Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          d2NFleBllAZNEh/UYbXnTHvLj9Jzj24WB+xLL7Jzh9g=
Subject key identifier:   A3:74:39:07:4C:6D:A7:47:00:FC:57:54:7A:3A:40:2B:E6:FA:1F:53
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0CBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0CA1
Signing time:             Sat 28 Feb 2026 18:42:44 +0000
Manifest this update:     Sat 28 Feb 2026 18:42:43 +0000
Manifest next update:     Sat 07 Mar 2026 18:42:43 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: 23As6icx+9OxJbVE1T+UIwGMQHDeo0Ld/sDfvr6+iAI=)
                          2: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: z1N4ZBbmDA74CeApYZJ0hayWkNkXn88p5+Sn2lK0fBs=)
                          3: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: ENBlU08ik+Qfp6syg0uFnHZazCJHhmbXL8w+7drsKnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3258 (0xcba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Feb 28 18:42:43 2026 GMT
            Not After : Mar  7 18:42:43 2026 GMT
        Subject: CN=69a33724-e168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:29:74:22:98:db:a1:0a:1e:51:43:7d:7a:
                    03:29:7f:1e:b5:bb:94:d9:0b:80:90:ca:75:d3:6d:
                    85:41:3f:0b:94:b1:4f:20:cc:d2:d2:b0:af:31:9c:
                    1c:a2:14:38:ac:ef:f0:9c:b6:90:de:36:ba:2a:17:
                    f5:78:af:e8:25:20:99:eb:58:a1:53:0a:74:ab:a0:
                    3b:3e:23:59:c7:c8:b7:ad:a5:f0:dd:7d:0f:7e:96:
                    46:c7:c8:eb:39:2a:d7:05:35:a7:d6:21:8f:17:a4:
                    e4:7f:d7:72:cf:62:01:63:9d:31:5e:24:ec:5a:09:
                    8d:5f:04:7f:9c:b3:18:80:43:95:76:97:cb:74:b4:
                    c3:1f:68:50:c8:93:a2:d0:90:56:42:11:fb:de:5a:
                    e6:2e:1f:ff:e6:f3:33:21:b4:32:5d:c1:12:1f:b9:
                    8c:7d:9b:66:15:c4:ad:02:78:a7:ce:32:30:92:33:
                    06:f4:4e:e0:eb:16:42:29:3a:cb:72:81:15:73:4d:
                    98:72:21:4c:aa:2f:67:97:06:96:dc:9b:50:48:cd:
                    bb:bf:45:b4:f8:9b:64:f7:bf:1b:5b:92:7c:f7:5c:
                    6b:85:4d:13:68:2b:8b:84:e2:97:59:ed:ef:d4:8e:
                    55:db:8b:9e:c8:af:d3:5b:cb:ed:00:85:7d:96:2a:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:74:39:07:4C:6D:A7:47:00:FC:57:54:7A:3A:40:2B:E6:FA:1F:53
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:97:24:c3:e0:b9:8e:3a:3a:80:4c:55:89:d6:a3:77:60:55:
         cd:d1:f3:98:9e:04:c1:27:33:6a:c4:f8:c2:b8:e3:71:2d:40:
         bd:64:eb:d8:2e:0c:a7:d5:cd:2c:22:df:50:fa:da:8c:5e:e0:
         ff:6e:99:1c:41:ee:6d:6d:61:ff:c4:d9:42:4d:80:2c:23:3e:
         b2:ad:30:25:36:50:5f:79:13:64:d6:44:d2:23:4e:73:6a:67:
         b4:c4:71:1b:58:ce:0e:f2:26:30:e1:0c:dc:53:31:41:bf:26:
         50:71:9e:2a:7f:62:84:dc:66:82:f9:02:a5:4c:db:c0:8e:9a:
         c2:38:d9:9b:24:50:d7:28:d4:c0:c2:63:0b:d4:b8:a2:1a:0b:
         0b:ba:5b:e5:25:31:df:b6:15:89:b3:ef:f1:f1:06:b2:da:2f:
         f2:5f:9d:09:89:53:b1:18:6f:3c:8e:d7:5b:12:d1:03:14:61:
         bf:56:42:db:bd:99:d3:91:c2:3d:61:21:85:f4:f2:f4:ec:88:
         9d:ce:6b:60:c4:bf:d4:4b:7a:59:4e:71:9b:cb:6c:86:8d:6d:
         3b:f1:0f:c0:02:b1:2e:45:9a:4f:b4:77:fb:65:50:3c:b4:d3:
         e7:6b:8a:8e:76:8e:50:88:86:47:44:e1:4f:7e:78:aa:af:f3:
         15:6c:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:08 2026 by rpki-client