Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File:                     _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier:          ZHi+SHeKSi9UPssU9f+QN9ZhYOOGttFRIeKFczIwxmc=
Subject key identifier:   DA:8E:32:09:0C:79:0B:E4:DC:55:B0:57:04:D0:D1:73:A3:D2:D4:4F
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer:       /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number:          1F
Signing time:             Sun 01 Mar 2026 10:21:34 +0000
Manifest this update:     Sun 01 Mar 2026 10:21:34 +0000
Manifest next update:     Sun 08 Mar 2026 10:21:34 +0000
Files and hashes:         1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: X9opUhHftVVoGdriik6ESoeMgal0JAphjHN50WXgcWY=)
                          2: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
                          3: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
        Validity
            Not Before: Mar  1 10:21:34 2026 GMT
            Not After : Mar  8 10:21:34 2026 GMT
        Subject: CN=69a4132e-c445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:c3:a3:59:83:a6:7c:43:a2:b4:eb:62:c9:
                    f6:f2:c8:43:4c:bb:b8:32:f0:1a:b0:27:75:94:1a:
                    11:23:b9:91:64:45:6d:21:93:69:a0:9b:da:2b:fb:
                    36:7c:41:ee:6b:35:0c:c6:1b:f5:99:ff:35:f7:db:
                    e6:96:33:cd:50:22:22:d4:9e:43:3c:98:c5:20:f0:
                    14:84:d8:27:71:ca:40:c5:93:db:3b:7d:d8:7a:c5:
                    51:4c:35:02:13:06:09:ef:3e:b8:22:ec:55:0d:9d:
                    67:56:9b:00:44:ba:3f:d6:98:26:a9:05:28:10:25:
                    6d:b1:ae:50:40:51:c9:84:0c:09:66:6b:64:04:32:
                    0c:bb:e6:be:66:e3:70:1f:2a:86:bf:1b:fa:c7:86:
                    bd:82:2e:33:e0:93:dc:99:a4:ed:04:5b:58:c5:fd:
                    8e:a0:7d:03:53:80:30:be:5c:57:e9:a2:db:a3:9e:
                    65:9f:89:e5:15:2d:bf:4b:4f:0a:c3:12:b2:0f:ef:
                    33:1b:c4:ec:38:39:2b:fc:f7:31:a3:5f:13:bd:c8:
                    d2:a1:cc:ba:60:2c:1f:78:35:b4:1f:28:46:53:38:
                    a2:9e:95:12:8b:7f:cd:cf:58:96:dc:11:ac:b6:fe:
                    80:aa:a7:a4:f0:3e:41:e1:7f:fd:49:c1:d9:50:7a:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8E:32:09:0C:79:0B:E4:DC:55:B0:57:04:D0:D1:73:A3:D2:D4:4F
            X509v3 Authority Key Identifier:
                keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:29:92:8a:2f:6d:e9:34:79:34:fd:e7:c1:8f:44:91:e0:dc:
         29:b7:27:9d:b5:2d:4c:a9:46:e6:94:16:b7:c7:2d:d0:d0:1d:
         de:48:c2:b8:0b:19:c2:1b:bb:73:4b:a2:49:4f:96:b5:82:02:
         ab:88:0a:db:4d:bc:41:23:09:0f:71:3c:1f:87:31:4d:76:37:
         dc:04:04:79:3a:38:24:ba:57:b1:5a:8b:a3:3f:2b:9c:1a:cb:
         9f:99:4a:98:62:2e:f4:1b:5a:da:04:ce:12:9e:e9:b6:f4:c5:
         0b:99:be:cc:2c:fc:1c:b8:ca:a4:12:c2:1a:92:cc:f3:95:0d:
         8d:3a:a7:15:86:e4:9e:f6:d9:b2:a9:16:8b:3b:4a:04:b9:5b:
         cc:ca:de:7a:4f:93:ee:13:25:22:b0:3e:d2:3d:3c:aa:8b:9c:
         97:49:90:4d:d6:e9:39:7b:b0:15:cd:31:6b:5d:1b:7f:81:c8:
         f8:51:8c:77:94:c8:2a:91:aa:96:2b:b8:0b:1c:dc:38:77:a6:
         64:c6:91:97:40:6d:47:90:c9:e9:37:ce:3f:4d:6f:ff:02:f7:
         c6:62:46:39:a7:59:bb:36:cc:7c:26:79:f6:77:36:8d:bc:e6:
         dc:83:ce:9e:96:f0:41:69:7f:71:b3:73:52:db:bd:60:97:8f:
         18:d5:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:58 2026 by rpki-client