Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
File:                     hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json)
Hash identifier:          zbWQPBiZWf8mtKf7/7FnADsCODhJoRrwMkzK+pVAQfo=
Subject key identifier:   4C:02:9C:FD:66:5D:41:14:B1:3E:04:77:10:19:DF:58:0D:68:E3:26
Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3
Certificate issuer:       /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
Certificate serial:       06F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
Manifest number:          06E5
Signing time:             Mon 02 Mar 2026 01:35:51 +0000
Manifest this update:     Mon 02 Mar 2026 01:35:49 +0000
Manifest next update:     Mon 09 Mar 2026 01:35:49 +0000
Files and hashes:         1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: M37507UMIuZ902eRHwNRZLf70quZythlKJJ4e5ym22s=)
                          2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: taqp3LL8tAiDHV2u6BkFdJRyNn3w2njiu3rh4Og8etQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl
                          rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
        Validity
            Not Before: Mar  2 01:35:49 2026 GMT
            Not After : Mar  9 01:35:49 2026 GMT
        Subject: CN=69a4e976-4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:88:5c:ca:a9:db:7a:03:19:60:03:76:33:
                    b7:c4:ca:11:4b:f4:76:92:65:8e:b6:5d:03:d6:2a:
                    b9:b9:de:a0:3d:c8:f6:64:8e:eb:22:13:04:6d:eb:
                    30:d1:37:74:e9:45:5d:b4:db:b4:b8:02:ba:8c:a2:
                    76:91:fc:3b:fc:f9:cc:38:e6:03:8a:1c:7f:34:40:
                    80:36:41:c1:d3:28:a0:c2:e3:ae:29:40:5b:6a:ec:
                    ec:52:94:40:6c:30:45:1a:bf:54:40:36:a1:4d:ee:
                    a2:3e:4f:2f:0f:fe:3b:2e:77:ef:1a:50:23:95:4a:
                    02:da:f8:7b:39:46:05:60:e3:65:d2:f2:23:18:f2:
                    99:fd:95:1d:58:8b:a7:d7:72:cd:6a:d9:6b:45:15:
                    cc:cc:50:c8:73:d5:59:19:7a:8c:b3:c0:ac:be:0c:
                    41:e9:4a:73:95:9e:b7:8d:a5:d7:7b:a2:1b:36:f9:
                    a7:72:a8:c5:00:c7:18:3f:ba:82:6f:95:95:02:49:
                    48:84:e9:22:86:66:91:c5:65:5e:99:7e:0d:03:7b:
                    53:94:de:95:13:79:3b:d2:85:84:96:50:16:97:b7:
                    2d:71:72:b9:ba:9d:35:84:f9:12:86:43:c1:a2:01:
                    88:ef:e8:6a:10:30:8a:6a:39:8d:39:33:d5:b8:28:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:9C:FD:66:5D:41:14:B1:3E:04:77:10:19:DF:58:0D:68:E3:26
            X509v3 Authority Key Identifier:
                keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:2f:59:f2:ff:0c:eb:66:ac:f4:26:84:6f:1d:8d:83:4e:
         33:2e:c9:79:31:65:4e:3a:61:d2:0c:ab:f7:fd:60:d8:a6:5f:
         1e:bd:3c:1b:7c:7b:fc:e9:e1:fd:1a:cc:86:ca:ee:e8:ff:5e:
         ed:9c:94:81:d0:79:c7:19:df:37:78:2f:4b:fe:13:3e:54:87:
         09:7b:6c:01:98:86:52:95:ef:60:e3:d6:c5:4a:08:ff:f5:e2:
         bc:97:bb:31:9e:79:18:87:30:4f:15:3f:d0:f5:98:87:ad:67:
         c7:d0:db:ca:8d:86:cb:08:69:a3:32:76:8c:99:bc:04:99:99:
         af:34:19:16:7f:da:9b:56:e7:9b:62:1f:40:18:8b:57:0a:41:
         32:6d:9d:79:07:1a:7f:45:7e:07:e2:53:19:43:70:76:89:9f:
         0e:1c:bb:1a:69:8f:8b:aa:86:37:e5:59:aa:46:b0:60:96:fb:
         63:36:af:86:50:36:fc:17:d6:68:fc:b6:09:15:98:24:bd:93:
         ba:04:e0:a3:e1:28:95:60:15:f1:ee:3e:45:e7:d0:09:b0:6d:
         8f:20:21:ef:d3:41:3f:39:94:7e:a8:c7:c9:57:b9:c0:a4:f5:
         92:58:8b:56:aa:f7:dd:17:ac:18:b9:c6:ca:b7:f8:d4:d7:7e:
         94:89:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:42 2026 by rpki-client