Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
File:                     d6V15x8FqSPAyxKXxZzmW0u90z0.mft (raw, json)
Hash identifier:          vHiM6NA+bFmIFNKtsjRqMMHAo/FQBWo0jP1qCmTfhuE=
Subject key identifier:   2B:A9:8F:50:47:22:BA:99:61:2A:FA:66:C0:AB:86:45:22:7E:9A:B3
Authority key identifier: 77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D
Certificate issuer:       /CN=A9144F34/serialNumber=77A575E71F05A923C0CB1297C59CE65B4BBDD33D
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
Manifest number:          E3
Signing time:             Mon 02 Mar 2026 02:51:24 +0000
Manifest this update:     Mon 02 Mar 2026 02:51:21 +0000
Manifest next update:     Mon 09 Mar 2026 02:51:21 +0000
Files and hashes:         1: d6V15x8FqSPAyxKXxZzmW0u90z0.crl (hash: ZXoMu1x96cutn8/wlKYDs3xFzoms6HS9IPanBWrD3ZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl
                          rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F34, serialNumber=77A575E71F05A923C0CB1297C59CE65B4BBDD33D
        Validity
            Not Before: Mar  2 02:51:21 2026 GMT
            Not After : Mar  9 02:51:21 2026 GMT
        Subject: CN=69a4fb2b-28c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:62:7d:28:a8:76:ae:6e:5f:71:56:34:95:
                    a9:7e:4e:f0:51:a6:a7:3a:a8:a9:03:20:07:73:eb:
                    3f:c5:aa:8b:5b:06:7d:8b:9f:fd:13:46:79:e8:b4:
                    80:06:5a:da:37:48:6b:b8:c3:25:35:aa:cc:5b:dd:
                    1e:e5:67:ed:bb:66:6f:c9:fa:3e:c4:17:19:64:ab:
                    52:a9:23:5a:aa:08:89:d5:7d:b9:74:df:e1:08:31:
                    ee:fa:18:9e:8f:f5:0f:1b:8d:94:3e:78:31:c5:51:
                    3d:6e:c9:67:b7:43:71:b6:b4:61:70:0a:42:5b:86:
                    b1:87:7c:49:2b:b3:f1:bb:6e:5c:4e:31:b0:a8:75:
                    49:31:0c:6f:5a:e2:64:06:a3:43:87:19:61:5b:03:
                    7b:44:8f:8c:0a:9d:29:97:1e:cf:83:41:f4:2d:ac:
                    e5:8f:fd:40:e1:8a:c4:5f:e7:56:ae:8c:f6:e5:db:
                    15:fe:73:69:ac:12:70:8c:19:8c:d3:bd:84:1e:1c:
                    54:3c:82:87:88:92:d9:d4:b1:8f:0a:34:82:de:82:
                    0d:11:a1:5e:ef:e0:4b:38:3e:b9:14:36:90:a2:3f:
                    ed:48:ca:93:d4:f8:9f:8b:5f:c5:4f:0e:35:2e:e1:
                    7e:3b:e2:e3:fe:ca:7f:6b:a3:1f:ca:ce:19:bb:3b:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A9:8F:50:47:22:BA:99:61:2A:FA:66:C0:AB:86:45:22:7E:9A:B3
            X509v3 Authority Key Identifier:
                keyid:77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:88:64:e9:d1:42:46:f1:62:2d:a2:8a:98:17:33:0b:f8:28:
         2c:7b:75:7f:a1:5f:ed:16:7e:50:f5:2d:47:90:ab:fd:2a:06:
         29:10:01:d4:43:71:1a:b1:f9:44:d9:e8:cf:cf:06:23:51:ec:
         a5:97:b3:68:c8:e1:d5:e6:ec:c7:d3:91:82:f1:aa:3f:33:30:
         05:59:1f:bd:f6:d2:56:e4:56:df:53:8e:d0:de:6b:a1:ea:b2:
         9b:15:e4:1c:46:85:7d:82:72:e2:69:52:7e:78:81:49:92:72:
         28:ad:56:2a:ef:51:ed:fe:0e:5d:c8:74:16:ff:93:79:2f:64:
         a8:21:e5:dc:ce:d1:7e:ec:9b:5d:ed:dc:94:48:be:d3:73:f0:
         5e:46:ef:db:5e:b8:a6:98:8c:26:68:cb:33:7a:cc:68:27:89:
         cf:62:a7:66:1b:89:2b:75:1f:1a:a2:94:72:f2:2c:39:03:29:
         f4:80:56:77:1f:34:8b:df:44:05:5d:63:f7:f3:e4:0c:cc:78:
         e2:6e:b7:6e:b1:04:95:30:30:07:88:e8:16:af:29:cb:d7:1a:
         19:fa:41:5d:6f:37:62:aa:53:a4:78:a9:c6:02:62:32:d1:b5:
         77:cb:98:97:ac:47:da:5d:b5:eb:d6:c8:8f:d1:4b:02:f9:28:
         37:13:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:41 2026 by rpki-client