Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File:                     84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier:          i8q3dk6YApMX4IcdY8kN9hGy9mS+aDujVss5v3ZkFHw=
Subject key identifier:   D8:0C:15:0D:BC:CF:49:9E:03:52:6E:46:41:D8:6E:6E:2A:00:E9:98
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer:       /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial:       04E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number:          04DA
Signing time:             Mon 02 Mar 2026 03:13:25 +0000
Manifest this update:     Mon 02 Mar 2026 03:13:23 +0000
Manifest next update:     Mon 09 Mar 2026 03:13:23 +0000
Files and hashes:         1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: pLjuclinu17WWk2djdoz7uACZDJ5X6F+xT1E4dXD2Ag=)
                          2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 9TiMPZCiPjXqHR9KYA2Vwop1NQpu2NZ+fmkYgv1k0eQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
                          rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Validity
            Not Before: Mar  2 03:13:23 2026 GMT
            Not After : Mar  9 03:13:23 2026 GMT
        Subject: CN=69a50055-6ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:22:9a:d1:3e:e9:48:a9:d9:72:5e:75:d1:
                    ec:f8:96:fb:de:d9:f8:95:17:ec:f0:0d:cb:2e:5b:
                    33:4e:08:4f:59:bf:ec:0a:96:d0:33:3c:45:da:26:
                    af:41:0c:7d:c4:4e:93:f9:55:56:74:02:35:96:6f:
                    d2:25:ac:30:ba:8a:53:58:b2:3d:e2:84:dc:61:4d:
                    33:ca:19:00:ec:46:c4:09:55:f5:36:76:68:37:99:
                    50:d2:d2:67:21:9f:75:99:9a:e0:a1:d0:44:f9:d5:
                    b9:cd:8a:2a:3a:04:df:18:93:71:f7:e7:55:1d:8c:
                    5e:cd:b0:24:de:84:01:03:3c:f1:8b:46:a1:c6:07:
                    15:d5:f5:92:4b:3d:57:1a:18:7e:76:22:b8:f4:b7:
                    62:0a:fb:87:50:f4:0f:46:bb:ba:d4:cf:fe:d8:f2:
                    96:e7:f8:27:51:93:0c:9c:e7:06:51:d7:31:21:ba:
                    ea:f5:24:7e:79:66:2a:1a:dc:55:91:60:1d:bb:48:
                    47:ea:60:ee:2b:d2:9e:f6:9a:9c:dc:9f:9b:3b:a5:
                    1b:2f:5e:25:ce:be:f8:d6:61:dd:d6:cd:7b:17:fd:
                    21:0e:12:8f:43:bd:66:ca:d9:c6:3d:b2:c2:df:b8:
                    26:30:d4:80:f0:a5:a2:16:cb:55:29:c4:08:34:a5:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0C:15:0D:BC:CF:49:9E:03:52:6E:46:41:D8:6E:6E:2A:00:E9:98
            X509v3 Authority Key Identifier:
                keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:e8:b7:8f:15:8f:1f:22:f2:5a:b1:36:bb:e4:19:c7:cd:
         24:41:bd:b8:9e:e8:e5:07:9b:11:6f:c8:be:b9:b2:b7:b3:8c:
         ee:59:9f:74:6b:62:96:e8:da:b7:86:95:3f:08:8f:19:3e:ea:
         ec:e6:65:88:9e:66:1f:d8:22:6c:89:1b:13:9c:6a:85:52:88:
         13:dc:04:03:d1:ff:b6:f4:40:01:1d:ea:5e:c6:d1:08:25:6a:
         02:12:98:80:f1:f8:4f:f9:ed:ce:e1:34:f0:a7:f5:50:32:01:
         4e:27:b9:8a:ab:d2:16:69:42:14:89:36:f3:0f:2f:e1:22:a6:
         19:7f:32:46:8b:f9:3c:ab:62:96:2e:b6:d8:cc:e1:1f:97:9b:
         5d:80:f7:20:b7:ea:ff:e6:7a:bd:b2:71:c5:3b:c2:27:c2:80:
         62:1a:05:d4:97:d9:ac:e3:67:5d:ef:31:2d:bf:fa:d8:46:b9:
         64:a5:07:59:40:e0:26:75:5e:2f:6f:0f:0e:54:d0:60:05:92:
         75:5a:38:50:7b:c6:67:93:06:3c:5e:8b:d6:e0:ef:03:55:58:
         f2:99:f3:f4:35:ff:d5:fa:7e:7a:47:e6:b2:fb:c6:bb:d9:f5:
         e7:4d:d6:ff:11:2a:d0:41:71:9c:cc:2f:5a:b5:ac:72:c6:6f:
         ef:ca:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:11 2026 by rpki-client