Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File:                     N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier:          +yDdwkaFhzwDYCbRPFyFP6Spmo8gl2TqKgvGW0z+ak4=
Subject key identifier:   FF:D2:D5:10:40:62:91:9E:2C:61:4D:EF:2B:4E:45:40:E6:B5:A7:91
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer:       /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number:          C9
Signing time:             Sun 01 Mar 2026 08:01:50 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:49 +0000
Manifest next update:     Sun 08 Mar 2026 08:01:49 +0000
Files and hashes:         1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: g6mCxWm+b31ZmKRBjTqwFTVp6cJkTpl3mmFwLEfeQwo=)
                          2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: wy+E0shlE0SgKblGT9mkubbsdEgdl8xDfG6j2pKg5CM=)
                          3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: rUHAonKHyKGTHsXqPvAHU77iis+UDkigScpxL6u+DWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
                          rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
        Validity
            Not Before: Mar  1 08:01:49 2026 GMT
            Not After : Mar  8 08:01:49 2026 GMT
        Subject: CN=69a3f26e-6047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:79:33:0f:f0:b4:6e:a7:ea:ff:9c:f1:59:
                    56:93:51:ce:c7:c0:81:7a:8f:53:44:2b:5e:74:65:
                    eb:6c:64:f7:7b:94:a5:1b:37:95:72:44:09:cd:5d:
                    8d:10:61:2f:28:0f:4f:f6:6c:99:da:68:52:e5:b2:
                    29:40:d6:c9:bb:42:a8:9b:74:95:bf:2f:31:42:2b:
                    42:f3:46:75:56:ae:b0:f8:fc:12:74:ef:3f:87:fe:
                    75:a8:38:f2:82:37:31:32:3d:d0:7e:ed:e3:49:35:
                    25:61:bb:1d:b1:0f:88:92:3c:e0:ff:6a:8b:ee:9b:
                    ee:e1:0f:6a:bd:47:eb:27:65:2f:af:6d:6d:93:99:
                    b7:e4:34:18:87:a1:33:9d:48:7b:1f:f4:db:bd:2e:
                    9b:b5:46:8b:c7:aa:c8:96:0a:f4:a6:34:91:f4:19:
                    41:56:ee:15:7d:29:79:81:82:e2:7c:74:c8:a1:f5:
                    5a:84:3a:af:2c:f2:a4:92:18:61:33:bf:b9:c6:cb:
                    40:b9:4e:35:22:d2:d6:5c:59:94:aa:96:c8:de:e3:
                    ff:0a:73:0a:f4:cf:82:c2:c7:84:73:eb:19:0a:59:
                    87:bc:9c:af:26:e2:9f:d1:5a:a8:d9:cc:d5:74:01:
                    a5:6f:ec:1c:3f:cc:11:73:83:09:50:fc:d7:d4:33:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D2:D5:10:40:62:91:9E:2C:61:4D:EF:2B:4E:45:40:E6:B5:A7:91
            X509v3 Authority Key Identifier:
                keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bf:82:21:9d:55:b0:02:ca:b5:2f:f7:c4:34:06:be:5e:00:
         c3:93:72:40:53:f0:81:fb:a0:6d:80:c4:d4:5e:a6:b3:98:04:
         1a:6c:da:24:3f:20:c5:ae:5a:b8:23:c5:65:3d:c4:86:4c:6a:
         cf:7a:93:1f:0a:c5:82:47:24:ee:a3:8e:55:15:d7:e2:d5:82:
         aa:03:33:3a:e1:eb:09:d9:20:63:04:95:50:fc:32:22:d3:7f:
         1f:1d:7e:cb:39:4d:77:52:5c:77:57:f3:d6:43:60:ab:00:3a:
         d9:ca:50:53:95:58:7b:9d:a8:01:ce:c5:3f:25:e0:fe:c6:c8:
         6b:bd:51:e2:42:52:50:0a:5a:0e:8d:65:db:51:1f:c9:9f:f7:
         dc:c2:cd:06:a3:d2:68:f2:0b:db:ab:45:1d:c0:75:fc:fd:9f:
         64:d2:72:24:bc:42:3b:4a:e2:a9:29:8c:44:36:c5:c0:c1:37:
         cc:9b:33:4b:22:f4:f7:58:59:9f:49:53:7d:20:72:11:bb:82:
         b2:a1:cf:16:13:a1:ab:cb:18:4e:2b:19:e0:b3:c9:b6:ff:6c:
         b3:fc:82:bb:5b:0d:c1:2c:12:57:8c:e8:de:8f:21:3f:0c:20:
         fe:00:29:e5:32:d7:58:6c:96:35:04:e9:8a:8b:6e:05:4b:d8:
         11:da:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:13 2026 by rpki-client