Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File:                     mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier:          cJtcU+MxVLdy/NmVpKb64LxfG72dcYUKK0cCiX8iEHo=
Subject key identifier:   43:42:F0:E5:B8:96:88:56:80:9A:5D:BA:7D:37:49:9C:AE:5D:F9:F3
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number:          0243
Signing time:             Mon 02 Mar 2026 03:09:11 +0000
Manifest this update:     Mon 02 Mar 2026 03:09:10 +0000
Manifest next update:     Mon 09 Mar 2026 03:09:10 +0000
Files and hashes:         1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: Ix+XQqYxGgePCh5iHR7S+2oqM7c5Vi0F+snqyUk1cAs=)
                          2: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: WJ2lYDlF034OhzHlcqaIohBGtXuBKh0QtyazKPqZd64=)
                          3: B24758AE772311EFA5510A63C4F9AE02.roa (hash: PCIW0fEME2KOfnq/TRE2cq6zzHOhVe+Ww8ZwI33T/9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Mar  2 03:09:10 2026 GMT
            Not After : Mar  9 03:09:10 2026 GMT
        Subject: CN=69a4ff57-38fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:43:db:71:43:c0:39:d4:12:91:aa:12:18:
                    92:60:86:b4:8e:5b:40:d4:39:1e:48:9c:aa:d3:80:
                    b3:87:d8:da:b9:f5:89:de:5f:4f:2b:d3:79:db:72:
                    f1:02:5e:89:ad:f6:0a:d7:d6:11:8a:a8:06:94:2b:
                    02:95:cc:e1:7b:7c:ed:50:d6:dc:3b:e9:a4:11:36:
                    c5:e6:eb:fc:68:38:69:a2:20:b8:75:61:ef:f2:42:
                    64:25:24:d2:29:bb:f8:cd:a4:3d:7e:04:29:2e:ea:
                    32:5e:73:c0:75:07:91:c6:35:a5:3d:46:5a:2f:19:
                    71:f0:01:21:b9:53:5e:50:8f:28:ac:00:88:ae:97:
                    c8:de:f3:f1:3f:c1:8a:76:04:e4:fd:b5:09:23:50:
                    eb:38:41:04:c6:11:2e:2f:26:b3:ec:4f:a7:f0:a4:
                    af:f6:ed:c8:8f:3b:92:6b:ca:77:88:f2:da:22:08:
                    00:c0:4e:83:cb:cd:d2:eb:32:47:f7:bf:42:37:8d:
                    50:c8:48:a6:5f:99:52:dd:a7:77:c7:af:cb:72:b1:
                    fa:f9:f1:4d:a8:c6:bd:4f:ca:28:bb:4f:20:77:66:
                    fc:69:0b:6f:9b:fe:ca:c4:b1:7e:ad:a8:b9:06:12:
                    ab:87:82:a4:d4:ed:41:07:87:5e:a3:4d:c1:a6:08:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:42:F0:E5:B8:96:88:56:80:9A:5D:BA:7D:37:49:9C:AE:5D:F9:F3
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:52:1d:e3:d6:43:79:f8:64:b8:a4:05:1d:b1:21:94:25:f9:
         e1:c4:33:f1:68:b6:eb:77:e3:af:b8:d0:c4:4b:8c:d9:ea:27:
         a2:0e:89:13:48:d5:ae:f8:f6:a1:6f:7b:42:41:f2:f8:11:a6:
         0d:7f:b5:bf:0b:27:a4:3a:5a:af:92:93:b5:b1:84:27:6a:aa:
         1d:b8:67:c2:1d:7b:13:12:68:0a:49:db:db:24:3c:94:3e:79:
         03:45:c6:0d:5c:96:24:02:36:cc:36:41:6b:56:f3:f2:3e:cb:
         12:e8:68:6f:76:a2:a7:49:a1:c8:c2:cf:55:0c:3b:2c:f7:06:
         e1:5c:5a:64:16:dd:38:e6:00:78:7a:5f:a8:59:92:fb:66:33:
         3d:93:74:29:11:7e:82:45:63:eb:6b:4e:bc:d8:4d:3e:94:91:
         cc:20:70:c1:52:75:ae:c4:c2:8e:fb:ee:ec:d1:f0:ec:92:06:
         c7:a7:4a:73:70:81:c9:83:71:3a:c3:41:80:9d:eb:63:55:5b:
         88:85:d0:3c:fb:80:0f:ed:f2:4b:fa:f0:47:d0:c4:89:04:16:
         0d:f2:cd:8e:4a:34:d3:d8:20:3c:46:91:95:f9:01:b8:bc:c9:
         4b:86:2d:6a:04:a2:64:73:ab:8d:c3:5d:43:b4:93:e6:89:17:
         c2:56:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:44 2026 by rpki-client