Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
File:                     kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json)
Hash identifier:          fVNnGqlJ4GWxi3Nj0uCepHeFtdylwSYEu95/fYzNZMY=
Subject key identifier:   A9:73:B6:57:46:F1:14:F1:51:BE:AB:26:48:15:C1:39:8F:1C:33:85
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Certificate issuer:       /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
Manifest number:          0262
Signing time:             Sun 01 Mar 2026 02:44:18 +0000
Manifest this update:     Sun 01 Mar 2026 02:44:18 +0000
Manifest next update:     Sun 08 Mar 2026 02:44:18 +0000
Files and hashes:         1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: CFa8pIdSSuNQWYjB/zvEVDWtcpIMAJuBMy3P6uOlPg0=)
                          2: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=)
                          3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=)
                          4: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=)
                          5: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
                          rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
        Validity
            Not Before: Mar  1 02:44:18 2026 GMT
            Not After : Mar  8 02:44:18 2026 GMT
        Subject: CN=69a3a802-4ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:9a:ea:e1:42:8a:36:ea:0c:4e:2a:5b:e9:
                    26:cc:8d:9a:0f:c1:35:d2:5e:67:25:65:c1:9a:64:
                    00:95:15:09:06:c3:ed:dc:26:06:1f:d9:6d:e7:dd:
                    98:9f:d3:69:15:1f:ef:5a:de:1a:e7:5b:4d:f5:51:
                    f1:ae:f8:6e:63:a3:de:59:95:09:74:15:5e:15:fe:
                    c7:2f:f9:21:68:25:f3:46:5e:41:0e:2f:58:64:13:
                    fc:08:f0:aa:44:00:66:7a:d6:99:49:b0:aa:48:ee:
                    7e:01:1b:5d:89:ec:0f:3f:84:a5:fe:92:13:11:40:
                    19:32:79:1f:14:0b:89:6a:1f:1b:8a:f6:98:e9:49:
                    d7:70:3b:1a:b7:8a:b2:7d:86:7b:a4:bd:ed:3d:e0:
                    1f:e8:89:05:5e:4a:4b:9c:f3:2f:3b:b3:f4:a2:07:
                    0b:c2:6d:9f:8f:10:69:46:a7:cd:2a:9f:58:fa:dc:
                    ec:06:af:65:d5:21:c1:18:32:d0:2d:49:75:2d:64:
                    1b:ba:3e:0e:8e:66:2c:3a:df:f5:d2:b4:89:1d:9c:
                    e1:9e:39:64:e5:ce:b0:ed:3b:9c:e9:83:8f:fc:92:
                    7f:65:a3:56:25:7b:43:e6:c6:7e:95:27:13:d8:d8:
                    ee:77:3a:2f:c2:be:8a:0d:06:47:a4:8c:fe:cd:bb:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:B6:57:46:F1:14:F1:51:BE:AB:26:48:15:C1:39:8F:1C:33:85
            X509v3 Authority Key Identifier:
                keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:6c:86:f0:59:7b:42:8c:5d:7a:b7:27:f2:1d:47:28:b1:
         29:2b:7c:3c:28:2d:11:b4:da:8d:2b:c4:4c:37:54:71:fc:7a:
         50:9e:11:26:7e:6f:9d:e4:69:b4:70:cd:80:5a:da:03:63:8b:
         0a:c1:4a:76:ae:d8:a9:c3:0d:05:8f:b0:e4:3b:02:bb:49:ee:
         0b:16:34:07:38:b1:05:c1:07:58:45:7a:cc:b3:1a:88:61:8e:
         f8:ae:e8:d7:16:ac:64:3a:0b:4a:79:8b:62:ff:ae:db:3b:e4:
         b6:79:bd:f4:07:32:62:24:92:a9:95:f3:62:c8:08:ba:19:d4:
         81:40:03:b2:6a:1b:8f:60:03:86:0b:e2:9e:8d:35:11:5c:61:
         f7:a0:2e:c7:91:bc:88:09:d0:aa:b6:1a:33:6c:61:18:2f:87:
         4e:0d:d1:d7:e3:21:9f:2a:c2:7c:56:a0:4e:c0:fb:64:87:78:
         99:3b:ac:ba:45:9b:a8:08:ec:7e:7a:62:d3:24:6e:3c:15:d4:
         b5:86:16:0b:be:3b:00:54:16:16:fe:50:b3:c4:8b:72:46:68:
         28:52:b9:e6:c9:3d:fb:ea:c6:bb:74:8f:c1:55:c5:2a:17:b9:
         9e:cc:2d:8f:c7:a5:c1:79:23:5c:7f:4e:ad:b8:0f:39:0a:70:
         56:36:45:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:35 2026 by rpki-client