Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft
File:                     G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json)
Hash identifier:          cbWJzoV7/5S5ZJqKp9ZPN87DJuU0zlloJ/VZAXLf8nk=
Subject key identifier:   D7:9D:88:48:FF:C4:69:E0:34:FF:B2:C2:24:F6:E3:09:9B:17:CD:0A
Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A
Certificate issuer:       /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft
Manifest number:          010C
Signing time:             Sun 01 Mar 2026 07:04:38 +0000
Manifest this update:     Sun 01 Mar 2026 07:04:37 +0000
Manifest next update:     Sun 08 Mar 2026 07:04:37 +0000
Files and hashes:         1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: NOyvk/kOwIv68uHtVk+oTPQBxQDn1+Fq6tJ8Zh7vcd8=)
                          2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: JTaY1OoFwCENkuCW8PoMm9B67xzJiYNnfFsYDa6zO/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl
                          rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A
        Validity
            Not Before: Mar  1 07:04:37 2026 GMT
            Not After : Mar  8 07:04:37 2026 GMT
        Subject: CN=69a3e505-bafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:66:65:e3:f7:c9:43:7e:2d:62:31:0b:58:
                    9e:61:8a:74:45:7f:88:07:52:58:e0:15:2e:e1:49:
                    3a:10:d5:f3:26:08:0b:70:c3:48:7a:3b:22:cd:b8:
                    e5:08:ed:67:25:2e:6a:fc:bb:a2:6c:31:79:8f:e5:
                    11:c5:e5:f6:b4:03:f3:6d:84:c4:c4:8d:68:b2:c6:
                    eb:99:9f:39:bb:86:dc:06:15:f7:23:5f:86:e2:e5:
                    57:8d:a8:76:57:cf:b1:5b:1e:51:68:53:3e:9b:57:
                    cf:07:0e:a4:7c:0e:f1:6e:73:b3:62:e6:93:f7:32:
                    53:61:bb:7d:c0:42:e5:28:0f:22:09:4e:1d:cb:5a:
                    6b:3f:8f:17:9a:b2:e4:b5:07:1e:64:13:7e:bf:be:
                    21:e5:ab:13:87:3b:4c:d2:88:fe:0a:4c:02:3c:8d:
                    8b:92:8b:a8:48:1b:6e:d8:77:d7:e9:a2:4e:50:c0:
                    f8:7f:8c:75:f5:79:48:da:2d:ba:5c:39:d8:00:10:
                    7b:33:b6:04:25:7a:39:35:f6:d6:e2:ce:55:72:1d:
                    72:57:c7:ea:93:d1:6e:ec:ca:de:7c:e3:fa:73:fe:
                    99:bd:f7:ab:69:7a:a7:40:c2:8f:6a:b4:97:c7:d8:
                    78:57:05:f1:b2:a8:4c:ce:10:cb:db:e3:9d:b9:9b:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9D:88:48:FF:C4:69:E0:34:FF:B2:C2:24:F6:E3:09:9B:17:CD:0A
            X509v3 Authority Key Identifier:
                keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:7c:0a:b7:8a:c3:9b:18:b3:7e:18:b6:a8:9f:8f:2c:72:
         d9:95:cd:bb:2d:6c:45:1d:64:49:6d:a1:2f:fb:c9:f5:f6:af:
         b3:07:4f:0e:50:74:41:6e:b3:73:b6:3d:58:c9:52:fe:be:74:
         70:51:66:c9:9b:90:58:b2:95:b8:9d:05:c2:1f:71:f9:7c:66:
         05:b9:14:48:ba:52:a6:68:f2:af:d8:c2:fa:53:30:a7:30:0f:
         89:8f:f6:67:18:cc:d5:e3:15:3a:71:37:35:2b:a4:ba:dc:5c:
         2c:df:63:c4:99:88:2a:29:0b:c6:74:f1:eb:f4:9c:0e:e8:82:
         6c:95:44:8c:65:41:4b:25:4e:bf:f4:2b:98:f2:97:a5:3a:79:
         5e:36:5e:22:19:a3:c0:75:b9:16:7e:51:ea:95:93:fc:2b:b9:
         e3:2f:c7:6d:43:88:de:7d:98:4d:0e:79:fe:51:aa:fa:fb:52:
         9c:40:08:51:2a:2e:75:7f:99:1a:33:79:ec:e7:f4:c7:82:76:
         eb:08:d1:2a:37:0c:46:99:69:aa:40:81:69:5d:49:7c:1d:ed:
         ae:db:eb:03:fd:c7:a8:df:a8:ba:a4:c3:2e:6d:97:b9:48:12:
         c2:95:39:6f:e4:2a:14:65:02:15:06:50:9f:06:3e:43:7c:ba:
         41:bb:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:26 2026 by rpki-client