Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File:                     sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier:          t1Ff9fpNch13tC3zvs2NzEM4nzdZWvqLLuiKojd/TrQ=
Subject key identifier:   24:67:E0:7B:D8:3F:12:92:8E:7F:77:CB:C5:75:A9:C9:79:61:BB:1A
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer:       /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial:       1FA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number:          1F95
Signing time:             Sun 01 Mar 2026 23:32:19 +0000
Manifest this update:     Sun 01 Mar 2026 23:32:18 +0000
Manifest next update:     Sun 08 Mar 2026 23:32:18 +0000
Files and hashes:         1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: uZfMFALekOsNGUz51l/GbOBDJGVuChGwtzPaNqc71sg=)
                          2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
                          rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8104 (0x1fa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
        Validity
            Not Before: Mar  1 23:32:18 2026 GMT
            Not After : Mar  8 23:32:18 2026 GMT
        Subject: CN=69a4cc82-c6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:73:5e:51:23:12:07:45:0a:a1:43:67:99:
                    f3:6b:1d:85:22:26:7c:13:91:74:4d:86:c8:9b:3b:
                    d8:51:62:b9:d3:9a:57:2b:1e:fc:9e:aa:16:60:88:
                    e6:40:17:91:86:a5:77:e4:03:57:23:af:54:a0:01:
                    e6:47:88:01:65:84:3d:9a:69:3e:f9:d4:e7:92:16:
                    9f:27:bf:e1:8b:f6:44:8d:8a:bb:f3:49:31:b7:7d:
                    b1:b3:9d:a4:96:01:a1:71:0c:4f:a7:65:a1:92:67:
                    83:b0:b4:ef:8f:5c:fe:67:7f:35:9c:2a:47:dd:b2:
                    13:97:e3:fd:87:56:5d:89:8b:8b:7f:2a:e5:07:f3:
                    ed:7b:88:0c:e5:0b:55:7f:fd:7e:8f:62:98:dc:08:
                    c9:b7:eb:1c:a7:92:aa:8a:64:bf:f7:39:21:1e:b3:
                    e6:12:2c:4c:f4:24:9a:e2:ce:b5:42:1d:fd:18:4a:
                    f8:d9:2a:4e:26:2f:d6:6c:3d:fa:bd:87:93:0a:f0:
                    df:cb:fc:c2:b4:7c:6e:93:9e:88:fd:03:5c:6e:59:
                    6d:2d:92:f2:52:f5:c6:c8:3d:f0:d5:b6:38:6b:47:
                    b0:50:54:6d:6a:2c:5b:ec:33:c8:d0:b6:c6:25:7c:
                    b6:80:2f:92:98:fc:f2:45:f4:04:71:8d:20:7b:15:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:67:E0:7B:D8:3F:12:92:8E:7F:77:CB:C5:75:A9:C9:79:61:BB:1A
            X509v3 Authority Key Identifier:
                keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:2e:be:cf:98:81:c9:60:bf:6f:70:68:8f:38:cb:97:38:
         89:04:7e:fe:3c:71:29:07:ef:76:6a:83:e5:5a:ca:1c:b3:79:
         a7:55:79:53:52:bc:3a:51:6f:22:c1:7d:3b:46:95:32:ef:37:
         54:26:27:cd:05:c3:e3:69:3c:1b:27:98:35:10:61:64:79:30:
         21:e0:d6:a0:0e:dd:2f:d7:54:89:78:98:22:b3:02:95:d1:46:
         90:fd:57:33:d2:6a:1f:37:d7:1e:6b:cc:55:65:24:e1:b2:36:
         cb:6e:1b:08:6c:da:c3:f9:1f:41:c5:3f:ec:57:00:82:74:5c:
         65:8b:02:2b:d8:95:44:be:4e:e8:04:6b:f0:0d:0b:c4:2e:08:
         3d:86:24:f4:81:23:d8:e4:85:3d:2d:3c:0c:1f:25:e3:93:c4:
         19:24:f8:c3:76:d6:30:bc:a3:a9:5d:ce:ad:f9:12:6e:7e:6b:
         70:e2:fd:81:9e:8a:96:cf:32:b4:bd:94:0b:5a:48:56:43:50:
         3b:09:92:f9:28:9c:ff:59:b1:15:be:71:fe:9a:b6:80:eb:0d:
         3f:10:34:2b:45:53:12:f8:af:9e:2a:3e:94:3e:d6:90:b6:66:
         02:22:b3:30:8b:29:48:d6:5a:cd:ff:74:78:ec:5a:7d:d2:e1:
         af:79:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:12 2026 by rpki-client