Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          FvU5ufdTh8B8kxd5z7eC9Km+TaeTSxlX7fgCw0TZk1s=
Subject key identifier:   0B:A1:67:4B:63:C9:F6:EC:5D:51:A1:6B:E5:4D:CF:16:84:4D:B5:C7
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          01FA
Signing time:             Mon 02 Mar 2026 00:23:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:23:13 +0000
Manifest next update:     Mon 09 Mar 2026 00:23:13 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: s5FhNLgE0M9z9v50o0PYoPwyx6aK90JPrKSnRgNyKWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Mar  2 00:23:13 2026 GMT
            Not After : Mar  9 00:23:13 2026 GMT
        Subject: CN=69a4d873-9368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:02:1d:65:64:de:85:57:18:c9:5a:31:3f:
                    d6:b1:39:62:4d:f5:f4:2f:43:6c:db:ae:9d:2b:ac:
                    d3:1e:e1:ac:fb:70:25:d2:7d:43:c8:82:0b:45:2a:
                    d5:33:fc:de:e8:9d:2e:5a:7e:84:2d:3d:24:19:0e:
                    f4:5d:1a:cc:53:6a:8e:da:06:45:07:c9:d8:c7:ab:
                    32:9e:f7:55:9c:12:af:f8:fc:6c:d5:8a:3b:15:8c:
                    59:05:98:29:28:40:54:ba:85:ab:db:71:47:4f:e4:
                    c4:3c:f2:4d:ad:50:86:16:07:40:1d:91:0b:ab:77:
                    19:a6:88:57:4f:8e:8c:c3:45:d6:a9:a2:43:1d:2b:
                    7f:a7:e8:14:87:f8:be:2c:66:71:b3:b4:e7:ed:4d:
                    6b:1a:fd:27:e5:c1:94:7a:ed:7b:33:d9:26:be:4a:
                    93:4c:0e:c0:2b:d2:6c:f2:46:64:64:ef:d3:e9:47:
                    b1:a2:f3:27:ce:e4:0d:59:2b:be:eb:14:68:a5:9e:
                    1f:a4:85:b6:dd:ee:c5:12:c3:c0:dd:23:16:3e:08:
                    51:a8:12:82:b2:80:1a:33:f6:eb:de:77:2d:91:b7:
                    a5:8a:db:b6:c8:68:2f:c3:4e:1b:66:1e:e5:e1:01:
                    76:25:d3:f4:d9:1a:97:af:37:a6:be:ac:b5:77:ea:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:67:4B:63:C9:F6:EC:5D:51:A1:6B:E5:4D:CF:16:84:4D:B5:C7
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:4d:8a:1b:bd:5c:af:1c:79:66:9c:82:3c:5c:39:ee:c3:93:
         f6:b9:32:69:1d:9c:73:e2:0d:46:93:f4:eb:65:1b:b4:8f:41:
         8d:aa:59:42:83:eb:f5:5d:36:e7:1a:b5:11:09:f8:53:06:9b:
         0a:34:47:01:cc:48:1b:8e:c0:a6:a6:67:2b:ec:04:0c:15:32:
         19:ca:81:fb:5f:2e:ce:51:34:0c:55:dd:b1:54:eb:05:6c:77:
         79:3b:27:a3:24:28:37:79:a2:aa:ed:25:c3:cc:88:6b:cd:d4:
         58:49:09:85:16:ea:18:96:9a:9e:ac:be:0e:0a:a5:41:9a:cc:
         27:85:5f:53:44:5a:5a:70:6d:51:86:19:02:cd:f3:48:b1:21:
         77:b6:e8:d1:24:e2:37:2c:ee:2b:16:d7:de:bd:eb:b3:31:54:
         d8:1c:c0:ef:f0:b4:fc:1f:f4:7e:8f:5b:94:ce:24:5d:1f:a3:
         3b:31:fb:33:b2:e1:c6:6a:25:23:1a:a6:57:ff:c8:73:c0:f8:
         98:08:25:2a:58:e7:1d:c6:80:5e:9a:bd:72:1c:32:98:f7:4b:
         47:01:f8:f1:9c:ff:ce:d9:d8:f6:0a:50:f9:98:83:9b:26:36:
         83:c5:72:b0:7b:cd:0e:d0:d8:d0:c3:3b:98:09:33:e8:65:87:
         af:9b:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:12 2026 by rpki-client