Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File:                     NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier:          0xKPzCvnBaxAPDnDwBqnpNqREdFvuFSCKGnRJKVoGRA=
Subject key identifier:   06:E0:F2:99:B1:EE:61:7E:7A:97:4D:BC:AD:F9:AD:FD:F3:16:FA:6F
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer:       /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial:       0B8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number:          12EF
Signing time:             Mon 02 Mar 2026 00:02:36 +0000
Manifest this update:     Mon 02 Mar 2026 00:02:34 +0000
Manifest next update:     Mon 09 Mar 2026 00:02:34 +0000
Files and hashes:         1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: A4GfdbHwrg09Azz8QL/vz/0HoRZzvB1nPq1vNA83TTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2955 (0xb8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
        Validity
            Not Before: Mar  2 00:02:34 2026 GMT
            Not After : Mar  9 00:02:34 2026 GMT
        Subject: CN=69a4d39c-2768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:6d:84:bc:a2:6a:b8:df:9d:47:f4:f2:3f:
                    80:74:96:00:3f:b4:14:44:53:b5:e6:52:d9:f2:07:
                    e1:63:ae:23:4f:33:4c:bd:34:91:61:03:a8:43:e1:
                    6e:93:2c:b4:ba:de:2c:9b:10:68:13:19:d7:54:89:
                    53:b5:fa:7b:5a:ec:2f:b3:ae:16:5a:30:ce:bc:f8:
                    e9:20:f3:dd:38:9a:74:8f:05:20:5a:63:6b:34:44:
                    ab:b8:87:a4:bd:3e:98:3e:35:de:ba:99:0b:3b:17:
                    31:5f:0c:0b:ad:67:f3:d3:2d:2e:f7:27:b8:d8:41:
                    20:8f:a8:77:71:cd:4a:7d:1b:2b:25:b1:6b:74:91:
                    dc:0b:44:2d:81:8f:92:0b:90:b0:af:35:67:5a:d7:
                    7c:ff:5a:73:4c:dd:b2:5f:45:58:16:fc:a7:f8:69:
                    3c:6d:60:9a:5a:b1:2b:aa:fa:ad:16:d4:f4:b1:1f:
                    d4:2b:f4:da:0c:67:7a:21:36:fc:b8:52:bb:a0:ef:
                    fd:8b:3c:74:0e:23:f4:c1:a8:f2:45:2b:ce:17:91:
                    25:40:6c:44:cd:e7:c2:f5:ee:49:25:e2:5d:33:cc:
                    8c:b1:b1:06:0c:2d:15:e1:9d:83:20:6f:f8:b5:a7:
                    b0:b9:92:fc:5a:bd:50:3c:aa:33:94:b6:c5:86:7f:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E0:F2:99:B1:EE:61:7E:7A:97:4D:BC:AD:F9:AD:FD:F3:16:FA:6F
            X509v3 Authority Key Identifier:
                keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:09:9c:9c:87:44:59:8e:88:9b:c0:f1:b3:c2:ae:d4:f0:1f:
         93:16:b5:3f:3a:d1:31:68:1d:15:83:95:7f:df:56:64:97:ef:
         11:4b:5c:ce:fd:52:63:4b:6e:8f:36:6c:a4:3d:35:8d:f8:87:
         9c:ee:66:af:43:42:f3:94:a8:7d:93:dc:52:e3:8b:04:16:ad:
         85:92:cc:98:82:d4:17:18:ee:bf:76:01:17:85:09:62:aa:ef:
         d0:c5:65:92:ab:d7:e7:0a:09:3e:c1:78:a5:7e:a2:61:c7:fd:
         40:95:bd:92:90:b7:92:c3:88:c9:02:42:45:5d:fc:4f:74:ee:
         75:a9:a4:d2:40:a5:5f:43:45:1f:3d:54:15:57:45:c8:40:fa:
         d7:18:12:dd:7f:2a:a7:6a:53:fa:cf:5a:5d:69:7f:b7:4e:2d:
         06:34:37:c0:0c:3d:3e:d1:e3:7d:79:58:a4:66:60:6d:22:22:
         84:8b:7f:37:17:7c:e6:57:8b:1d:96:f9:ac:4f:95:bb:fb:9f:
         b1:7c:b5:f8:43:f4:30:01:74:f7:40:82:96:f3:35:1a:40:55:
         b8:bb:a6:8f:47:e0:91:aa:26:84:be:d0:b7:35:11:fc:30:42:
         73:73:d6:32:16:2e:3a:f9:e8:e0:41:18:44:a6:23:4a:e4:57:
         21:f5:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:46 2026 by rpki-client