Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File:                     np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier:          2fU3Te53cRRcupvdxWOD1S/MfWbHGJU/09J3cOAGV6w=
Subject key identifier:   0B:53:74:E7:C8:19:49:4A:3C:B4:1B:D7:3C:7D:21:E6:78:9E:0F:49
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       08C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number:          08B8
Signing time:             Mon 02 Mar 2026 01:44:14 +0000
Manifest this update:     Mon 02 Mar 2026 01:44:13 +0000
Manifest next update:     Mon 09 Mar 2026 01:44:13 +0000
Files and hashes:         1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: NghDilbecpzns3ZMV5hR8T3ZH5N+69cCFOsE9XzXowY=)
                          2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: Es9bPgKp0v64OSjryiyNquzU+E6CkZKyI4jVnPkxwNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
                          rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: Mar  2 01:44:13 2026 GMT
            Not After : Mar  9 01:44:13 2026 GMT
        Subject: CN=69a4eb6e-a0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:3a:0d:75:54:6d:5c:30:73:8b:c3:ef:a8:
                    8d:bb:92:d0:fb:61:d4:c3:64:b1:e7:ad:c5:7e:aa:
                    92:f6:64:b6:41:49:3d:58:bd:f7:cd:0d:fe:98:48:
                    3d:78:e3:0a:d6:6b:b2:75:5f:cf:ec:64:2b:8a:e0:
                    7c:92:70:b9:16:45:1d:e8:15:ef:91:d1:84:09:44:
                    44:a9:8b:7c:c1:c3:ba:8d:57:47:26:de:cb:d3:34:
                    66:ac:a2:cd:d2:10:11:d9:f0:25:6d:51:2e:d1:f1:
                    16:16:c5:31:d2:e9:56:aa:d7:2b:45:0f:aa:7d:0d:
                    fc:1c:6f:8d:f7:c6:9b:e8:19:dd:e6:06:c7:d4:cd:
                    78:f8:3f:ff:d6:4c:6d:92:96:d2:9b:15:b2:d5:50:
                    b3:0a:d3:96:78:d4:ed:35:1d:14:d5:5d:91:ef:f6:
                    0a:9a:6a:58:0b:97:5b:14:f0:57:7f:b1:ce:e1:77:
                    b4:5c:79:84:37:17:ed:cd:c5:db:99:5b:07:c7:c1:
                    90:31:a7:4d:b5:35:fd:07:da:eb:f3:d5:13:a5:8c:
                    c8:cc:06:a9:ea:aa:d1:02:28:30:0e:55:54:fe:94:
                    c6:08:c1:b2:b3:ef:32:26:cc:0a:b5:bb:ba:9f:98:
                    11:ce:34:03:c2:e9:ec:56:27:b8:1e:a2:9a:31:37:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:74:E7:C8:19:49:4A:3C:B4:1B:D7:3C:7D:21:E6:78:9E:0F:49
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9c:4c:cb:4d:12:96:60:c5:93:92:51:06:bd:af:22:8f:00:
         c3:ca:5b:29:26:3c:61:c2:ac:42:bc:90:a7:03:33:fa:0d:c6:
         0e:a4:bd:c8:ce:88:b8:92:90:89:ba:e9:f8:48:86:e8:05:86:
         e1:d8:64:b5:cd:1a:5f:d3:bd:79:2b:6c:b5:ce:33:0a:e5:4a:
         16:85:c6:20:2e:31:cc:c4:42:2f:e4:49:f7:4a:1a:ad:d0:4f:
         d7:e0:59:cc:cb:f9:ab:f5:d0:a7:d9:9e:e2:81:66:ea:04:33:
         b4:5d:f1:65:47:ba:9c:55:0f:66:1e:2a:d2:4e:51:06:55:8a:
         e1:ab:a9:d8:73:7f:7a:83:54:f2:c3:95:0a:84:cf:eb:c8:07:
         f9:03:37:1e:3d:0d:88:cc:a1:63:b1:17:76:db:c7:2a:f2:3d:
         06:2b:2c:a0:1e:53:e4:af:aa:75:3e:e8:76:2b:53:ca:c1:e9:
         e5:a1:97:38:8a:d8:d0:c1:b3:77:a5:6e:57:c5:dd:bb:03:f1:
         ec:3b:a4:fb:a4:60:58:8b:f4:b5:53:c1:14:90:a9:e5:1b:82:
         4a:fe:ab:04:0c:ba:fd:f1:f0:9f:8e:ad:15:35:3b:0f:82:33:
         cb:0c:36:f1:97:1c:cc:dc:a1:ce:fc:54:99:92:92:15:ec:e6:
         a5:72:1b:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2
NjI3NjFFNEIwHhcNMjYwMzAyMDE0NDEzWhcNMjYwMzA5MDE0NDEzWjAYMRYwFAYD
VQQDEw02OWE0ZWI2ZS1hMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsm46DXVUbVwwc4vD76iNu5LQ+2HUw2Sx563FfqqS9mS2QUk9WL33zQ3+mEg9
eOMK1muydV/P7GQriuB8knC5FkUd6BXvkdGECUREqYt8wcO6jVdHJt7L0zRmrKLN
0hAR2fAlbVEu0fEWFsUx0ulWqtcrRQ+qfQ38HG+N98ab6Bnd5gbH1M14+D//1kxt
kpbSmxWy1VCzCtOWeNTtNR0U1V2R7/YKmmpYC5dbFPBXf7HO4Xe0XHmENxftzcXb
mVsHx8GQMadNtTX9B9rr89UTpYzIzAap6qrRAigwDlVU/pTGCMGys+8yJswKtbu6
n5gRzjQDwunsVie4HqKaMTdXWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAtTdOfI
GUlKPLQb1zx9IeZ4ng9JMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0
RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0U2NS81RUQwNTUzMkQ0RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2Yy
YTFqMmF5SktidlZtSjJIa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE5xMy00SlmDFk5JRBr2vIo8Aw8pbKSY8YcKsQryQpwMz+g3GDqS9yM6IuJKQ
ibrp+EiG6AWG4dhktc0aX9O9eStstc4zCuVKFoXGIC4xzMRCL+RJ90oardBP1+BZ
zMv5q/XQp9me4oFm6gQztF3xZUe6nFUPZh4q0k5RBlWK4aup2HN/eoNU8sOVCoTP
68gH+QM3Hj0NiMyhY7EXdtvHKvI9BissoB5T5K+qdT7oditTysHp5aGXOIrY0MGz
d6VuV8XduwPx7Duk+6RgWIv0tVPBFJCp5RuCSv6rBAy6/fHwn46tFTU7D4Izyww2
8ZcczNyhzvxUmZKSFezmpXIbTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:18 2026 by rpki-client