Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File:                     K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier:          ZB/8CFv7oSxRJ6eE+MaQ/98R5PL9CFgEJX/sues2/CM=
Subject key identifier:   F1:61:26:1E:E7:67:1A:77:66:28:E4:2D:16:31:17:B1:CE:6A:E7:44
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer:       /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial:       092A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number:          0900
Signing time:             Mon 02 Mar 2026 00:27:27 +0000
Manifest this update:     Mon 02 Mar 2026 00:27:25 +0000
Manifest next update:     Mon 09 Mar 2026 00:27:25 +0000
Files and hashes:         1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: W3gvhjnczWk9xwsjQLEOfiGyfcBgOGdt9qqlETxUehM=)
                          2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: Ug8T2jAnxBEFXcI9OyfxIdrB1/QKIOy0uEZRs/AiI9w=)
                          3: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: bewmclnmrJWEsHLDmCXH14/YujDcIGWpfsGeSMRrytw=)
                          4: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: mTee11vC2WHUjxpYpzX5Cx2s5T+zTjrHiz6j8S4XOXs=)
                          5: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RJDI3i7hM1nBIPS/73ED0LFQix8Jwqczz+z+Slz7wW8=)
                          6: ECE7A9D2EB3F11F09567C020426F56BC.roa (hash: b/odK3fyg/jlDP71Lmw4LV7WggxUFrl8lRxTF5frNAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
                          rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346 (0x92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
        Validity
            Not Before: Mar  2 00:27:25 2026 GMT
            Not After : Mar  9 00:27:25 2026 GMT
        Subject: CN=69a4d96f-4c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:85:ce:48:19:e1:90:50:26:97:55:b2:11:
                    f7:36:e9:c7:e5:2a:d7:45:77:7d:85:a3:77:5d:88:
                    f8:65:36:8d:ca:3e:c9:19:0f:02:fa:4d:f2:20:62:
                    fd:c3:c8:01:41:5c:c7:f6:67:77:71:18:51:ac:f1:
                    10:bf:e2:b6:c2:20:bb:87:f5:c0:1a:fd:44:67:e6:
                    35:d6:43:87:32:30:0d:e5:c3:86:e4:ba:cf:81:cd:
                    53:0d:50:4c:aa:89:b0:08:9f:05:cd:11:47:9b:0f:
                    ac:41:1f:71:59:32:7f:77:85:72:f3:e1:ab:67:36:
                    8a:e6:7f:0c:6a:09:39:0e:0a:6f:5c:93:2c:77:15:
                    8a:ea:91:8e:cf:90:8f:f4:e0:10:c2:44:93:cf:ad:
                    7a:1d:69:c4:67:3d:ae:d9:42:f0:05:0a:18:68:bd:
                    f0:6f:6b:52:7d:41:72:3b:01:e7:b5:b0:21:c5:17:
                    c4:8f:16:05:07:eb:d2:10:11:eb:81:fd:44:47:fb:
                    4a:29:43:81:ab:87:00:ab:40:be:bd:82:56:ac:d3:
                    92:40:86:44:c7:9d:a2:53:56:ba:13:3e:1a:d9:10:
                    08:7a:c1:a4:b6:6c:7f:a8:b8:70:f0:85:08:7d:c5:
                    6a:1f:b5:a3:7f:f7:13:9a:13:7a:cf:8e:c6:5c:0b:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:61:26:1E:E7:67:1A:77:66:28:E4:2D:16:31:17:B1:CE:6A:E7:44
            X509v3 Authority Key Identifier:
                keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:bc:19:04:e1:77:ef:aa:3e:08:c4:7a:7d:b4:fd:0a:d1:
         19:d5:3e:fd:d8:f9:88:2d:77:00:5b:0d:da:cc:e4:07:5f:99:
         cf:b3:dc:ad:12:aa:5c:00:f6:d5:6d:c2:ce:c9:8b:65:81:2f:
         ee:d5:bc:c4:47:f7:a0:b4:fc:19:25:d2:39:0c:be:fb:ee:14:
         63:18:1a:c4:0a:69:2f:3e:4d:72:8d:43:3d:11:87:4a:4f:88:
         a0:4d:54:8d:66:5a:ee:47:4c:42:92:8f:43:fd:45:55:e1:46:
         2d:d3:8e:c1:4a:cf:e7:79:43:57:45:8a:a3:b9:20:7d:a2:54:
         33:03:ce:e2:97:c3:b2:80:92:4a:16:ae:f4:86:76:ae:95:10:
         08:68:f8:f0:48:84:41:32:27:d6:de:8a:43:29:ec:86:f3:3c:
         f1:6c:9f:22:6b:9b:9e:e5:44:f2:62:48:af:b9:2c:5f:00:c5:
         73:1c:78:d3:58:2b:81:61:c0:06:ac:9c:39:ed:9f:10:d2:4a:
         65:a5:f3:70:1f:7d:a2:a1:15:82:45:35:85:aa:38:98:f8:c6:
         7f:c8:fa:8d:1b:fa:94:38:39:e8:0c:51:23:51:8a:6a:66:34:
         33:e1:bd:35:a2:39:6a:0a:6f:80:41:df:0d:f5:b7:91:58:a9:
         46:b0:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:13 2026 by rpki-client