Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File:                     J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier:          uCxyByyHMjzEpm6bcDaeayGcxnMF6ca6VyhYKgVvn74=
Subject key identifier:   71:BC:90:0D:E5:E4:FD:3C:66:B3:AB:64:D8:52:DE:B1:6F:2E:99:9A
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer:       /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial:       0CC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number:          0CB6
Signing time:             Sat 28 Feb 2026 18:36:15 +0000
Manifest this update:     Sat 28 Feb 2026 18:36:14 +0000
Manifest next update:     Sat 07 Mar 2026 18:36:14 +0000
Files and hashes:         1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: N1PO/0s+7l9XBFe24KuA4vdg90mAGwVkRDyl+rCUqh4=)
                          2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
                          rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3270 (0xcc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
        Validity
            Not Before: Feb 28 18:36:14 2026 GMT
            Not After : Mar  7 18:36:14 2026 GMT
        Subject: CN=69a3359f-d492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:b6:fd:0e:1c:3a:2c:82:47:86:1d:1c:86:
                    89:2f:99:86:9a:30:c6:77:66:79:7b:22:5e:2b:4f:
                    fa:28:ae:18:19:1e:c0:71:3b:6c:84:50:31:62:53:
                    de:fe:f4:b2:dd:5c:11:85:e2:a3:50:cd:9a:d7:fe:
                    6d:c1:66:d6:b2:09:42:b0:74:e6:bc:a9:75:dd:25:
                    70:2c:65:4a:3b:94:24:59:87:7a:fa:fb:dc:d1:51:
                    f8:64:88:8e:92:fe:06:31:d6:ec:3e:56:24:8b:e1:
                    09:af:24:c3:d2:c1:c1:7e:2c:c6:c9:a8:cb:28:50:
                    9d:6f:f8:0d:d0:3d:a3:55:b9:37:ff:25:2c:2d:47:
                    45:cc:cb:94:af:d7:ca:cd:0e:95:ab:5a:de:79:ee:
                    dc:d9:4a:1d:db:8a:01:1c:39:ce:13:48:4d:54:c7:
                    5f:4e:aa:ab:39:a9:e7:c0:ee:d1:24:7f:9f:4c:e0:
                    1f:07:d8:92:29:8f:0d:89:d6:a8:7d:c2:d8:df:d2:
                    d6:b4:cd:a6:dc:24:61:8d:d5:ef:3c:9b:43:2a:37:
                    e6:17:70:c8:4a:97:f6:10:93:88:4e:44:ed:81:3e:
                    3f:f4:02:cb:3f:ba:a2:a2:7b:94:fc:3f:e3:91:b7:
                    17:51:98:80:85:d4:29:5f:05:0b:ad:ea:de:d5:57:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BC:90:0D:E5:E4:FD:3C:66:B3:AB:64:D8:52:DE:B1:6F:2E:99:9A
            X509v3 Authority Key Identifier:
                keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:68:ac:c0:4f:cb:96:9f:f2:69:7d:ec:43:97:33:81:ef:6c:
         4c:03:e1:14:89:38:56:24:a1:1f:79:82:01:94:34:c3:73:96:
         2f:4e:c7:28:29:8b:42:09:bc:4d:21:1d:09:2e:cb:07:33:4a:
         2b:75:56:df:52:1c:fb:5f:1e:fe:e6:76:af:5d:42:07:ff:0f:
         8b:14:df:db:f4:2f:05:e5:7e:ef:15:5c:0d:ef:0a:a6:61:7e:
         33:f4:34:f9:48:48:9c:32:89:e0:68:a5:82:6b:46:c2:a1:b6:
         07:93:07:ed:0a:2a:ec:0d:8c:e4:c0:79:78:37:94:1c:5b:1b:
         67:0f:85:66:a6:2e:c8:5d:44:8a:db:7c:11:84:99:9b:61:68:
         1f:46:a6:80:6f:39:16:76:cb:be:07:f1:e1:a4:bf:98:e9:b8:
         e0:0b:7a:a6:6f:97:18:71:11:2e:9a:2f:89:02:cb:95:cc:17:
         b7:7c:bf:4b:23:60:dc:23:15:b8:c9:99:b6:f3:a4:45:99:06:
         cc:aa:a6:1a:66:b7:3f:33:1f:e2:d9:d3:d3:80:73:7c:84:f5:
         38:ee:b1:07:ee:2d:a2:fb:68:b6:70:1e:f5:8e:c9:cf:ce:d4:
         39:b4:73:d0:aa:89:d2:d7:35:54:ec:5b:32:9d:df:0c:3e:eb:
         5b:35:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:23 2026 by rpki-client