Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File:                     x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier:          ozNROjHTyCjqKEzzfPNs/xNyF2gufjur4YOzFJuzSFE=
Subject key identifier:   15:6F:56:32:BF:C3:E2:55:85:77:18:A0:9E:02:84:3C:A1:BB:6E:35
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer:       /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number:          01FA
Signing time:             Mon 02 Mar 2026 01:16:19 +0000
Manifest this update:     Mon 02 Mar 2026 01:16:18 +0000
Manifest next update:     Mon 09 Mar 2026 01:16:18 +0000
Files and hashes:         1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: 39g0YxO+qRTiX9616oPHyXKlvtW+U8NgriY53fMaAvg=)
                          2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: shoLPgC/NpsBS7wBYyvhBSwKP6LoO6Nubl4gi/Om0Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
                          rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
        Validity
            Not Before: Mar  2 01:16:18 2026 GMT
            Not After : Mar  9 01:16:18 2026 GMT
        Subject: CN=69a4e4e3-8cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:2d:9e:a7:3f:92:d9:91:2d:33:ff:c6:56:
                    b6:d6:c8:cf:bf:7e:a3:32:98:00:dc:62:fe:ad:bb:
                    80:85:40:1f:56:5b:b1:b7:41:82:8b:8a:45:ba:a0:
                    ba:67:b7:0a:8c:db:95:f4:6a:22:d9:b4:aa:b1:ab:
                    7a:0f:de:8e:ec:4c:0e:98:b0:5f:f8:76:5d:f7:8d:
                    0f:4a:19:07:c5:2b:27:06:ca:51:66:a3:95:8d:5a:
                    ed:a6:d8:1f:8d:6b:45:96:b0:0c:f4:5e:cc:3d:cc:
                    e8:2c:29:d4:0a:60:96:6d:1f:0d:69:57:27:50:86:
                    a5:d5:49:f0:d8:4e:7c:77:83:e9:d6:0e:ac:dd:55:
                    5e:44:a4:70:d7:0c:d3:68:29:da:2f:3a:6a:f0:e2:
                    53:2a:e5:87:09:e4:4d:a0:66:40:6b:71:a4:55:3b:
                    1c:00:85:cd:02:11:6d:5b:4e:01:e4:1e:f7:5d:c0:
                    89:5a:bb:83:af:50:9c:84:f4:6a:39:00:54:a8:c1:
                    68:7e:e3:bf:1f:d3:83:32:6c:6d:f8:80:7b:9b:72:
                    c7:26:a7:7b:cb:75:e3:3d:87:ab:2a:7b:34:2d:a9:
                    bc:1b:0b:87:37:02:50:3c:4e:2e:9d:a6:f5:f5:16:
                    b0:ab:f8:41:ef:d8:bb:44:11:01:0a:14:67:de:00:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:56:32:BF:C3:E2:55:85:77:18:A0:9E:02:84:3C:A1:BB:6E:35
            X509v3 Authority Key Identifier:
                keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b3:f5:64:a3:e9:f0:68:84:ae:13:93:56:5e:ca:e3:55:f6:
         8c:b3:4d:50:c8:27:0f:9c:1b:57:11:8a:c5:96:1c:7c:1d:e0:
         7f:18:b6:81:09:00:f6:73:40:8e:1b:3d:61:24:88:e1:35:37:
         85:80:22:70:97:ef:f2:86:26:5e:ae:c2:e0:1d:f6:61:8c:3a:
         e7:e4:98:ca:c6:1d:a5:2e:64:67:94:7e:29:93:50:be:f3:98:
         af:93:04:79:e9:a1:38:6f:eb:ba:ab:bf:1a:b8:16:67:3e:d7:
         a7:91:b3:53:04:ba:7b:18:e5:5c:05:f5:1a:a2:26:23:39:7f:
         28:a1:31:78:31:f7:a7:3e:64:e1:8e:07:23:99:51:06:e8:21:
         10:0c:ee:1d:60:11:0d:2c:ac:c9:3c:eb:95:db:ee:52:94:37:
         b8:be:43:ab:59:74:30:95:e8:e4:1a:f3:48:a1:4b:73:88:cd:
         9d:82:27:e0:18:83:9c:63:65:69:8c:75:2e:54:09:e3:66:88:
         3d:66:6d:11:fd:0d:67:2d:da:55:0c:dc:d0:6a:cd:23:0c:66:
         21:a2:40:12:2f:53:0e:60:94:8a:78:48:63:91:e8:19:f1:49:
         3c:97:dc:75:98:75:51:c0:c8:be:b5:50:ca:4d:b0:23:a9:32:
         1c:39:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:04 2026 by rpki-client