Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File:                     4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier:          h6XNOBeaOjRpPszn4OjEGPjHCUOi+DpiuFj9o7Yjxp8=
Subject key identifier:   A8:83:6F:A7:46:FD:2B:A1:21:7B:33:EF:5C:F4:4E:A5:AD:70:73:04
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number:          0260
Signing time:             Sun 01 Mar 2026 02:50:21 +0000
Manifest this update:     Sun 01 Mar 2026 02:50:21 +0000
Manifest next update:     Sun 08 Mar 2026 02:50:21 +0000
Files and hashes:         1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: xmE9m2etCm4jRsfcUK5SRIc0/NIRbbd+JL437HIeSGI=)
                          2: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: H4ZiNqnOQ9SeXj19JFNgIsK4CCAguZ6MrEtJQSUxrHY=)
                          3: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: qDV9QCi5HkxixaBFK8kj0xBTXurODiSoIKzsQFF1+SQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Mar  1 02:50:21 2026 GMT
            Not After : Mar  8 02:50:21 2026 GMT
        Subject: CN=69a3a96d-366e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:4c:02:f2:fb:89:20:c5:eb:dd:c4:74:fb:
                    6e:63:af:48:cc:3f:d5:04:40:a1:c0:a7:8c:9a:4f:
                    f8:d1:47:89:a5:f7:c3:95:28:3d:3d:ab:94:88:f5:
                    22:1b:fa:6f:1e:1c:8b:fe:63:a0:e4:75:7f:b0:1b:
                    46:63:08:81:6c:72:fd:6b:7c:10:2f:85:e2:67:fa:
                    f1:90:51:eb:55:3d:46:b0:40:03:08:3e:9d:9d:ab:
                    20:c5:e2:38:78:17:44:c1:7f:0c:d3:9e:32:e6:c8:
                    6d:e9:5b:0c:cc:c1:43:9b:6d:bc:4d:cf:35:e6:cc:
                    59:7b:1f:6e:a8:d6:15:3c:1a:a6:ae:f0:33:57:ce:
                    40:39:4c:25:b6:4b:8e:40:8b:9e:1c:75:a2:f1:47:
                    43:71:c7:ca:02:10:d2:c4:ea:b8:d7:40:83:6f:5b:
                    68:8f:ea:b7:67:33:ef:d5:85:cd:8c:d8:21:a0:5f:
                    bc:cc:fc:9f:01:b2:0d:dc:9e:e7:b2:ff:14:53:e9:
                    e9:a5:dd:2e:33:56:07:29:47:a4:ab:50:07:e3:d3:
                    20:35:11:29:ba:a4:da:a8:22:df:82:f6:a0:47:1d:
                    37:1a:f7:d8:c8:21:5f:45:84:52:b7:aa:09:8e:bc:
                    91:48:4b:77:56:ad:b4:ca:af:94:5d:51:02:88:f9:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:83:6F:A7:46:FD:2B:A1:21:7B:33:EF:5C:F4:4E:A5:AD:70:73:04
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:6e:96:23:46:b0:ed:fd:48:c1:7e:ab:c0:84:c7:9a:6c:
         10:09:55:14:bf:68:c5:38:75:69:1c:96:4f:28:0e:55:f1:b2:
         4c:7b:a4:25:d0:0b:cf:0c:65:57:c4:85:cb:f3:45:31:13:bf:
         b6:19:78:2b:2e:36:03:92:0f:5a:c7:43:95:de:80:13:ae:f1:
         61:9b:92:6f:4c:9e:7e:47:19:f9:d9:7c:c0:0e:92:3f:ad:a9:
         72:dc:b6:ea:18:4e:7b:30:1e:80:07:89:18:48:fc:3d:19:44:
         10:bc:db:28:5e:c2:87:43:31:cb:f0:8b:3b:03:02:2a:b7:41:
         8c:44:34:bd:05:ed:e1:e0:39:16:ed:6b:80:ed:eb:b7:00:1e:
         aa:a7:21:ae:8e:36:82:64:7e:f5:53:2e:a6:ff:6b:b7:e9:78:
         54:c6:3c:bd:92:54:bb:83:55:bd:de:bb:7e:42:12:d5:e3:40:
         3c:4d:3b:88:30:a7:47:7e:1c:e7:dc:18:0a:c9:60:a6:06:ed:
         82:e4:fb:e4:15:94:dc:a0:a0:ab:1b:f0:04:c5:ed:8f:ca:80:
         24:a8:d6:14:e3:76:45:04:35:5b:d2:2a:46:0d:26:84:bf:39:
         d1:a3:ec:55:12:64:55:65:b3:f0:18:df:93:b7:8a:40:3d:10:
         af:1e:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:20 2026 by rpki-client