Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File:                     gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier:          qr8D9ZR32AkYP281dylsnDRLoRNYhgfAc4dH5YEbPF8=
Subject key identifier:   E7:4F:16:42:DD:53:F8:A7:94:AA:E3:C1:EA:7B:74:12:81:81:F2:62
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number:          01EE
Signing time:             Sun 01 Mar 2026 23:49:02 +0000
Manifest this update:     Sun 01 Mar 2026 23:49:00 +0000
Manifest next update:     Sun 08 Mar 2026 23:49:00 +0000
Files and hashes:         1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: 2DNNOfiMvxXuEfWWzVn/L43UokyP5DoeqLGeyNXGnqU=)
                          2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=)
                          3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Mar  1 23:49:00 2026 GMT
            Not After : Mar  8 23:49:00 2026 GMT
        Subject: CN=69a4d06d-8450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:97:39:9e:64:7f:15:64:5b:10:37:c0:92:
                    fb:cc:8b:d5:1c:42:5c:88:d4:89:99:67:72:c0:2e:
                    84:31:32:ea:e4:19:c7:59:61:32:54:61:14:79:08:
                    33:0f:d3:87:76:48:86:37:eb:40:88:32:4e:d2:a4:
                    0b:92:c4:a1:a9:09:8c:7e:0e:5a:c3:44:c2:da:db:
                    86:4e:b7:7f:8e:7f:49:b8:97:f8:41:87:f9:79:85:
                    43:13:99:a6:2d:40:a7:16:c1:7e:17:59:8a:cf:ee:
                    8d:ca:5f:94:17:96:c8:78:b6:5f:63:5d:d5:ec:3f:
                    75:dc:df:9b:29:26:b6:86:bf:44:b7:7e:ce:66:ae:
                    b8:55:6d:88:23:36:e9:d1:88:9d:2b:85:81:36:f5:
                    a3:93:54:a3:67:4c:24:05:d9:66:5f:5f:05:79:19:
                    01:f1:6f:d5:03:ed:0b:b6:cc:de:5f:50:2e:6b:27:
                    ef:4e:70:9f:eb:9e:48:01:c3:e4:f3:b4:ae:90:62:
                    b0:d5:05:b2:c4:8d:d7:b2:a9:27:23:b2:4b:2e:1a:
                    79:b8:e5:7d:62:05:dd:bf:12:01:e9:62:06:83:68:
                    60:1e:91:fc:16:16:a3:5a:7a:24:a0:f3:65:55:42:
                    4a:77:96:b8:23:37:39:32:d7:cc:a5:66:9d:47:b1:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4F:16:42:DD:53:F8:A7:94:AA:E3:C1:EA:7B:74:12:81:81:F2:62
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2f:98:2e:32:fd:30:92:35:0a:58:e7:d7:1e:dd:41:cf:14:
         59:4e:29:89:d9:a2:9c:3b:c6:d6:0d:c0:98:85:7a:5c:c9:a6:
         90:40:b9:66:1b:ae:ef:e3:ea:75:be:63:13:27:8f:e9:05:dd:
         b0:b5:a4:55:a8:3d:d3:00:39:9e:b0:be:82:8f:87:55:93:c7:
         5b:db:66:02:cf:1b:d2:6c:5e:be:68:04:df:3d:c2:be:d0:bf:
         8c:c9:56:58:69:d0:a3:74:31:51:d2:dd:73:51:23:c1:71:65:
         2c:1d:b0:b8:7e:ad:3b:e6:ce:e0:83:ed:58:97:8c:d5:ff:a0:
         48:f8:ff:3c:17:16:5e:26:31:d7:a3:08:5c:fc:51:a6:62:5c:
         ee:a1:7d:29:d1:3e:ee:3b:f5:cc:1b:3c:f9:4b:7c:84:5e:7c:
         09:a2:86:d4:1c:c1:ed:8c:48:8a:bf:bb:5f:ef:80:2d:23:60:
         19:34:1f:52:14:a6:5d:66:49:21:0f:9e:98:4a:bb:c0:86:40:
         77:fa:13:29:3d:3c:45:64:83:4b:4e:d8:6c:42:06:86:f8:ed:
         6f:48:36:0e:df:e0:39:64:1a:8d:4a:76:25:61:6d:34:3a:a2:
         73:1e:76:c6:02:c9:0c:c0:84:c9:fe:28:02:fe:59:d9:98:b7:
         3e:2f:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:21:50 2026 by rpki-client