54:33:28:c1:e4:6b:1c:e7:95:91:54:
         11:9a:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:13 2026 by rpki-client