Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File:                     fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier:          CdIdLZ1Rw+sDiQeg9iqKIlcz4zuAlda6IZ22R3ZlBOs=
Subject key identifier:   D4:AE:42:3B:D0:3A:67:0D:D7:E3:3D:44:1A:47:D3:2E:22:27:A6:BB
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer:       /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number:          78
Signing time:             Sun 01 Mar 2026 09:08:14 +0000
Manifest this update:     Sun 01 Mar 2026 09:08:14 +0000
Manifest next update:     Sun 08 Mar 2026 09:08:14 +0000
Files and hashes:         1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: 5NE9fTyH2KdWJb0RnKU2CDs8g4/8pd63dYXCezVmJuQ=)
                          2: 21C5B04263A311F096468248C4F9AE02.roa (hash: EsPSnLTOkuXRSGQKefe1p2f6RMEUDwMDeK+ind9kj7c=)
                          3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: nT8Gn6kmDh+P+vCU8iV+2GM1ote3Wc58DjS3MS+fe0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
        Validity
            Not Before: Mar  1 09:08:14 2026 GMT
            Not After : Mar  8 09:08:14 2026 GMT
        Subject: CN=69a401fe-09c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:fd:a9:e0:dc:f4:1f:f9:10:38:97:4b:02:
                    b0:d4:2c:05:aa:af:26:da:10:a3:45:64:46:27:5a:
                    22:59:48:a1:7a:81:13:f3:8b:5d:d8:75:67:db:f0:
                    b1:84:60:27:2a:9c:1c:14:68:bd:25:0f:5f:45:46:
                    e9:ae:ae:28:e4:43:8f:10:61:6c:85:97:f5:aa:6a:
                    d5:3a:22:fc:d2:65:14:40:a6:ca:4a:dd:81:7a:fa:
                    29:2d:89:5b:b4:06:92:35:9a:d4:2c:86:4c:4f:22:
                    4c:56:1d:9b:01:ae:fa:5b:c0:52:36:43:ab:55:4b:
                    9f:71:8b:b0:e0:0b:b1:8e:44:81:86:d8:71:2e:9e:
                    ba:e0:6f:be:72:06:26:09:74:29:be:67:2a:2a:9f:
                    2a:14:c1:86:a3:86:05:fc:69:b9:b2:27:74:72:7e:
                    3f:b1:06:f7:1f:dc:4f:a7:50:b0:42:2f:b4:2b:58:
                    4d:d0:70:d5:7c:5c:56:c7:c4:84:43:e5:32:f6:37:
                    55:3f:9d:98:09:91:18:71:b7:fb:f9:d8:35:48:da:
                    18:f5:86:04:64:14:86:92:44:7d:8f:54:79:f2:cf:
                    dc:00:28:f2:fc:fd:e4:8b:62:d9:88:d4:ca:75:8f:
                    c6:9a:03:5a:dd:17:93:a2:dc:74:54:1c:ac:fc:88:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AE:42:3B:D0:3A:67:0D:D7:E3:3D:44:1A:47:D3:2E:22:27:A6:BB
            X509v3 Authority Key Identifier:
                keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:f1:f7:22:67:62:c5:1e:5d:10:ef:3d:fb:cf:f0:1c:7d:
         80:36:86:a3:0a:8b:58:65:7c:34:02:1b:b4:2c:29:91:2a:1f:
         d5:a1:f5:af:45:c9:cf:ab:7e:05:40:09:63:cf:bf:6b:5a:7e:
         c7:3e:bd:f8:2c:25:c3:bf:1c:af:22:cd:1b:be:f8:87:7c:6b:
         3b:37:47:16:76:a6:bd:18:6d:4a:b5:3a:4e:68:e5:27:c0:68:
         5c:ae:5b:9c:fa:30:e1:25:fd:44:de:96:db:ea:a1:f2:10:32:
         ea:67:d5:38:1b:86:a3:bb:01:23:f2:7e:d0:b7:07:9b:81:9a:
         f5:6c:41:4b:10:d7:28:cf:d8:ba:9f:65:f3:e7:9f:2c:b1:12:
         88:f4:94:8f:0c:e5:0f:56:04:af:ce:3b:fd:ae:7f:9f:7f:21:
         0f:b7:91:27:79:64:6d:db:73:af:c9:3a:10:9f:87:26:4d:1b:
         32:30:1d:70:27:cf:f1:25:d5:6e:34:65:c6:e0:d7:74:ea:54:
         37:6b:4a:c3:ce:95:f3:ca:e5:e1:49:20:15:56:46:a6:e8:d7:
         bf:8a:70:42:d5:ae:75:e9:e7:5f:81:9e:b9:fa:44:90:e1:ea:
         4b:3e:1e:02:0c:4f:8a:b1:03:e0:d1:3a:42:61:4c:ab:f2:3f:
         51:3f:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:12 2026 by rpki-client