Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File:                     AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier:          18eMPjMcFM5Uu4mkCkckWp8lV6XfMkiCuNqeNJzwV78=
Subject key identifier:   B9:8C:EF:78:C8:BB:CB:98:3E:30:F8:30:59:5C:81:42:23:93:3A:5A
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer:       /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number:          01BB
Signing time:             Sun 01 Mar 2026 23:55:29 +0000
Manifest this update:     Sun 01 Mar 2026 23:55:27 +0000
Manifest next update:     Sun 08 Mar 2026 23:55:27 +0000
Files and hashes:         1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: Xc784LDJfyfgo0FLcrih33aEMD54f8TYK1WWEqaAHDY=)
                          2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=)
                          3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
        Validity
            Not Before: Mar  1 23:55:27 2026 GMT
            Not After : Mar  8 23:55:27 2026 GMT
        Subject: CN=69a4d1f0-3fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:af:27:fd:ed:2b:ac:58:69:69:cd:f3:c8:
                    65:04:89:ae:5b:39:d6:c2:dc:56:8c:00:38:e4:a6:
                    c7:82:61:2e:06:2b:e1:05:45:b2:76:e7:9f:c6:92:
                    5d:3f:98:07:7e:11:6b:3b:3d:09:2a:00:6b:4f:89:
                    aa:a0:1d:37:7b:84:91:8f:dc:94:3f:6f:a4:b2:5e:
                    07:3f:21:e0:c1:ff:a8:c3:1b:6b:4b:97:3c:99:14:
                    be:f3:07:8c:ef:7c:0c:05:ce:4f:74:73:0f:c5:eb:
                    e6:1f:20:19:76:06:af:fc:82:e9:d1:10:57:19:1b:
                    dd:ad:92:e7:9b:99:00:c9:d3:b2:83:06:20:d3:d1:
                    93:37:a6:19:ae:48:51:fd:00:2e:0a:f0:6e:97:e2:
                    4d:cf:19:7c:68:12:e3:be:a3:6e:4b:ff:61:ad:61:
                    16:3c:20:ae:4f:87:2d:7b:d4:3d:9d:32:dd:e8:c2:
                    ae:7f:64:60:ea:1d:bf:c4:21:0c:ec:c4:10:cc:9c:
                    c3:df:e0:c0:61:a4:2f:ff:9f:e7:08:ab:af:5c:db:
                    3d:f0:62:e1:dc:4d:b0:95:8a:86:41:f8:0b:83:1f:
                    ad:34:f7:ea:0e:a0:2f:42:ea:05:c5:92:42:45:82:
                    3f:4c:1d:db:c7:b9:cb:e9:0a:08:8c:4b:fd:78:b2:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:EF:78:C8:BB:CB:98:3E:30:F8:30:59:5C:81:42:23:93:3A:5A
            X509v3 Authority Key Identifier:
                keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e4:d3:a3:13:6c:d5:35:e6:15:ee:77:8f:9b:73:7b:b6:45:
         39:95:62:d0:f7:4b:1b:b2:ce:f2:c5:22:f7:4f:55:84:c2:39:
         dc:0d:cf:73:c8:0b:2b:eb:a9:02:f2:ea:d2:f8:9c:d6:e2:2c:
         96:cd:74:48:f3:e4:42:47:d6:b9:88:78:7c:69:b3:8f:27:dd:
         cf:42:91:e8:2b:63:f0:cf:63:81:77:25:b9:43:35:d6:5b:e8:
         56:74:a0:28:53:87:65:17:b5:3e:73:b7:7f:4c:ce:3d:0f:63:
         5e:ab:18:24:ad:10:86:ed:c9:ef:42:94:e3:93:bd:13:35:fc:
         c8:97:eb:49:ec:47:26:bd:17:b2:ee:24:c7:30:ce:b4:53:61:
         fb:cd:a3:f0:a4:1b:20:e7:0c:c1:83:a9:1a:d2:e4:27:06:56:
         c4:f3:15:f8:71:58:1c:c5:e3:87:f8:18:cb:54:90:d1:32:79:
         b9:20:67:9b:d4:63:90:61:1e:dc:c3:b8:2b:a6:23:bd:a2:ea:
         c4:e5:4a:b0:74:c2:8f:c8:84:be:4b:93:ce:b4:27:aa:16:78:
         39:1a:f9:59:7e:da:b1:f5:92:8c:b3:35:ea:0a:03:f0:27:0e:
         45:5f:2c:7d:14:46:d3:6b:77:a1:90:51:06:00:42:9b:d3:09:
         8c:55:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:39 2026 by rpki-client