Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
File:                     Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json)
Hash identifier:          4G31SvfjAGzkgjX5JOt1GabKuuo+zyuSFXZHvE4ruxo=
Subject key identifier:   0B:9E:4D:6E:7A:AE:92:B8:84:04:F4:DA:11:43:CF:76:B5:2E:D3:2F
Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46
Certificate issuer:       /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
Certificate serial:       0BA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
Manifest number:          0C0B
Signing time:             Sun 01 Mar 2026 23:24:44 +0000
Manifest this update:     Sun 01 Mar 2026 23:24:43 +0000
Manifest next update:     Sun 08 Mar 2026 23:24:43 +0000
Files and hashes:         1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: DJHAfqJsA3iBL1rhn+15n6MCpI6dKqHgxoFb/Iob4DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl
                          rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346
        Validity
            Not Before: Mar  1 23:24:43 2026 GMT
            Not After : Mar  8 23:24:43 2026 GMT
        Subject: CN=69a4cabc-2f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:76:74:c5:bb:fc:f8:49:e5:e2:07:ef:6b:1c:
                    4f:85:d0:3e:ee:cc:c5:6f:6c:03:47:ce:1f:75:e2:
                    47:9f:0f:f7:65:61:d8:20:f9:f5:84:76:01:4d:5d:
                    6c:81:21:72:4a:a5:3e:a1:b9:d9:86:43:7f:57:72:
                    26:dd:bc:3e:6d:e9:d6:9c:c1:7a:f3:65:7f:08:7e:
                    82:98:3b:be:69:40:f6:99:57:7b:d0:33:c1:ff:72:
                    7e:8a:ea:2d:eb:28:8c:aa:07:f9:66:17:a4:33:a7:
                    32:01:ec:88:b8:eb:48:e0:4a:21:f9:53:f1:a2:8a:
                    4e:6a:87:ec:54:dc:3d:cf:60:13:db:7e:8a:7a:b7:
                    d0:ad:79:9b:7a:8f:a2:40:f6:45:ab:d0:e0:b1:21:
                    97:52:33:18:2e:1e:7e:a1:88:e2:90:6f:7e:67:23:
                    6b:39:10:84:ca:87:64:36:15:1b:91:e5:74:42:a4:
                    c3:8d:5f:1b:b6:c8:59:ed:fc:53:74:af:c4:db:dc:
                    c4:bb:f5:8e:3e:7d:8a:02:b6:f9:e3:86:de:a7:35:
                    bd:6b:b8:cb:56:90:32:12:8a:ed:8c:a2:30:9f:4a:
                    2a:b3:5a:70:95:c7:84:11:96:79:34:f8:70:47:af:
                    a5:69:98:bc:bc:44:eb:7d:16:37:7f:e0:36:b8:76:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9E:4D:6E:7A:AE:92:B8:84:04:F4:DA:11:43:CF:76:B5:2E:D3:2F
            X509v3 Authority Key Identifier:
                keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:66:5b:0e:8d:65:99:1e:6e:b1:55:a8:dd:6c:5e:a6:4d:a7:
         d2:96:28:f1:ad:f2:d0:12:ce:a7:eb:d8:46:3c:ae:05:27:4d:
         6e:83:d3:5f:29:97:3c:94:c0:f6:81:0b:15:63:8e:9b:05:f9:
         9a:62:51:18:06:a4:ae:38:97:6e:59:88:ee:c3:ca:ab:97:be:
         70:a0:a3:e0:2f:0d:c9:77:cc:0d:16:fc:1b:c6:d4:44:18:13:
         ba:fa:68:a8:23:31:9a:ff:20:8b:1a:ba:69:b8:13:77:13:c3:
         01:4d:2a:98:18:bb:52:97:f0:dd:9c:b3:ed:6b:af:4e:3e:90:
         a0:bd:98:9a:65:bb:75:2a:4c:0b:1a:da:9e:d5:d9:36:f3:74:
         fb:2f:a9:31:51:fe:14:23:f7:01:55:29:96:3a:b5:02:88:b8:
         67:9e:90:5d:91:b6:20:e7:fc:c2:47:db:d7:93:33:56:ae:55:
         f6:f8:34:fa:d7:ac:f8:30:0e:06:c6:74:d0:d8:f6:49:ad:51:
         4b:76:a8:3a:72:15:93:4c:18:4d:82:e9:33:7f:2c:ff:bb:41:
         f8:f2:22:aa:97:7b:ab:69:68:60:e5:47:de:46:cb:c8:2a:57:
         b0:64:41:16:6f:40:cf:f2:90:ce:99:ca:8c:b8:d5:3b:9b:c5:
         07:a6:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:22 2026 by rpki-client