Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          is9nbBBK5sFSfFYDGwIhbhSH7nEJFRm7uonn4sAJy7U=
Subject key identifier:   5B:E2:83:BF:76:85:18:6C:7A:7B:A7:33:95:E0:64:20:FE:D1:4F:A7
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          0182
Signing time:             Sun 01 Mar 2026 05:29:40 +0000
Manifest this update:     Sun 01 Mar 2026 05:29:39 +0000
Manifest next update:     Sun 08 Mar 2026 05:29:39 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: 1yeV5fnYR+58/6pffZiq6LbGJ+GMBGJ6R1x6rhLFXb0=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Mar  1 05:29:39 2026 GMT
            Not After : Mar  8 05:29:39 2026 GMT
        Subject: CN=69a3cec4-59ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:03:2f:85:17:7a:fc:3c:44:cf:07:63:5c:
                    cf:67:ab:89:09:60:70:83:d5:75:b6:0d:bd:4d:00:
                    3b:25:6f:2b:eb:f9:e7:ae:6e:d4:14:50:a6:27:f1:
                    0c:76:bd:ff:c7:f4:36:af:fc:d0:67:84:0d:44:7d:
                    e0:97:84:a9:63:0d:2b:c5:1b:5d:48:a6:52:e4:2d:
                    9b:80:d2:f1:ae:2e:af:01:af:0d:7c:3c:df:59:04:
                    d2:1f:3a:ad:35:c0:2f:14:e6:6f:6c:01:d0:07:73:
                    27:47:8e:1c:6e:43:9b:4f:f3:fe:62:42:e7:eb:b8:
                    cb:5d:8c:70:22:58:b2:21:0c:95:4d:10:7c:51:e9:
                    82:39:94:6d:df:df:a1:e3:7f:15:5f:58:51:f5:b0:
                    35:1a:3d:10:80:04:81:17:62:8d:c1:55:45:20:0a:
                    30:2f:0b:65:76:a2:8d:04:1d:ca:59:98:06:21:56:
                    9c:94:dc:41:6c:e9:85:4c:ea:96:7a:75:1d:7d:e4:
                    16:aa:51:ce:96:da:18:11:32:29:de:0b:7a:2f:c9:
                    4d:36:bf:f6:ba:a7:2e:ae:7b:d9:86:a4:7b:2f:f9:
                    e3:e0:f4:70:4f:0e:85:bd:dd:8f:12:29:7f:8b:59:
                    15:91:23:c2:90:f2:fe:8d:e6:ba:d4:7e:9f:b0:85:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E2:83:BF:76:85:18:6C:7A:7B:A7:33:95:E0:64:20:FE:D1:4F:A7
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:77:a8:99:66:0f:28:23:b8:f9:83:e2:f3:89:0b:59:fd:7f:
         06:3a:9e:08:ea:fa:cc:0d:98:a7:7f:a4:a2:fa:82:f3:03:43:
         00:6e:42:6d:f5:2f:94:87:34:9f:0a:1a:96:c1:df:60:f5:ce:
         d9:b3:fe:5f:81:32:44:4a:8c:20:31:37:5d:3d:24:95:f7:ae:
         b4:48:95:0c:ca:0d:61:2f:7e:3f:f6:17:d6:7e:d5:7d:33:06:
         3e:2c:4f:cc:ea:74:ff:da:c5:65:e5:cd:7c:02:eb:dd:f3:32:
         0c:56:d1:b9:6a:31:7d:0f:93:6d:09:16:ad:55:2c:3b:99:68:
         0a:42:c0:2b:bb:00:45:19:ed:4a:2f:d7:f7:7e:b8:50:62:77:
         2e:fb:47:71:9f:7c:35:80:b0:38:bb:84:1b:fc:54:46:ac:ad:
         9d:2f:e6:bf:7d:97:45:bf:89:28:76:07:a9:47:41:2d:f5:9e:
         a9:18:5d:25:50:0b:26:84:ba:f0:36:51:d3:d7:60:d1:0b:26:
         ac:3d:e8:0c:ff:46:da:3a:4f:34:e4:11:bc:61:38:41:6b:be:
         7e:9e:6d:50:b1:da:81:c8:f4:4d:68:a1:00:9b:e8:5e:34:a8:
         44:48:3d:c1:58:32:b0:a4:83:3a:75:02:15:a1:32:c7:77:f5:
         0c:27:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:52 2026 by rpki-client