Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
File:                     8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json)
Hash identifier:          iNzTG8qNQrFGlfHSa//WLD3w5EdBpO9eulE/osICAiE=
Subject key identifier:   97:30:94:35:4C:26:31:8A:35:46:B7:91:6D:1F:A1:D8:F9:20:11:0F
Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05
Certificate issuer:       /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
Manifest number:          7E
Signing time:             Sun 01 Mar 2026 09:10:57 +0000
Manifest this update:     Sun 01 Mar 2026 09:10:57 +0000
Manifest next update:     Sun 08 Mar 2026 09:10:57 +0000
Files and hashes:         1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: COGex979g3BpGNTuuX6SF0heZx/x5dxOdywlBU0W3uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl
                          rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
        Validity
            Not Before: Mar  1 09:10:57 2026 GMT
            Not After : Mar  8 09:10:57 2026 GMT
        Subject: CN=69a402a1-8872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:a2:66:49:91:d8:01:5f:82:d3:83:19:82:
                    e4:1b:8c:27:3d:65:4f:0d:9f:10:f8:30:ad:a6:67:
                    4b:29:3c:4c:07:ae:d0:89:3e:5a:6c:ea:bb:e1:de:
                    f3:54:8e:70:c6:a2:c7:2b:16:78:56:2e:40:43:59:
                    1c:a9:db:1a:68:ba:47:9d:94:19:4e:ca:6d:a4:6c:
                    4d:1c:64:89:5a:4e:bb:bd:79:7d:21:75:5c:1f:fb:
                    e3:8e:87:16:19:c3:84:c1:9e:8c:11:9d:e2:1c:ec:
                    e2:e2:65:85:21:68:15:24:90:a2:9d:cd:eb:73:95:
                    0a:2e:71:7c:bc:70:6a:21:62:aa:ad:51:1c:38:99:
                    0d:20:cd:b9:28:b2:2d:19:2b:c1:63:11:84:24:58:
                    73:3c:96:6a:8b:46:18:60:88:ec:e5:26:cd:c2:07:
                    b4:6a:3d:f8:6a:47:ed:94:0d:cb:65:f1:d6:37:91:
                    78:3d:ca:68:32:91:e0:3e:8c:62:fc:1e:78:e0:0e:
                    37:4a:1a:2d:3d:1c:f4:f2:9d:24:a7:5e:64:1f:11:
                    f2:31:e1:6f:c2:51:7e:76:66:fe:21:77:66:09:97:
                    40:c2:29:2a:01:2f:08:49:09:a1:17:7a:42:14:aa:
                    c7:6b:5f:be:0e:0b:87:74:4f:65:c0:13:f4:73:47:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:94:35:4C:26:31:8A:35:46:B7:91:6D:1F:A1:D8:F9:20:11:0F
            X509v3 Authority Key Identifier:
                keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:89:a8:ca:1e:72:01:4b:b4:9a:af:65:39:db:20:cf:3e:bc:
         25:1c:19:8f:74:33:8b:4e:1b:c3:6d:a9:35:47:a8:5d:bb:98:
         2f:81:a8:3f:82:0c:8d:ca:d7:88:36:a2:1b:5e:d7:46:dd:bb:
         27:67:1c:54:b4:e7:60:c8:73:89:0a:51:b4:ae:4b:92:31:1f:
         55:3a:24:29:6b:3c:34:d7:03:f1:5e:e9:2f:15:21:4d:7c:79:
         64:a7:ad:5b:a2:94:ea:b0:5d:53:01:ef:9c:e2:89:14:41:19:
         84:b8:15:21:d4:3e:5e:fc:bd:1d:f4:f0:05:fb:75:87:de:2d:
         cf:f6:cc:e1:24:bc:e1:06:8d:8b:d4:67:e4:3d:92:09:cc:0f:
         1c:e2:b0:7b:60:1a:75:96:f0:4e:ca:e4:3c:72:ba:63:d0:66:
         c0:45:44:f3:cc:15:94:aa:33:28:b1:66:23:c6:93:1e:e9:09:
         6f:69:65:c5:4d:e0:4a:07:55:59:0e:29:fc:e6:d2:46:77:20:
         21:24:16:9f:a3:cb:77:30:f7:cf:c8:02:e3:b4:1a:8b:75:3a:
         cf:0c:bc:e2:4e:b9:45:ee:6e:23:6b:86:20:36:e2:6e:5a:42:
         c0:a7:16:fa:a0:5f:93:12:bd:65:da:2e:74:c9:79:5c:30:1f:
         d6:4c:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:12 2026 by rpki-client