Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File:                     -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier:          yqWqB/R1UqfB+mrGdAuzxu7Afjwstk27X6+NiLKanFo=
Subject key identifier:   9B:13:DC:FC:FC:C6:0C:48:5B:47:3A:70:E6:4C:33:53:AD:31:D2:09
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer:       /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial:       0483
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number:          047A
Signing time:             Mon 02 Mar 2026 00:13:42 +0000
Manifest this update:     Mon 02 Mar 2026 00:13:40 +0000
Manifest next update:     Mon 09 Mar 2026 00:13:40 +0000
Files and hashes:         1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: qaZRo7F5lUHK6Ki/n/vymCH0oMrgniEn4KhEjUgO8Bs=)
                          2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: UCw8IlTolwoFfHXyND4VY6hFecknF4VyaEcHisx4OJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
                          rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B38, serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
        Validity
            Not Before: Mar  2 00:13:40 2026 GMT
            Not After : Mar  9 00:13:40 2026 GMT
        Subject: CN=69a4d635-1295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:04:2e:71:ab:c4:d3:65:78:b6:cc:86:cd:
                    9f:ad:05:c2:e5:fd:bf:9c:4d:66:c2:08:fa:a0:72:
                    78:8c:d4:a8:34:a8:99:39:7c:21:24:33:08:87:57:
                    21:b0:b4:0f:a5:b9:58:51:84:0e:70:bc:5c:af:d7:
                    85:76:7d:78:50:f4:4c:ef:5a:de:bb:e2:f9:ac:a0:
                    a8:6e:d1:70:79:e8:85:83:71:32:57:ed:e0:ad:80:
                    fb:73:31:cf:a5:15:af:2c:e4:41:f1:1d:81:2b:da:
                    ff:99:34:12:0b:34:47:32:ce:6c:50:fd:c6:09:4a:
                    f9:8e:56:df:73:43:e4:d1:14:b1:f7:15:67:a1:00:
                    ba:db:14:b3:9b:7e:1b:6e:4f:b2:46:8d:c5:5d:7c:
                    54:6f:d7:5a:6d:c7:91:d8:a8:d2:ac:83:6d:99:61:
                    ca:ed:05:70:87:8a:a3:d8:a7:09:cd:85:0e:02:a4:
                    cf:9c:99:57:c6:64:a6:3e:c4:24:5f:56:cf:47:ab:
                    22:1a:d8:d9:e3:00:8a:9d:53:63:56:87:12:7d:6f:
                    b7:7e:27:73:9b:d9:f2:bb:57:42:0b:1b:e1:f2:61:
                    61:5e:f8:95:b2:28:76:53:1a:2e:ae:a0:ef:7d:09:
                    27:e6:c9:f2:78:d6:40:6d:12:c3:1c:96:7a:85:38:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:13:DC:FC:FC:C6:0C:48:5B:47:3A:70:E6:4C:33:53:AD:31:D2:09
            X509v3 Authority Key Identifier:
                keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:f8:27:87:21:c8:bf:bf:84:2d:b3:38:63:19:81:53:6d:
         fc:07:2a:e6:d9:48:74:c8:00:d8:e2:98:ce:c8:b7:36:e9:c3:
         4f:c3:07:30:c9:df:78:bd:a7:91:f1:17:19:8f:fd:8d:17:8a:
         48:30:8f:50:a2:92:be:49:86:25:84:14:fc:7e:a9:05:d7:27:
         49:8f:80:62:2b:9f:82:e1:0a:e2:7b:61:db:7d:64:0e:98:0e:
         de:e3:00:17:e9:0d:bf:d9:52:03:14:6f:98:e3:1c:de:05:65:
         90:ee:19:0b:7c:64:8c:15:2a:0c:75:21:b7:6b:98:48:0f:d0:
         98:aa:67:ad:90:54:21:9e:94:9c:18:d2:bb:35:ab:fc:f8:b1:
         46:59:c9:8a:a1:aa:ae:2b:3b:a3:3e:7d:df:20:6f:d1:85:c8:
         55:ee:49:79:fb:08:dd:4a:4e:e0:b9:d8:73:da:1f:75:68:eb:
         7e:22:ef:70:e3:57:a5:2d:cf:b8:31:ad:36:2a:d1:fe:02:b7:
         ad:88:39:6a:9d:f6:43:cd:89:a9:c9:33:a8:59:ff:92:cd:64:
         96:87:ec:33:08:5f:14:9f:ce:1b:ca:11:94:de:a6:4b:f7:5c:
         c3:d7:6b:5f:ee:32:74:56:d1:38:d5:24:8a:79:f4:f6:d6:cd:
         90:1e:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:05 2026 by rpki-client