Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft
File:                     ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json)
Hash identifier:          WbncrYlnZA7/eWahkiVhuWRK4ar6OtYEARnclOL31QM=
Subject key identifier:   C9:27:AD:32:E5:D4:3D:80:9F:15:25:15:EF:57:C1:7C:6A:48:19:EE
Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9
Certificate issuer:       /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft
Manifest number:          0457
Signing time:             Mon 02 Mar 2026 00:06:55 +0000
Manifest this update:     Mon 02 Mar 2026 00:06:52 +0000
Manifest next update:     Mon 09 Mar 2026 00:06:52 +0000
Files and hashes:         1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: FMk1eJa8UiHM30wOvwAqIuNucpOTXXg4OC68fa1TVwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9
        Validity
            Not Before: Mar  2 00:06:52 2026 GMT
            Not After : Mar  9 00:06:52 2026 GMT
        Subject: CN=69a4d49e-d651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:58:bd:10:8a:94:21:33:9b:44:1d:9e:c6:58:
                    8f:32:9b:2b:b1:34:ac:14:d3:b4:9d:45:36:b1:5e:
                    40:ee:95:6a:61:b4:47:77:3c:4b:d1:34:a9:61:6c:
                    bc:ee:e7:4b:02:40:18:9a:83:09:39:42:9e:5b:3d:
                    f1:12:6b:a7:b7:74:27:5b:77:a1:bd:59:fd:fa:5f:
                    ba:4a:1c:82:47:33:ae:c3:c0:54:be:0e:d3:cb:29:
                    61:7c:f8:01:62:f2:fc:a0:31:67:08:10:37:d6:21:
                    07:3b:a2:3c:67:bf:da:da:23:9a:bc:e3:2f:82:67:
                    b8:db:38:44:6b:65:5a:0b:3e:c4:a2:4c:56:0b:bc:
                    c9:3c:d6:df:21:c6:61:61:c3:4f:a2:3a:da:b3:22:
                    71:c0:cd:ac:e6:e2:30:db:9d:85:74:ae:c5:b6:8a:
                    43:70:0d:09:23:ed:f2:3a:87:99:8f:5d:7a:16:8f:
                    75:4b:41:ec:9d:c7:5f:4c:17:c9:37:bf:da:0c:3e:
                    8f:ee:94:c0:50:27:33:1a:5b:ee:6f:75:7a:5a:53:
                    7f:64:cd:24:1d:80:a5:cd:af:40:42:cd:71:76:90:
                    e5:83:33:b5:4f:a7:6e:67:8a:f3:92:3a:c6:02:f5:
                    b7:bd:7d:c6:f3:8b:8b:9c:9c:30:0a:a5:cd:ff:f1:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:AD:32:E5:D4:3D:80:9F:15:25:15:EF:57:C1:7C:6A:48:19:EE
            X509v3 Authority Key Identifier:
                keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2c:b6:fc:96:cd:de:c3:bd:28:98:bc:b3:65:62:d0:1a:5c:
         69:ba:13:39:09:53:4a:0d:27:2c:8a:da:ea:6d:33:f1:85:48:
         25:f8:c4:eb:88:65:fe:41:38:27:8e:69:59:b9:2a:c5:b3:b6:
         15:c4:76:15:75:50:44:b8:52:3d:19:40:06:be:e2:fc:c7:b4:
         9f:97:cf:e5:d5:b2:97:0a:f2:74:95:26:b5:2e:8d:71:33:02:
         91:06:8b:3f:d1:f3:fa:d2:3b:6d:c3:81:f6:b0:7f:66:fd:b2:
         91:18:22:50:66:31:28:bb:c6:43:65:8e:66:ae:b8:01:3e:0e:
         d1:72:30:a9:59:30:07:c3:df:ff:e3:78:55:ee:bc:64:4e:72:
         85:9c:22:af:6b:e7:65:0a:78:a6:d7:b5:53:50:4d:75:88:5f:
         34:62:62:f6:cb:ce:c7:0c:51:3e:82:b5:ea:c3:bc:73:e2:51:
         00:6a:03:a2:38:14:63:ff:7b:77:a0:e6:c7:b6:36:6f:cf:fa:
         fa:dc:60:86:26:39:63:9a:0f:7a:15:a2:a3:53:ee:af:2a:82:
         6b:90:8f:80:03:7b:bf:a9:52:4f:b8:8a:01:75:2e:d4:12:cf:
         68:65:6c:b0:bf:89:a0:19:2a:e0:3c:d0:c3:03:6b:80:c8:82:
         3a:c2:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:29 2026 by rpki-client