Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File:                     F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier:          TfsWxUODCJ/kLd2KeVyjBc8jCt/PA5Ik49g3QpFTRlE=
Subject key identifier:   C4:FA:06:DE:23:7E:48:B4:D2:07:80:03:00:8D:AC:D7:D9:35:08:5F
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer:       /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number:          0144
Signing time:             Sun 01 Mar 2026 06:14:05 +0000
Manifest this update:     Sun 01 Mar 2026 06:14:04 +0000
Manifest next update:     Sun 08 Mar 2026 06:14:04 +0000
Files and hashes:         1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: rm5el9HAVcLKgzF0BMD5NQn16a4JcDBzYyOBT1lZnL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
        Validity
            Not Before: Mar  1 06:14:04 2026 GMT
            Not After : Mar  8 06:14:04 2026 GMT
        Subject: CN=69a3d92d-e1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:9e:cc:be:2d:0e:0e:d0:13:c6:fc:fe:1a:
                    60:06:06:43:f4:b4:9d:88:62:fb:fb:c6:e9:a5:da:
                    35:43:5d:dd:44:7a:e7:01:3f:7b:2f:7b:0d:ca:50:
                    12:50:1e:97:86:61:d1:81:1f:5b:91:96:ce:41:1b:
                    ee:a9:91:58:83:45:c4:68:20:39:76:03:80:4f:9e:
                    4d:20:34:b9:61:c3:3d:95:c6:50:6b:ff:29:ba:1d:
                    b5:4f:ca:fa:9b:3e:b2:e2:4f:d2:60:9a:db:6e:2c:
                    d1:3c:16:01:a5:5d:97:16:29:cc:2b:bb:46:3a:eb:
                    8a:02:8b:ed:74:01:93:d7:e5:f8:d8:5d:56:a3:b2:
                    8c:e2:2f:be:b9:a1:75:59:e1:69:2a:b5:c7:fb:58:
                    2f:c4:79:9b:5a:97:31:d5:58:08:7e:e5:8e:63:71:
                    09:4f:25:4d:4e:0e:f3:bd:c6:71:1d:f8:5c:7c:28:
                    39:30:48:6d:07:bf:27:11:bd:98:e0:62:de:67:1d:
                    d0:ca:b3:04:c1:1c:b7:87:a3:b4:63:af:0a:62:38:
                    d3:84:f6:1a:77:7c:3b:71:88:81:e1:30:03:fd:9a:
                    11:dd:64:46:bb:d1:e7:46:47:b2:a5:2b:d2:9e:48:
                    9c:ea:6f:6d:7d:e0:f3:80:85:d6:ff:3b:9c:73:3c:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FA:06:DE:23:7E:48:B4:D2:07:80:03:00:8D:AC:D7:D9:35:08:5F
            X509v3 Authority Key Identifier:
                keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:46:6d:85:9c:7d:a8:b1:d7:3a:5b:9e:e3:a3:6e:15:5b:
         e4:be:60:a1:1a:d2:b3:81:1c:0b:e0:2d:86:73:e6:2b:f7:bd:
         c0:e9:93:59:6c:66:f3:76:d2:76:98:73:14:b5:08:bc:f5:aa:
         fc:45:6e:57:5d:c6:de:12:40:24:b7:dc:2a:58:04:31:26:ad:
         bf:e7:40:46:13:72:7a:b3:3a:c9:a2:7a:e5:b3:0c:9a:c7:28:
         be:81:8a:fe:19:99:ba:8e:a1:bf:55:6e:e9:6d:96:88:ac:8f:
         d8:89:d5:26:99:c7:74:b7:39:7e:fb:b1:fa:e9:0f:32:50:6e:
         df:39:db:ae:9e:11:e0:3c:f9:59:80:ef:cb:06:62:d0:51:26:
         7e:ba:b5:f1:89:3a:e5:76:17:01:0f:a9:02:06:65:b9:21:f6:
         a1:b6:91:d1:3b:30:49:41:af:0d:85:cc:f4:f4:fd:d9:f5:7d:
         b9:d2:75:c1:5d:8c:95:65:80:b7:d4:00:89:9e:df:fc:84:f9:
         a3:5d:b9:06:a1:dc:19:85:f0:ce:8a:31:b3:54:2a:c1:ec:91:
         0a:3d:dd:46:c9:0a:71:ad:ff:c6:a9:06:6f:b2:c0:43:b7:0d:
         f8:31:b9:ea:bc:1e:ef:05:25:3e:b9:27:ef:e4:f5:f0:85:9e:
         80:27:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:45 2026 by rpki-client