Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
File:                     7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json)
Hash identifier:          MqbNQPSAV4DA7OrTrSUpW/jIZ0vMQpNnWPaTljDnomc=
Subject key identifier:   39:4F:C6:14:1A:E3:7B:D0:31:CC:61:63:D6:92:59:4B:9B:98:07:8A
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
Manifest number:          0155
Signing time:             Sun 01 Mar 2026 06:06:25 +0000
Manifest this update:     Sun 01 Mar 2026 06:06:24 +0000
Manifest next update:     Sun 08 Mar 2026 06:06:24 +0000
Files and hashes:         1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: 30Im37y1Z+C/nXDsZ/ZeTHFU3F9y+xNvOmeJwVnfZY0=)
                          2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: CwXxvQd82DMK841MpqVGbyP5fEoZfjolyFEgUa5vlRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Mar  1 06:06:24 2026 GMT
            Not After : Mar  8 06:06:24 2026 GMT
        Subject: CN=69a3d761-c87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:48:dc:94:24:03:4d:87:9c:18:5a:2a:64:
                    6f:36:0c:13:05:ef:c4:c7:48:41:d9:ae:36:22:9c:
                    16:ea:f9:49:22:38:15:c6:13:e1:15:1d:49:ec:41:
                    ea:4b:8f:42:ab:99:c8:7d:0b:c5:6b:f6:fb:d0:90:
                    fa:ca:3c:21:7c:4f:6b:db:54:c7:00:08:5f:60:4c:
                    fb:be:9b:72:91:d3:90:12:45:e2:97:ad:b7:dd:34:
                    51:d4:43:10:93:c9:3b:b6:78:53:1d:6b:c9:f4:12:
                    45:35:c8:8a:24:78:b0:44:5c:44:a6:b2:09:42:d6:
                    b4:74:79:25:54:8b:3f:38:02:7f:bc:40:71:2e:90:
                    ff:6d:c1:eb:2e:70:a5:81:68:2d:16:e0:96:c1:d7:
                    07:f7:c7:9b:8b:a5:9b:60:63:cc:37:7f:a1:43:61:
                    4a:40:b3:91:6a:89:1b:f3:e6:fa:77:8c:44:4c:62:
                    32:04:80:6f:ca:90:21:ac:f0:92:00:f6:64:06:fb:
                    47:6d:9e:68:0b:f9:1d:78:ad:a1:df:5f:6e:1d:f8:
                    dc:31:6e:e7:c2:b1:39:d9:c2:71:09:a4:cb:69:aa:
                    ae:c6:28:cf:13:08:13:9f:20:ee:ed:25:9d:0f:9f:
                    33:c6:d2:cd:ee:c2:9d:a3:9a:21:1a:f1:79:c8:f4:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4F:C6:14:1A:E3:7B:D0:31:CC:61:63:D6:92:59:4B:9B:98:07:8A
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a5:eb:f2:c0:b5:58:4e:6a:49:28:cb:bf:0d:7b:67:2b:0b:
         23:e2:03:c9:0f:0e:84:53:03:65:50:c1:b9:11:c1:3d:e1:e2:
         85:f6:a0:6c:b2:1e:78:b0:99:5d:4f:43:25:9e:d5:f6:b0:22:
         98:78:5d:7e:4e:a4:72:31:f9:83:aa:3d:15:00:4c:a8:72:83:
         d4:4f:ab:cf:b6:54:25:62:9b:da:79:fb:88:31:76:e0:90:29:
         46:83:ac:29:63:86:7f:72:98:9f:83:bd:e6:0a:c7:33:cb:52:
         d8:9e:de:c8:c8:8c:1a:50:55:8f:b5:1e:6b:e6:79:72:59:97:
         88:a1:d4:cc:44:b2:5a:49:69:99:69:2b:08:22:17:ce:24:35:
         1d:79:3a:dd:2f:1a:69:33:3c:ef:67:e0:b8:b0:23:b7:2e:73:
         5c:42:df:1f:db:51:36:43:8a:07:3f:1a:41:70:63:22:23:91:
         16:fd:d8:68:13:70:8c:b9:66:48:36:2c:2e:f2:0c:a3:7b:35:
         13:43:58:57:ad:e3:24:06:bd:99:7f:14:df:2c:da:ca:c2:1d:
         d9:30:f6:d0:7d:9c:d0:35:77:b9:f1:28:1f:1d:a7:0c:9b:5e:
         7c:80:cf:8c:2d:ca:a6:22:1d:9f:63:59:b0:de:63:37:07:85:
         3e:56:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:44 2026 by rpki-client