Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File:                     XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier:          DVqqFIGKEpVTkZ9lLaVs5PWMn9Jd0V8joxYKfqUt0zo=
Subject key identifier:   89:CA:55:7A:7E:A9:95:40:A5:34:CE:90:5D:E2:ED:50:C0:1E:C3:40
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer:       /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number:          06F4
Signing time:             Sun 01 Mar 2026 23:22:32 +0000
Manifest this update:     Sun 01 Mar 2026 23:22:31 +0000
Manifest next update:     Sun 08 Mar 2026 23:22:31 +0000
Files and hashes:         1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: USbMYx50eGocx+ZKpHiLvMvxHUlsGfDFdbCpso3eqPA=)
                          2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: fYVYUbEM+yc9DQvEbI/FIL6icssMjAZeyST5SieaviE=)
                          3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: ncye4h2LfxWSXSb9ZLnxK814KkA6AAsodwr7PvucjXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
                          rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
        Validity
            Not Before: Mar  1 23:22:31 2026 GMT
            Not After : Mar  8 23:22:31 2026 GMT
        Subject: CN=69a4ca38-120f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:c4:04:4d:65:76:58:90:f3:dd:a5:26:8c:
                    da:88:a7:d7:64:09:5d:89:7e:ea:40:aa:41:21:ab:
                    d9:da:3b:08:0f:9d:d5:af:8a:b8:c4:0f:87:12:28:
                    e6:c3:ea:9f:a9:b5:b9:69:f5:ab:ce:9b:e0:20:88:
                    60:56:33:82:d9:cf:26:38:c0:e6:5f:08:c6:d8:1d:
                    11:a1:dc:a5:26:ba:09:85:b9:fe:47:db:3e:63:db:
                    0f:39:9f:77:93:c7:b6:53:b2:ef:eb:f3:50:7c:47:
                    55:0b:a9:c7:a7:d9:30:ba:8f:c2:05:9b:0e:35:40:
                    d7:8e:dc:ee:da:b5:e4:41:aa:42:f7:cf:f1:a8:2a:
                    8d:ca:db:69:e6:48:3b:3c:e3:0c:d1:6f:88:f8:a0:
                    89:ac:57:3e:79:f3:8c:36:91:1f:50:a0:49:0e:4e:
                    3a:d3:ae:7d:c9:5c:5c:5d:e3:d1:52:f9:8e:4f:9b:
                    95:8f:24:16:6f:99:19:3a:08:94:7b:2c:17:4c:28:
                    7b:e3:c5:6d:44:86:76:80:25:0e:0c:63:84:d8:76:
                    2e:fc:54:07:f8:a3:7c:1b:aa:65:de:37:e7:ee:07:
                    a2:54:7b:66:9e:31:00:9c:2e:69:59:c7:ce:4a:ea:
                    eb:d4:6c:0b:64:c9:fa:5e:31:f6:de:b9:7c:d6:68:
                    db:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CA:55:7A:7E:A9:95:40:A5:34:CE:90:5D:E2:ED:50:C0:1E:C3:40
            X509v3 Authority Key Identifier:
                keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:ce:e4:8c:56:b6:fa:7d:f9:f8:c0:65:95:cd:b1:77:d6:
         85:5e:53:4f:4d:c7:b2:56:b5:22:74:ba:50:fb:d7:8c:e5:d0:
         f0:7a:8c:d8:a8:7d:41:e5:0f:df:df:ce:11:ab:69:9a:99:17:
         c0:be:09:a2:57:a8:4c:a3:a3:94:8a:40:31:c2:fe:6d:1f:56:
         d5:1e:80:01:bf:7b:9c:e2:df:e5:e9:29:1d:12:3e:a6:05:fe:
         88:6d:ac:d3:ee:e8:60:b6:22:6f:03:14:95:4b:56:6b:50:18:
         33:e9:53:6e:f8:8d:34:b5:bd:e8:d5:24:d6:72:28:11:f7:4b:
         a4:72:c5:be:71:17:af:95:0d:08:5c:2e:4b:c9:fd:e0:cd:ab:
         b6:b4:e4:81:22:be:3a:27:d5:84:01:1a:01:c1:90:c8:2d:9b:
         ca:44:40:c5:98:82:61:5b:b1:eb:f6:59:f4:4a:89:d8:46:cf:
         11:31:a4:63:46:37:9a:c7:d1:aa:a0:6a:a3:04:d3:26:18:f4:
         c3:45:68:08:b5:0c:46:92:28:b6:ec:08:80:59:03:d3:51:e4:
         3d:08:6f:1c:40:45:2d:6f:4a:8f:0c:98:48:df:e9:5f:a4:db:
         04:61:07:bf:ec:0e:e2:5a:14:1c:ae:b4:b1:b2:84:04:cb:43:
         9f:c7:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:21 2026 by rpki-client