Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File:                     McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier:          WjoPpKv9DakRCTqisd77d+/YEPIJKOITBU+7DzoHEUE=
Subject key identifier:   4D:75:7B:86:68:E0:65:9F:E8:73:4E:EA:69:57:B5:D0:1E:D0:74:D0
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer:       /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial:       0993
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number:          0985
Signing time:             Sat 28 Feb 2026 20:21:31 +0000
Manifest this update:     Sat 28 Feb 2026 20:21:31 +0000
Manifest next update:     Sat 07 Mar 2026 20:21:31 +0000
Files and hashes:         1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: sSMObVxIvK/sFsR1O430p6oTfKvcNn/eu+CS9jT5ab0=)
                          2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: OGDR7WY+8jRV/CmpiqK1tUUAkb5JwuvFd2VhraMYCs0=)
                          3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: +ITJTnPvYoAS79cIvUIh+D7rV0iw05gZdlP9LgmbBHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
        Validity
            Not Before: Feb 28 20:21:31 2026 GMT
            Not After : Mar  7 20:21:31 2026 GMT
        Subject: CN=69a34e4b-bd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:ae:f1:d7:a9:a1:57:69:7a:cd:6a:aa:2f:
                    5e:4d:8d:46:fa:28:f2:b4:48:fb:db:85:e7:1f:68:
                    ea:25:0b:56:cd:50:f4:40:a6:98:cb:4f:16:38:c5:
                    78:1d:8a:bd:98:d8:5e:d5:dd:56:62:5f:0d:16:9e:
                    0f:f5:07:8e:3a:c5:0b:a4:0b:c6:2f:c2:88:67:a3:
                    b7:ae:e7:04:0f:ee:35:bd:59:12:2c:1c:03:88:97:
                    e1:44:92:79:e8:7d:cc:67:09:cf:f6:ba:fe:7a:b7:
                    2a:1e:51:98:3f:c5:b8:91:58:d3:fe:b1:3d:8a:1c:
                    4c:25:f6:74:b4:5c:fd:25:c2:b8:99:96:38:1e:0e:
                    35:67:00:59:54:a6:73:3f:d9:75:c0:73:e8:ce:b4:
                    fe:9b:2a:ac:85:fd:8c:ba:98:01:39:e2:a1:8d:de:
                    58:d4:7f:5a:9e:f8:3c:b0:fe:eb:1c:3a:f2:49:a5:
                    59:3a:a8:75:1c:ac:07:32:ae:27:37:99:bf:45:9b:
                    b9:58:91:d5:17:0e:37:91:00:2a:bc:d1:d1:7d:c4:
                    02:cf:68:76:08:c5:d3:e5:d2:1a:89:cf:42:f2:25:
                    09:d8:65:19:ea:fe:fc:52:67:40:8c:bb:5d:25:2c:
                    b1:f6:4f:3c:f5:0c:a8:ab:44:72:e5:77:99:5f:ea:
                    a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:75:7B:86:68:E0:65:9F:E8:73:4E:EA:69:57:B5:D0:1E:D0:74:D0
            X509v3 Authority Key Identifier:
                keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:c5:15:46:98:ab:ec:33:c5:62:02:76:d3:2c:34:4a:c5:
         17:11:dc:7a:ab:1a:23:23:1e:6b:c2:65:e4:16:c6:94:2a:3f:
         07:65:24:33:46:e8:e2:1a:88:e2:b5:c3:eb:f8:06:51:f1:9b:
         2d:88:e6:7a:6b:d5:16:ef:e9:38:fe:2e:85:89:d0:c6:64:cb:
         aa:bb:26:bc:99:73:d8:e9:f0:ae:d4:55:53:7f:e5:a8:82:d9:
         15:b7:25:fe:0c:42:12:1f:65:6f:ff:69:61:f5:27:99:26:60:
         fd:d2:cb:6a:db:03:3f:62:ab:bc:5f:20:f5:db:45:a6:f2:2a:
         e6:9b:1f:72:82:47:f6:13:f9:95:28:f7:d4:16:6b:5b:00:15:
         7c:f5:28:bb:37:c1:c6:7d:c0:ff:e1:02:37:f0:e7:c4:8c:bf:
         67:49:d7:42:0c:eb:f8:dd:9a:3b:e4:f9:0f:23:ae:cb:d1:6c:
         24:21:a3:57:75:05:82:66:f8:4e:08:3a:8d:ed:50:33:bf:93:
         77:d0:cd:54:72:b3:23:ff:3a:dd:e1:92:4e:0f:51:e2:9f:ee:
         a9:22:29:ae:98:ce:89:ae:67:33:46:54:d8:08:34:a0:4d:7d:
         ba:85:9b:4f:09:74:57:b6:71:9b:e7:57:87:ed:1e:7c:38:40:
         8a:89:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:58 2026 by rpki-client