Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
File:                     I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json)
Hash identifier:          Ayr5xgT8o9RqZtjZwiSxwlnqvaLy5UotblbaKK/5Two=
Subject key identifier:   1E:3A:09:A6:EF:90:0A:7F:4E:36:4C:24:3F:BC:E4:FA:47:0F:0B:85
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Certificate issuer:       /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
Manifest number:          06C3
Signing time:             Mon 02 Mar 2026 01:39:44 +0000
Manifest this update:     Mon 02 Mar 2026 01:39:42 +0000
Manifest next update:     Mon 09 Mar 2026 01:39:42 +0000
Files and hashes:         1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: RWYxbtaWk4G8RiZ5UNdpjSObSy3rxBbcl78/GWiJxYg=)
                          2: E1201A0422D611EFAE700044C4F9AE02.roa (hash: vKRLCMHI6DzeezZqcA22y1WOCwRUjFKs9GH1QdWcjCQ=)
                          3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: pf1K+6UJXd5dAs7JKyICOO/jFMb69psfiJsvXQNbxBs=)
                          4: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: iiiauVlcS/qlYnD0UVeEkPiESSpS7cLvUj/CtgxabWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
                          rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
        Validity
            Not Before: Mar  2 01:39:42 2026 GMT
            Not After : Mar  9 01:39:42 2026 GMT
        Subject: CN=69a4ea5f-095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:7b:09:1e:8a:fc:22:c5:a8:b4:2c:31:50:
                    c7:91:05:21:4a:9d:db:55:24:af:f4:85:b8:97:86:
                    68:ac:53:73:01:9a:17:67:71:7a:a9:9a:c3:53:70:
                    5b:40:ea:02:fd:0d:99:d0:be:58:ed:6d:c3:9d:f1:
                    d5:3c:eb:1a:09:e7:85:02:2f:d4:53:45:1e:f7:f6:
                    17:e7:82:3c:31:69:77:f5:33:32:a0:3b:6c:7e:d0:
                    77:a9:d9:1b:03:9b:1a:61:55:79:9c:ff:a8:00:f7:
                    ab:88:9e:d6:d5:2a:eb:8b:c9:96:51:9d:54:b5:2f:
                    ac:1a:24:04:e7:c8:5a:4f:b5:20:7c:20:21:d4:ad:
                    77:0e:63:02:8e:48:92:57:a1:f9:0c:92:1a:07:af:
                    b4:a1:a5:8a:fc:6d:b1:74:4d:dc:be:62:a0:52:85:
                    fa:0f:a4:4b:cf:93:a2:35:de:05:6e:ae:4e:92:a0:
                    47:b4:53:10:3c:32:2d:47:ba:2a:42:ee:06:7a:9b:
                    4f:37:a4:8e:4b:5d:e2:f3:77:4e:18:80:16:7d:95:
                    0d:dc:f9:93:c9:70:0c:be:4b:9a:fe:04:5e:ad:97:
                    79:e9:dc:19:31:01:bb:20:1e:75:9c:ae:3a:9d:66:
                    fd:bb:52:4d:41:52:0b:2b:06:3a:3a:16:0f:15:b5:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:09:A6:EF:90:0A:7F:4E:36:4C:24:3F:BC:E4:FA:47:0F:0B:85
            X509v3 Authority Key Identifier:
                keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b8:48:57:01:c9:9e:e3:a4:ac:77:97:a7:27:a9:0f:05:ae:
         d4:91:bd:b6:b6:3f:e8:e5:20:6f:77:6f:64:ff:42:5f:c2:bf:
         8f:1e:24:4a:3d:a2:dd:65:71:f5:8d:ed:a6:21:cd:06:b0:c5:
         be:0c:ed:50:53:c7:36:90:b3:0a:00:98:55:e1:d0:ba:af:18:
         ee:28:96:bb:d0:96:6c:b6:00:57:15:1d:9b:22:ad:a2:c9:d8:
         48:e1:b5:86:26:66:ba:30:3d:94:14:dc:ce:2f:58:a2:38:0c:
         16:8a:71:b4:d8:b6:fd:0a:6f:21:5e:90:2f:25:6f:dc:fc:2b:
         a2:b3:f4:cd:f7:25:92:bc:71:df:f7:ab:25:74:28:5c:dd:38:
         67:31:f9:b4:51:a9:f8:c8:d0:1e:5d:d8:d6:ff:22:6e:c3:54:
         76:eb:74:07:3a:78:19:58:b8:9c:95:fd:57:f2:22:26:81:a6:
         6e:e2:0d:00:7e:a0:1e:3e:f5:5c:36:57:25:3e:0b:a0:ba:5d:
         b5:02:52:1c:c1:92:f0:29:d7:7a:06:34:64:c5:3f:de:7b:fd:
         e2:3a:a9:9e:8b:61:38:03:e5:14:4e:3e:e0:e2:0f:c4:90:27:
         1f:d5:19:29:c0:6f:f5:1e:47:e7:6c:d2:b4:d4:36:3f:3e:56:
         b0:98:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:34 2026 by rpki-client