Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
File:                     fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json)
Hash identifier:          ayB6UYKEPCzYbCoTVoQn1FvoxvzNNcqLU3jKrOg1rMg=
Subject key identifier:   EA:9C:4E:7C:63:89:ED:D0:D8:F1:CB:A9:91:AB:AF:E7:96:0F:2E:C7
Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Certificate issuer:       /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
Certificate serial:       06B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
Manifest number:          06AE
Signing time:             Sun 01 Mar 2026 23:20:54 +0000
Manifest this update:     Sun 01 Mar 2026 23:20:53 +0000
Manifest next update:     Sun 08 Mar 2026 23:20:53 +0000
Files and hashes:         1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: ws9LuuNUntkZwLsT9gTQTv05U3Bk5btir55v1r0174I=)
                          2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: kPuYo/VuAVuTpubv3Kdaz3kydg2odPkrq5Tyd/qKQlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl
                          rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Validity
            Not Before: Mar  1 23:20:53 2026 GMT
            Not After : Mar  8 23:20:53 2026 GMT
        Subject: CN=69a4c9d6-7ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:21:a4:3f:ec:81:4c:55:89:e5:22:0a:c5:
                    0c:82:b2:68:44:c1:cd:4f:59:2b:ad:58:e8:fd:f1:
                    d2:78:c2:ba:10:64:6e:39:70:b4:a4:01:a8:86:03:
                    2e:84:05:c2:31:45:12:f3:7f:db:d9:96:02:91:81:
                    8a:4b:19:6a:fb:4f:44:de:bf:6d:5c:b6:be:bc:12:
                    33:69:1d:d4:fa:36:5c:e5:fd:e4:e1:e5:d9:60:3e:
                    47:33:28:ca:9c:91:60:60:d2:4e:44:14:73:de:95:
                    d2:25:ae:dc:f6:44:78:aa:77:06:0c:85:8b:96:42:
                    fa:d5:86:cc:45:59:fc:37:1d:ff:e0:f4:e9:32:c0:
                    74:d3:45:1f:85:90:63:62:2a:e9:ad:4b:e3:6c:fc:
                    73:be:d7:fa:b5:f7:96:0a:45:2b:5b:45:fb:f6:6f:
                    2b:5c:cf:7f:f1:e8:5e:e3:b9:97:e1:2f:e3:b1:8b:
                    3c:d8:ca:79:54:c7:31:7b:13:12:41:f5:39:ea:ec:
                    98:3d:45:f3:ab:e5:a7:96:95:34:02:07:1b:fc:6c:
                    1a:29:61:f0:5a:51:86:5e:c1:df:d7:88:68:92:b7:
                    97:20:c3:bf:d1:cc:e3:51:61:37:48:57:0d:90:e9:
                    d4:e7:4f:c1:a4:c2:25:3c:5f:5c:76:85:0a:f6:d3:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:4E:7C:63:89:ED:D0:D8:F1:CB:A9:91:AB:AF:E7:96:0F:2E:C7
            X509v3 Authority Key Identifier:
                keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:fd:8d:d5:30:14:d5:b1:74:f7:b8:a8:82:2b:c8:4c:7f:d6:
         8a:22:3d:15:2c:0b:fd:c7:f1:4d:98:7c:5f:bc:f8:4e:0a:22:
         52:5e:25:dc:d6:82:67:02:9d:79:38:2e:4e:41:c1:91:6e:93:
         5a:07:24:fa:50:ae:bf:8c:f4:5f:63:77:0b:f3:51:95:5c:db:
         2c:3d:e2:20:70:c7:75:fb:80:35:02:64:e0:f6:b4:5c:34:b8:
         28:35:cf:81:b7:6d:d4:7c:25:7a:c4:f0:b7:1d:b4:94:c8:4b:
         33:0c:40:c5:49:a2:36:e8:61:2e:23:07:68:82:7f:d8:3a:c6:
         b2:7b:55:96:03:c9:9e:3a:6b:ac:dc:e0:81:a4:45:11:8d:7e:
         e9:a9:d0:ca:8d:87:65:a6:54:64:62:99:d1:e4:08:f4:47:95:
         1a:cc:ec:e2:a1:01:1f:5b:cc:c6:d2:85:0c:06:91:e3:8c:b4:
         67:6b:1d:f7:43:15:a0:4b:86:04:d2:4c:49:0a:a7:83:36:2a:
         c0:81:df:27:c3:35:58:d6:59:34:e3:93:a4:0b:b8:cf:7d:d7:
         70:6b:4e:8c:ca:ba:3c:78:a0:0c:c2:e2:17:54:c8:e8:c5:6f:
         cf:97:a4:d3:ce:98:79:12:30:ac:fe:16:4b:ec:77:f7:97:e5:
         43:35:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:29 2026 by rpki-client