Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File:                     o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier:          ezAns6nWFlXosfh+/k6y5YrMZ7TK3vZUDSdpmdawzMw=
Subject key identifier:   39:4B:F1:2E:1D:E1:19:C8:49:31:45:5F:40:0F:9C:0B:C6:EC:0B:09
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer:       /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number:          0669
Signing time:             Sat 28 Feb 2026 23:18:10 +0000
Manifest this update:     Sat 28 Feb 2026 23:18:10 +0000
Manifest next update:     Sat 07 Mar 2026 23:18:10 +0000
Files and hashes:         1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: ofJIo5/EJ+QJoUB9WdgKkVsEjnJu4EKZ45JMgyIROYA=)
                          2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: hu2+qLAxtL25+jx2uf0y1VnIhzZpxlsSLOTl7IDraso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
                          rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
        Validity
            Not Before: Feb 28 23:18:10 2026 GMT
            Not After : Mar  7 23:18:10 2026 GMT
        Subject: CN=69a377b2-4eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:7c:ad:f2:96:47:6f:7f:d8:67:75:e6:ce:
                    6a:f4:1f:44:4f:aa:5d:d2:14:b2:82:1f:8f:9b:21:
                    50:32:81:a3:70:3a:b7:9b:68:2b:3d:87:72:0f:11:
                    16:93:4a:8c:e7:9d:8e:17:fe:43:67:20:1c:84:28:
                    fa:db:4c:97:47:8e:15:48:59:12:d9:31:fd:ef:6d:
                    b3:e7:6e:98:30:76:eb:32:1b:59:e7:88:29:0d:b2:
                    e9:45:dc:cc:cf:c6:b5:27:98:fb:c3:17:ae:de:e2:
                    88:42:95:b1:c1:ef:49:13:e3:41:15:69:28:9d:c4:
                    7d:29:54:fb:e1:08:11:b6:8c:91:7e:e7:5b:b1:e1:
                    4c:a7:a6:56:05:11:1c:2e:91:d3:72:e5:96:48:f6:
                    1b:19:13:8c:a3:e7:e9:44:14:54:49:52:a5:3b:b3:
                    b7:00:ce:2a:62:81:d4:cf:13:93:0b:d7:49:31:cd:
                    44:13:13:66:fc:d7:df:1c:c3:19:e3:b7:67:fd:15:
                    21:f9:8c:6f:10:da:6d:d7:56:87:fc:cc:a4:f1:d7:
                    e7:47:ca:8a:c4:46:fa:43:9f:49:da:33:4f:0c:b8:
                    b3:5e:b0:26:35:01:bd:31:85:5e:4b:fd:f0:c0:77:
                    5c:b5:ab:e0:0d:8b:a1:9b:ea:f4:7e:b0:52:24:6f:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:F1:2E:1D:E1:19:C8:49:31:45:5F:40:0F:9C:0B:C6:EC:0B:09
            X509v3 Authority Key Identifier:
                keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6b:58:df:9f:13:96:12:13:84:83:83:62:a7:7c:78:88:93:
         75:3b:40:84:62:d6:8d:d4:04:e3:dd:c2:b2:b4:a5:65:2a:06:
         a4:43:5e:45:3a:fc:cb:27:73:bf:6f:8a:ca:5d:c0:47:e6:4b:
         d9:a5:31:82:63:fe:64:aa:85:34:d9:6a:99:b2:7d:a7:15:7e:
         ff:82:a4:11:98:07:32:c9:05:8e:06:2f:b7:ce:d2:0a:eb:4d:
         c8:c2:9b:9f:be:c4:c4:f4:d8:01:fb:b3:5c:72:d6:1a:9f:c5:
         cb:79:e9:a3:0a:c3:7a:73:c7:e2:f5:26:97:c8:0c:09:a0:17:
         e8:50:f9:73:c5:bc:2a:94:88:14:99:3b:64:39:e3:cb:22:65:
         80:04:5e:73:11:48:08:3a:a0:e2:06:ff:d7:9b:73:71:f8:1b:
         ce:ff:64:06:5a:6d:7d:21:7f:7e:d2:35:36:3d:c2:c1:ff:7d:
         dc:a2:a8:2c:d5:31:18:6c:7b:75:25:46:17:84:5c:e6:7c:c4:
         fe:be:57:68:43:ac:3a:3d:5f:e9:ea:c0:9f:aa:4f:f7:19:bf:
         9d:82:39:e2:7c:bf:87:45:dc:29:bf:3d:ae:97:d9:ec:d3:f4:
         4f:c7:99:2e:1b:0d:2f:8c:e4:08:76:fe:5a:28:16:ed:92:6b:
         3b:94:ce:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF
QkUzNDE3MEUwHhcNMjYwMjI4MjMxODEwWhcNMjYwMzA3MjMxODEwWjAYMRYwFAYD
VQQDDA02OWEzNzdiMi00ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Rh8rfKWR29/2Gd15s5q9B9ET6pd0hSygh+PmyFQMoGjcDq3m2grPYdyDxEW
k0qM552OF/5DZyAchCj620yXR44VSFkS2TH9722z526YMHbrMhtZ54gpDbLpRdzM
z8a1J5j7wxeu3uKIQpWxwe9JE+NBFWkoncR9KVT74QgRtoyRfudbseFMp6ZWBREc
LpHTcuWWSPYbGROMo+fpRBRUSVKlO7O3AM4qYoHUzxOTC9dJMc1EExNm/NffHMMZ
47dn/RUh+YxvENpt11aH/Myk8dfnR8qKxEb6Q59J2jNPDLizXrAmNQG9MYVeS/3w
wHdctavgDYuhm+r0frBSJG9zlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlL8S4d
4RnISTFFX0APnAvG7AsJMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE
QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ
dWNORDdVU2NGcERyNDBGdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGGtY358TlhIThIODYqd8eIiTdTtAhGLWjdQE493CsrSlZSoGpENeRTr8yydz
v2+Kyl3AR+ZL2aUxgmP+ZKqFNNlqmbJ9pxV+/4KkEZgHMskFjgYvt87SCutNyMKb
n77ExPTYAfuzXHLWGp/Fy3npowrDenPH4vUml8gMCaAX6FD5c8W8KpSIFJk7ZDnj
yyJlgARecxFICDqg4gb/15tzcfgbzv9kBlptfSF/ftI1Nj3Cwf993KKoLNUxGGx7
dSVGF4Rc5nzE/r5XaEOsOj1f6erAn6pP9xm/nYI54ny/h0XcKb89rpfZ7NP0T8eZ
LhsNL4zkCHb+WigW7ZJrO5TOKQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:40 2026 by rpki-client