Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
File:                     mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json)
Hash identifier:          09d1UuL0wIwV/yCP2vkmZpvWAuOTAee5oI+SXmrAWiQ=
Subject key identifier:   5B:06:61:B1:9D:AB:F3:02:BA:96:A6:87:A7:FD:66:FB:6F:A5:92:2C
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Certificate issuer:       /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
Manifest number:          0191
Signing time:             Sun 01 Mar 2026 23:50:07 +0000
Manifest this update:     Sun 01 Mar 2026 23:50:05 +0000
Manifest next update:     Sun 08 Mar 2026 23:50:05 +0000
Files and hashes:         1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: av9bFGm8i2Gak2isf4yT6UJTVtGnpQ5Ih+D2Xo3YYi8=)
                          2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: 70legGmeGWDJLjLTpZoQ9AL6l+i0i0dYyab0cFhZx6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
        Validity
            Not Before: Mar  1 23:50:05 2026 GMT
            Not After : Mar  8 23:50:05 2026 GMT
        Subject: CN=69a4d0ae-8b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:b1:5b:7c:63:10:49:17:e3:21:79:95:26:
                    05:79:0d:3e:8e:69:31:8c:7f:b5:8c:1e:3a:c6:6c:
                    50:51:a9:31:59:53:b6:33:3a:c0:44:88:d9:fb:eb:
                    a5:37:1b:fe:9f:e6:59:b1:ab:4d:30:eb:7d:8f:7f:
                    cf:5d:1d:27:5d:87:cd:bb:24:96:3c:fc:3d:e3:35:
                    9b:c7:6f:ef:92:2c:24:1c:a8:58:f4:75:97:73:52:
                    cd:91:17:3b:14:38:46:37:e7:79:68:2e:6d:3a:76:
                    af:37:34:7d:c4:53:f8:25:70:cd:4a:32:0c:af:a7:
                    aa:2a:b1:42:3b:8f:d0:6a:83:26:0e:a9:df:59:ac:
                    65:cd:78:27:bb:e3:60:c5:80:c0:53:d9:51:19:b7:
                    6c:52:bc:e3:fe:0d:e3:b7:fe:69:67:06:d4:0f:44:
                    55:86:08:f6:a5:fa:8e:3b:28:40:76:4b:5e:7f:bb:
                    d1:92:68:09:58:cd:e0:01:d4:49:0a:f8:08:2c:23:
                    c9:e7:c5:01:1f:8f:88:55:45:d6:b0:68:11:75:ea:
                    d3:49:5f:64:ca:66:bc:d8:60:8d:b0:cf:4d:63:18:
                    95:cf:b8:04:51:0b:80:64:4a:41:13:11:31:5d:df:
                    03:fe:47:67:b8:50:9a:79:b2:21:34:d2:4d:ef:93:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:06:61:B1:9D:AB:F3:02:BA:96:A6:87:A7:FD:66:FB:6F:A5:92:2C
            X509v3 Authority Key Identifier:
                keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:62:5b:f9:ec:e3:46:e0:c5:f4:3b:a6:d7:41:4e:d3:7e:
         0e:cb:4d:22:82:8b:6e:9c:a3:5f:0d:44:d1:93:4a:6c:12:ca:
         fe:03:fd:42:34:40:36:8b:9d:e1:cb:10:d4:ca:4b:b6:a6:aa:
         35:c1:eb:09:24:6e:4a:33:7b:5d:56:21:b1:a7:79:17:10:05:
         3b:53:8a:29:90:51:a7:6e:b3:ae:d0:c2:5c:55:fd:81:46:f9:
         4f:89:bd:82:4e:40:36:f0:82:9a:48:ad:76:3e:5c:48:5b:b6:
         f9:dc:96:02:e0:82:a6:13:d5:ff:31:93:6c:f0:4b:f9:53:3f:
         e5:05:2f:73:47:8f:bb:6f:df:24:5b:cc:7e:c4:a6:4e:ce:e5:
         d7:ff:da:34:a1:39:30:ed:bc:e8:9f:71:2a:82:55:be:f6:e7:
         47:c3:6b:7e:88:86:0f:1b:49:ee:c6:d0:be:b2:a8:d6:0b:e7:
         42:60:6b:1b:83:0d:a6:18:48:71:83:55:47:a6:5f:e6:62:c9:
         bf:c1:15:22:5a:56:91:14:2c:17:cf:89:e9:39:81:89:04:a3:
         86:03:fa:2d:51:8d:23:b2:f7:e1:cb:ce:07:e3:64:95:92:f8:
         41:69:46:6b:87:52:a8:86:16:88:90:74:fc:db:9d:79:13:83:
         ee:3e:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:06 2026 by rpki-client