Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
File:                     t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json)
Hash identifier:          qyviMoot5IXsQ5n9ODt8QwxTPhvv9nlZue1BI1oER/o=
Subject key identifier:   EB:F2:4B:C4:59:5C:94:CA:E7:94:AA:64:B0:74:EE:93:3F:FE:B1:B1
Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07
Certificate issuer:       /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
Certificate serial:       04D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
Manifest number:          04D6
Signing time:             Mon 02 Mar 2026 01:12:02 +0000
Manifest this update:     Mon 02 Mar 2026 01:12:00 +0000
Manifest next update:     Mon 09 Mar 2026 01:12:00 +0000
Files and hashes:         1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: BSTGFU8h7X/CdsZ6fCsdd6SZ7hSjnaPp2HB96rjXxTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
        Validity
            Not Before: Mar  2 01:12:00 2026 GMT
            Not After : Mar  9 01:12:00 2026 GMT
        Subject: CN=69a4e3e2-faf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:6f:58:07:4e:74:a6:5e:05:a1:47:8e:17:
                    34:eb:5c:ce:b7:fa:07:17:e7:91:bd:2d:6d:c6:1e:
                    6b:f5:3b:e2:db:66:6c:a7:96:36:8c:dc:30:d2:9a:
                    90:8d:1a:9c:b4:32:10:2d:ea:e1:2f:f6:b9:9a:ea:
                    f0:11:28:5f:a7:32:8f:35:74:be:65:e2:53:6f:c7:
                    f2:74:9f:2f:75:6e:43:38:d6:21:c5:64:c2:6b:05:
                    67:fe:af:d2:e9:04:c8:38:2c:a2:d4:01:35:27:41:
                    bf:b8:23:d6:91:4a:03:fe:85:7e:b5:26:ff:4f:7f:
                    0c:09:22:2b:e9:85:06:9f:80:33:6e:72:cb:7a:5d:
                    2e:3a:ff:d5:75:5c:44:20:9e:fc:b0:15:b6:ee:30:
                    72:4e:46:95:cf:ce:cf:bf:42:4d:70:39:1e:45:4d:
                    b1:25:df:78:66:ff:53:01:9c:63:b2:76:ff:b6:c3:
                    5d:02:2c:d3:6a:f5:15:10:a6:84:0d:ae:58:9f:91:
                    34:df:31:f0:60:f0:f1:92:d3:34:58:8f:dd:77:74:
                    e3:9b:e1:22:46:a1:3e:dc:da:ad:e3:bc:83:b8:92:
                    a8:b2:ff:6a:9d:3f:6e:28:8e:ea:90:a9:f1:d9:3a:
                    79:73:5d:9f:39:32:d8:2b:23:04:2d:c6:b6:56:4f:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F2:4B:C4:59:5C:94:CA:E7:94:AA:64:B0:74:EE:93:3F:FE:B1:B1
            X509v3 Authority Key Identifier:
                keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:23:50:af:d4:ba:3f:04:91:73:20:d9:18:42:a6:77:d8:90:
         a2:bd:4c:f4:fb:e2:c7:51:74:2a:1e:51:d3:3e:d8:9d:af:16:
         ad:26:c4:f8:e3:08:64:ad:ab:5e:a4:f1:3c:0e:4c:7f:a9:0d:
         1d:a6:b5:a7:7f:a7:58:46:05:c1:fe:9d:ae:bf:70:c5:1e:a3:
         df:17:e8:64:ba:08:3e:35:25:74:bc:47:c6:00:48:e5:b1:6e:
         17:d1:76:c0:74:a7:f4:c3:1f:5d:2f:31:12:38:27:f9:61:7e:
         98:8d:84:60:75:ac:53:bf:44:ce:9d:47:b2:e4:d1:17:c3:c9:
         23:a6:c5:88:2f:c1:9a:00:37:e4:c8:1d:d1:87:a0:6c:19:b3:
         22:36:9e:15:31:c6:56:9e:13:ab:5b:95:bc:16:e2:1b:6c:d2:
         6a:b0:5e:64:4a:14:20:e7:90:be:26:a2:cc:2b:5d:f2:0b:d4:
         39:e7:1f:45:ed:9b:0a:30:02:d0:a0:26:b6:64:d6:5a:0a:4f:
         27:cd:cc:a2:2c:f2:7a:82:b5:94:6e:b0:a4:f5:3a:62:86:fc:
         9b:a6:29:a1:7f:b8:1c:e9:24:58:61:d6:4a:d4:2c:17:b3:7e:
         60:a7:0a:bd:e4:47:2e:59:f8:27:cd:d4:d9:b6:77:9b:f0:46:
         a3:4b:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:27 2026 by rpki-client