Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          I8OwZCGYzG+5GB9Lbpu/AZk0buLtTstLP/tHRGwAdZ4=
Subject key identifier:   A0:98:B2:70:95:D9:A8:C3:41:B7:A0:97:21:58:1F:8E:9E:37:C4:86
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          0149
Signing time:             Sun 01 Mar 2026 06:11:48 +0000
Manifest this update:     Sun 01 Mar 2026 06:11:48 +0000
Manifest next update:     Sun 08 Mar 2026 06:11:48 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: Ve/M8ymRNi/cXF2yC45jIc1dBl4NOjpN6T1z+/rhjPI=)
                          2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=)
                          3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Mar  1 06:11:48 2026 GMT
            Not After : Mar  8 06:11:48 2026 GMT
        Subject: CN=69a3d8a4-bdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c8:18:a2:db:29:f7:ff:2c:07:3a:b5:eb:43:
                    be:eb:81:80:70:c4:f0:59:54:d7:1f:8e:3b:18:99:
                    90:1a:99:9c:67:76:01:c3:1d:26:10:92:71:70:2d:
                    fa:2e:92:a7:d7:5d:28:ce:4e:ac:f8:81:bb:8a:63:
                    84:c5:02:50:57:79:54:c2:5a:aa:05:a5:a0:6c:74:
                    9a:72:93:8e:59:d0:35:95:8e:c8:cb:38:b2:2a:0a:
                    dc:35:4f:20:49:78:38:a6:9d:8a:73:8c:98:b6:43:
                    48:49:c5:77:12:db:7c:35:bd:cb:4f:5d:56:a4:ac:
                    e8:dd:dd:d3:3f:1e:24:67:80:ca:49:88:36:c2:45:
                    39:22:cb:13:c5:2e:13:11:21:f9:b3:46:b8:aa:bc:
                    ac:d1:02:65:4c:31:db:1b:50:51:18:d8:35:7e:d5:
                    06:1b:e8:94:cd:60:cb:cf:e1:7f:56:51:c8:db:37:
                    ce:1f:2e:ff:d9:b0:db:f7:80:af:a0:aa:1c:98:02:
                    a3:d5:8c:e0:56:a8:0b:d3:6f:6f:c8:ca:9b:9e:57:
                    89:ee:34:d1:85:fe:8c:3d:01:ef:b7:8f:ae:00:b0:
                    f5:fd:d6:c4:58:52:41:fd:23:28:03:9c:76:c6:7b:
                    6c:7e:59:0e:78:76:91:7b:ab:6a:49:ed:0d:42:47:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:98:B2:70:95:D9:A8:C3:41:B7:A0:97:21:58:1F:8E:9E:37:C4:86
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:77:86:ca:61:cc:1e:b3:e0:85:aa:51:09:f9:71:a3:07:86:
         a6:b3:8e:a1:d0:5a:29:cf:dc:f3:fc:23:4d:bb:1b:ad:96:4c:
         28:9f:73:0e:8b:0a:98:10:7f:8e:6a:39:6b:3f:7c:71:6c:85:
         0f:a5:f9:d9:8e:93:28:12:de:90:68:25:21:cb:13:29:7e:00:
         18:e3:6f:69:a2:f9:f7:f9:fa:a6:10:c6:a9:96:40:f4:9f:c2:
         54:9e:33:ee:13:99:bd:db:26:02:45:d6:7d:12:b3:aa:f9:ef:
         42:50:9e:60:49:83:2a:f4:ef:31:5b:1b:45:97:6c:50:cf:2e:
         ee:6d:4e:f7:76:db:4a:2b:3c:42:4a:cd:46:7b:e5:47:0f:b0:
         57:df:f5:5b:64:eb:13:37:db:a0:43:31:b0:76:d2:7d:ed:01:
         57:02:92:fa:d9:c1:96:69:4a:5a:4b:db:ac:3b:86:07:13:68:
         15:3f:03:e0:67:80:22:9b:5f:93:bd:84:e0:0b:03:fe:23:43:
         b5:db:37:04:86:d1:63:ed:f3:75:fe:01:a3:a4:25:d4:94:d5:
         0c:09:6b:92:02:8c:b2:61:4f:b1:e0:19:77:50:3d:70:06:bf:
         31:43:a5:4b:8e:60:76:8a:0e:9f:d9:26:b1:fd:98:54:88:47:
         ce:25:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:40 2026 by rpki-client