Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
File:                     b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json)
Hash identifier:          SQaL0fOlKzNPPZPPAKgvql6dSH32XN0qzOfHgtcdQzc=
Subject key identifier:   53:EF:9D:AB:11:76:55:DF:09:3B:88:1D:7A:C5:E3:97:27:8A:BB:B8
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Certificate issuer:       /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial:       1D0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
Manifest number:          1CEB
Signing time:             Sun 01 Mar 2026 23:29:35 +0000
Manifest this update:     Sun 01 Mar 2026 23:29:33 +0000
Manifest next update:     Sun 08 Mar 2026 23:29:33 +0000
Files and hashes:         1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: m0wmgJcqgKwH0wwYUQK+hvGjtXuvmtXGeOhuQi2kECQ=)
                          2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: FVNSKaXDdy0CaXltkNWY4bF0klXSYM3BzCHdZ56uQag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7436 (0x1d0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
        Validity
            Not Before: Mar  1 23:29:33 2026 GMT
            Not After : Mar  8 23:29:33 2026 GMT
        Subject: CN=69a4cbdf-65cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:f3:6e:68:63:1c:40:dc:2f:e1:ae:92:10:
                    01:be:fd:42:2a:53:2a:1c:87:94:a3:ca:91:da:b4:
                    cb:5b:22:d0:21:b0:f8:11:a5:5e:2f:98:8a:94:34:
                    f4:df:1e:81:3e:24:27:5b:81:99:04:26:24:a4:dc:
                    1c:e4:a3:a2:1d:91:51:3c:67:90:a0:08:67:56:cf:
                    8a:2b:aa:47:56:a3:c6:c2:e8:56:3e:ee:72:ba:79:
                    91:23:11:40:40:b5:c3:57:8a:0b:5e:b2:68:fb:e6:
                    6e:78:a7:b7:a5:08:6b:8a:ca:b9:e9:52:6d:84:79:
                    e0:3e:a6:70:51:20:55:40:35:24:77:06:dd:3f:46:
                    87:b6:25:31:37:ca:51:2f:0b:94:c3:46:52:ee:8c:
                    5c:08:3e:83:17:4e:6f:66:4d:ae:08:31:a9:31:a4:
                    64:06:c0:c0:09:07:bc:be:21:26:12:49:d0:84:ee:
                    5e:eb:37:29:7e:68:06:2d:bf:ed:8d:83:6b:d9:92:
                    ef:f5:78:1a:17:49:fd:db:fe:bb:df:09:04:3a:4f:
                    62:39:e9:7f:de:39:35:b8:d4:31:c8:93:0d:36:8e:
                    de:63:82:bd:9f:ac:78:2a:3a:da:08:ec:d4:f9:52:
                    73:84:39:56:08:76:66:8b:ed:8a:9d:58:a7:ae:cb:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:9D:AB:11:76:55:DF:09:3B:88:1D:7A:C5:E3:97:27:8A:BB:B8
            X509v3 Authority Key Identifier:
                keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:85:7e:47:40:c8:dd:fe:1b:02:06:0b:d3:f0:bf:52:8a:61:
         54:99:5b:34:b2:12:b5:e9:ad:6a:92:ef:27:1d:53:02:8d:d6:
         4e:00:5e:c3:42:3b:d5:56:4b:f1:3e:1b:31:5f:30:71:51:e5:
         38:dd:82:cc:bd:a8:0a:9d:aa:ab:51:ee:2e:af:70:26:93:13:
         6c:72:43:1d:f9:e9:6e:74:41:c3:87:c3:8e:ab:2e:d0:38:69:
         5d:b6:93:7b:52:a0:fa:58:35:8d:75:08:26:45:d4:34:26:f2:
         dc:4a:b3:6a:ef:a3:15:2e:89:cc:38:72:5e:1c:0e:e5:cb:32:
         10:b8:12:3c:3f:59:b6:09:c3:8d:2f:0a:dc:2c:9c:e8:df:aa:
         bd:03:cd:c5:90:d9:1c:6d:5c:f3:8b:d7:b3:d4:38:d1:48:96:
         ec:ba:01:59:1b:87:1e:f4:74:61:17:1e:1a:a3:86:8c:90:6b:
         de:49:f2:8a:32:67:60:1c:ba:1f:3e:51:fc:65:b0:18:5e:93:
         d3:b0:18:4e:3e:9c:de:d5:c7:16:bc:7a:0f:58:fb:4f:1a:90:
         f1:21:98:63:05:ed:3a:3a:62:63:3b:89:03:b6:8a:98:48:8c:
         67:08:6b:93:ba:49:ab:93:61:91:86:24:9c:fe:fd:15:94:07:
         71:7f:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:52 2026 by rpki-client