Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File:                     hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier:          n28MWjnJ7fShvomjYRtUpdvCf7husZvTS4ppxOWU6HI=
Subject key identifier:   B8:64:CC:1D:32:D8:4D:02:B2:5B:70:04:95:61:93:DB:22:D4:AB:A9
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer:       /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial:       0305
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number:          0301
Signing time:             Sun 01 Mar 2026 02:04:41 +0000
Manifest this update:     Sun 01 Mar 2026 02:04:41 +0000
Manifest next update:     Sun 08 Mar 2026 02:04:41 +0000
Files and hashes:         1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: mBQvv70o6bDUe6ynB78a0UQamU5gh9bA+yebbSGMN/Y=)
                          2: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=)
                          3: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
        Validity
            Not Before: Mar  1 02:04:41 2026 GMT
            Not After : Mar  8 02:04:41 2026 GMT
        Subject: CN=69a39eb9-e031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:2c:54:82:5a:6a:e4:e4:78:41:c7:83:95:
                    81:a4:15:71:dc:d2:09:42:87:52:5e:3c:09:24:d5:
                    01:fd:7a:66:e0:8e:66:65:8a:96:b4:e3:80:2e:6b:
                    53:97:5e:0c:75:87:88:68:3c:dd:fd:f9:a5:c3:6b:
                    37:e4:53:be:02:7b:ba:5f:d8:0c:07:69:6f:40:07:
                    ff:f8:8a:50:3f:ab:33:8a:ed:35:8e:0c:e7:a1:21:
                    43:83:91:23:a3:6a:e2:ec:c3:4a:d9:91:33:77:04:
                    fa:b5:47:fc:08:04:c4:90:78:3c:c7:86:93:20:9a:
                    12:e9:08:82:d4:b2:3f:5a:9b:40:87:5a:bd:4a:80:
                    60:cb:f0:d9:f6:7c:c2:83:be:8e:82:9f:8a:72:97:
                    9e:ce:81:06:03:65:e0:55:2b:9f:83:80:04:de:02:
                    10:8b:c3:3c:a8:b5:ad:25:cf:6a:63:44:d6:a0:5e:
                    dc:88:5f:d9:6a:18:98:31:31:0e:d7:0a:34:bb:19:
                    67:95:22:9e:34:93:42:9e:70:84:7d:df:7b:5d:81:
                    69:de:e2:cf:58:a8:f4:2f:e4:88:fe:94:35:00:03:
                    f6:96:f0:30:37:94:84:8a:fb:09:cd:6b:9d:92:35:
                    d9:65:38:f1:9c:24:89:4e:cd:9c:cf:0d:4c:f7:63:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:64:CC:1D:32:D8:4D:02:B2:5B:70:04:95:61:93:DB:22:D4:AB:A9
            X509v3 Authority Key Identifier:
                keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e8:97:65:73:e0:d7:6b:a3:b8:93:04:d0:d6:79:94:24:8c:
         1d:ab:44:4f:92:aa:98:02:04:62:8a:33:8b:36:4b:32:40:db:
         9c:2e:e9:18:1a:bd:14:9d:b7:51:15:30:1a:d5:b4:d8:ea:97:
         d9:16:21:9f:ad:5d:33:3d:62:f5:da:68:e2:3b:fd:48:aa:f4:
         63:fc:fc:56:b4:84:60:87:72:33:f9:11:06:ed:f9:3c:83:d3:
         e4:42:2c:61:d1:65:40:a4:1e:1d:fb:e9:6c:dd:a6:17:7b:9a:
         12:61:4d:ff:14:aa:2b:7a:fe:c0:74:c0:62:d8:a6:cf:ae:9a:
         be:c7:ab:00:bf:8b:64:ed:39:8b:b2:f9:06:c1:97:5d:23:10:
         67:74:6e:c6:d8:4e:f4:b2:5f:e9:e0:b5:00:8b:a2:80:d7:de:
         b7:bd:a2:65:95:57:d1:89:28:c0:61:40:91:da:92:15:d9:7f:
         5d:28:1b:0a:8f:7d:e1:43:01:3c:7a:26:8a:76:91:7e:a9:ab:
         33:20:36:99:9e:dd:a1:27:a0:fd:4b:a8:b1:3f:98:45:19:2b:
         a5:93:56:df:b2:33:ad:9e:93:1d:07:29:46:82:07:5a:17:ac:
         0d:21:aa:71:a9:b0:9d:c0:64:a9:bb:6f:c9:06:e1:c4:f0:bd:
         02:1f:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:36 2026 by rpki-client