Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
File:                     dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json)
Hash identifier:          bWwPwVl4muPamSlnc7/osM2Ol6itRpOzYuQj0tkDDfI=
Subject key identifier:   E6:39:C2:C4:EB:90:A5:2A:86:68:2B:41:F0:38:18:43:A0:D7:60:B7
Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C
Certificate issuer:       /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
Manifest number:          0DA3
Signing time:             Sat 28 Feb 2026 19:11:54 +0000
Manifest this update:     Sat 28 Feb 2026 19:11:54 +0000
Manifest next update:     Sat 07 Mar 2026 19:11:54 +0000
Files and hashes:         1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: q943Pi7eVt8X0Ut6cV1YC+5vnZ3A25QmYUXCBIHqlF8=)
                          2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl
                          rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150733, serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
        Validity
            Not Before: Feb 28 19:11:54 2026 GMT
            Not After : Mar  7 19:11:54 2026 GMT
        Subject: CN=69a33dfa-89be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:57:90:d1:7f:5b:09:d6:82:7f:3a:ec:e4:
                    4c:e3:ca:3b:3f:93:68:cd:5d:8e:2e:15:6a:a1:b4:
                    e0:3c:94:3f:fa:bc:26:a6:76:68:03:11:7f:3c:98:
                    a9:30:f4:bf:6a:26:1a:b7:3a:b0:75:69:bc:30:32:
                    47:8f:a9:b2:20:90:88:81:d7:42:68:e7:e0:26:59:
                    3d:c6:77:05:bf:40:7e:40:09:02:b8:9f:f3:ec:00:
                    3e:0e:82:98:be:22:6a:d9:57:d5:05:ff:9f:bf:50:
                    71:3d:d1:cc:d4:cb:4d:7f:f2:0c:c9:3d:bd:31:ca:
                    46:1a:62:1b:c8:4f:5b:40:86:1e:1e:64:56:32:9e:
                    e6:b0:e0:d5:37:54:c4:b8:de:25:85:b8:3f:db:9d:
                    0e:32:f3:83:22:02:1e:c1:a1:04:e5:07:71:e8:bc:
                    6d:29:f9:89:0f:58:f0:16:94:f9:2e:be:e3:a2:c9:
                    dc:c0:61:fb:9e:32:4c:ee:2f:75:68:30:4a:95:05:
                    f9:67:d7:ba:4e:3b:a9:4f:ee:72:9d:6c:62:09:ea:
                    6d:e2:d7:37:97:dc:e3:99:2e:4f:f8:6d:2d:fd:d3:
                    2c:17:10:0e:2f:72:a7:82:6b:50:11:67:7e:66:cb:
                    75:fb:88:90:bf:fd:5c:ec:ee:66:14:23:e7:f0:96:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:C2:C4:EB:90:A5:2A:86:68:2B:41:F0:38:18:43:A0:D7:60:B7
            X509v3 Authority Key Identifier:
                keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:7a:d9:d7:96:94:42:1e:87:10:bf:e9:57:a0:c8:1c:1d:
         96:85:21:67:fe:32:c0:3b:2c:f7:e0:5e:b0:df:05:3b:33:da:
         9a:ef:40:12:0d:a9:11:02:9f:72:4e:03:fa:f7:4c:64:95:22:
         17:53:d3:80:96:0a:a9:9a:11:b3:e3:4d:0c:e4:aa:d5:92:cd:
         0e:6c:67:b0:f3:ab:04:bc:de:c2:13:df:ab:16:10:b0:43:40:
         9f:70:7d:89:7c:75:b4:dc:d1:88:29:c4:0b:6d:70:89:e9:e1:
         20:cc:79:d3:35:d9:61:83:b0:49:1e:1f:79:7a:2c:b5:80:b1:
         a0:a3:1c:8c:ec:71:3c:f6:14:4c:af:ef:5b:76:99:2f:8c:5d:
         b7:0e:23:be:15:ea:5f:4a:d2:b5:6a:a5:af:7e:a0:98:9d:7a:
         a3:4e:1d:75:a9:39:9a:29:40:8e:48:a3:2e:d0:3e:30:6b:58:
         2c:85:d6:6d:dd:d1:d8:7c:59:53:41:37:fb:9c:45:42:fa:59:
         5f:64:13:ab:cd:48:2b:a9:4d:f9:18:72:eb:e1:0c:1c:cc:7a:
         9b:ef:a1:c6:c9:f1:f2:69:46:fa:27:e8:10:c2:ad:9a:56:cd:
         66:c0:a6:20:b0:e7:62:75:61:f1:f5:43:4c:03:f6:14:c1:0a:
         71:a6:9d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:02 2026 by rpki-client