Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
File:                     xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json)
Hash identifier:          Y88k4WyOP6AgkLOXxEEkzI27J9rkyfwNkWoBkkcFZvY=
Subject key identifier:   E9:FA:9F:22:40:F4:5D:E2:66:D2:E3:D0:A5:67:C5:D6:77:50:61:56
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       06F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
Manifest number:          06E3
Signing time:             Mon 02 Mar 2026 01:16:42 +0000
Manifest this update:     Mon 02 Mar 2026 01:16:41 +0000
Manifest next update:     Mon 09 Mar 2026 01:16:41 +0000
Files and hashes:         1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: AcW9kXXdCkz2eJLUBcHtYAd+m8e1hCHrbpj2yNEcQVw=)
                          2: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: mZPmB2gMHhMYq9+9YsdLGZPVF9Xjisj7wRrJK9Yzmx4=)
                          3: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: nPFuvMawG4xx+gCcX5sOjIYDGXFIgyL0vbMikWZz2Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
                          rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Mar  2 01:16:41 2026 GMT
            Not After : Mar  9 01:16:41 2026 GMT
        Subject: CN=69a4e4fa-f572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:7a:2d:ab:d9:25:6e:e9:60:f7:0c:4c:b6:
                    e8:3f:61:03:07:98:d8:1d:6e:33:c3:4d:a0:d3:9e:
                    28:19:62:e8:82:15:ab:dc:be:f9:7e:4f:54:9a:20:
                    6c:b2:95:87:70:1c:d0:1b:e0:ad:f3:bd:61:a0:0f:
                    c6:d6:71:ba:b7:2f:75:bd:72:14:21:68:38:d4:fc:
                    d4:8e:31:0f:5b:f3:a0:a7:5c:b3:02:fd:2b:31:5b:
                    2f:d5:28:0f:5c:53:8d:3e:d7:ac:c6:68:6a:58:21:
                    f3:71:f3:48:b7:ea:12:c4:47:85:ba:35:0b:e9:ef:
                    3a:da:02:04:36:1f:ce:4e:48:ec:5c:33:c2:db:2a:
                    3e:af:0d:b8:22:db:cf:10:ac:88:72:35:e6:cb:bb:
                    be:07:48:8a:0e:c8:c6:f7:3b:67:58:6d:70:d6:78:
                    11:6b:11:9c:bd:1b:7c:fd:11:64:01:b8:de:28:04:
                    7a:da:86:ae:41:b7:43:c6:2a:07:7e:fa:1e:e4:19:
                    a7:12:75:fc:bf:a0:b6:00:8f:62:2a:c3:4b:b8:62:
                    85:d9:98:7e:e9:9c:ac:84:14:74:f3:48:28:12:ac:
                    f0:a1:f0:5f:84:93:67:e9:1b:a6:3a:a1:33:33:82:
                    38:3a:79:e2:79:8f:89:fd:13:ff:a4:67:28:72:05:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:9F:22:40:F4:5D:E2:66:D2:E3:D0:A5:67:C5:D6:77:50:61:56
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:74:54:16:74:76:e8:73:74:d1:aa:eb:6d:42:5b:9c:83:00:
         5d:95:cf:59:b3:6d:4b:6c:4e:4d:12:2d:ef:4e:e7:fa:42:e9:
         73:61:44:59:e8:53:20:f3:99:66:e8:bb:33:c8:cb:20:f0:9f:
         17:01:45:f9:1a:3b:df:31:b7:01:a2:5f:80:92:4d:3a:4d:77:
         f5:be:74:69:24:2b:15:4c:72:17:ec:75:b0:ba:30:c8:49:85:
         b8:2b:a7:b3:f0:c3:26:f6:98:54:59:24:16:c1:58:ed:df:9a:
         50:94:b6:80:6e:34:03:2f:7a:1f:c9:3f:16:20:d1:4a:9b:d6:
         81:60:7e:b6:ec:c0:42:78:62:18:5b:b7:55:b9:c2:a2:07:f5:
         95:4e:7f:3b:2c:b3:4a:61:4c:7c:4d:17:12:75:27:09:a6:63:
         48:08:c6:e5:16:f6:df:7e:33:88:56:86:24:00:88:a5:65:cc:
         0e:a8:a8:59:3c:73:85:ab:2f:8d:0d:5f:82:39:32:31:d8:59:
         b6:73:1a:cb:cc:66:45:91:e8:16:89:b5:d4:90:e0:cf:52:1e:
         62:4c:35:58:36:84:4e:ed:8a:b8:f3:06:82:0f:2c:f7:16:9d:
         b6:76:8d:81:a3:5e:dc:42:8b:f8:e6:38:8a:2a:25:4d:2d:0a:
         45:61:37:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:11 2026 by rpki-client