Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File:                     kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier:          7K2FNdI+YdTRsXAmEgMrACBlij1utrebj1v5KHVit1E=
Subject key identifier:   71:61:47:4A:29:00:E4:E0:45:85:C1:1A:CA:DD:B8:C1:AD:8C:37:33
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer:       /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number:          0114
Signing time:             Sun 01 Mar 2026 06:55:17 +0000
Manifest this update:     Sun 01 Mar 2026 06:55:17 +0000
Manifest next update:     Sun 08 Mar 2026 06:55:17 +0000
Files and hashes:         1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: qwkJexF0rx5AjXsMBmQRWR50iE+HWcmQemxwKKEVFz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
        Validity
            Not Before: Mar  1 06:55:17 2026 GMT
            Not After : Mar  8 06:55:17 2026 GMT
        Subject: CN=69a3e2d5-99f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:70:c2:b8:c9:4c:b9:87:31:c6:fa:0d:db:
                    5f:73:93:3a:bc:6b:b2:d5:5c:70:87:d3:78:0a:ef:
                    61:44:44:1c:42:73:13:e9:9e:58:52:c3:fd:81:0b:
                    89:a9:06:dd:b9:dc:a0:84:18:b4:e3:19:b6:c6:de:
                    a8:cd:89:7e:86:d8:e6:2b:2d:9f:4e:5b:f4:0b:30:
                    97:f2:36:f4:a9:c2:3a:29:14:e8:21:f9:c7:68:c3:
                    a4:74:df:9a:fc:99:7c:68:e9:ee:dd:ae:b6:dd:43:
                    19:26:9c:c1:d8:5b:d5:b3:9d:13:1f:81:1e:98:36:
                    6f:36:7c:ca:cb:54:3f:9a:eb:c3:bf:04:6b:c0:36:
                    41:f5:07:a7:97:ee:bf:fd:0e:13:9c:d7:c7:0e:88:
                    14:ec:8c:15:b1:01:59:7c:3a:61:50:e9:dc:8b:fb:
                    95:d0:68:c5:87:e8:91:44:b6:db:4f:0b:b6:8a:d7:
                    e8:b0:51:4a:d9:fc:d8:ea:ad:ca:08:f1:c1:19:b8:
                    85:3c:2b:dc:73:b6:4c:dc:5e:53:c4:f1:59:f9:61:
                    57:d9:35:83:89:ca:bd:de:11:a7:3b:2b:e8:5e:84:
                    d0:50:2d:73:d2:fc:a8:fe:3c:94:43:6b:ac:98:b8:
                    8a:80:16:83:36:3b:95:9f:85:4d:d4:4a:c5:4c:96:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:61:47:4A:29:00:E4:E0:45:85:C1:1A:CA:DD:B8:C1:AD:8C:37:33
            X509v3 Authority Key Identifier:
                keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:6a:95:4a:80:46:ce:9f:7f:fc:16:6a:28:14:eb:12:62:
         27:6e:18:ff:07:ac:49:9c:43:13:61:15:59:58:cb:2a:55:89:
         ab:90:af:65:f1:15:98:11:4d:7b:e3:95:6b:e5:a8:99:a3:ba:
         c7:78:d8:32:b6:7c:01:0d:cb:c8:50:44:4a:38:65:13:07:1d:
         7a:ca:ce:21:29:e3:be:68:0e:be:4c:45:9d:90:db:7d:90:41:
         9b:a1:ea:59:de:8a:73:6c:69:6c:fd:bc:f2:d4:5a:ff:08:89:
         cb:ee:c3:4d:17:39:c3:e7:5d:cd:76:84:f8:89:d9:c1:31:77:
         3a:cf:4f:19:07:1d:69:74:39:0e:a0:71:c5:6d:7b:ce:26:dc:
         55:9c:98:ea:0a:68:8f:77:4c:10:74:28:69:4b:a6:93:4e:36:
         d0:40:77:21:21:ff:d5:c5:9b:d1:7e:45:53:ac:c7:26:44:f4:
         d8:90:64:10:14:43:4e:7c:86:41:6e:61:47:7b:ba:1b:e6:b0:
         34:43:fd:c5:04:0a:09:81:e8:bb:75:da:8d:2a:a6:46:07:e6:
         3c:86:00:35:11:eb:52:be:c2:f4:b7:fc:e4:1c:09:e0:1f:5b:
         ab:66:49:9f:44:47:33:4e:5b:65:ba:ca:e1:a8:b9:3c:85:73:
         a0:06:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:45 2026 by rpki-client