Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File:                     sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier:          Ohkc26Msak7qz0qBd9DNB5cze+k7N3XeMEcA5iLYeIE=
Subject key identifier:   21:EE:7F:2A:42:24:3C:AF:AB:55:CC:E6:48:B6:F1:83:AD:34:FA:D6
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer:       /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number:          B4
Signing time:             Sun 01 Mar 2026 08:21:59 +0000
Manifest this update:     Sun 01 Mar 2026 08:21:59 +0000
Manifest next update:     Sun 08 Mar 2026 08:21:59 +0000
Files and hashes:         1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: Dn4Zby13C7oJaG4BHU0Xe5rhJP/OfhHVmILFlSE/vZY=)
                          2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: OEoPCQ7v8dhaZUZAQWtAZvLcy6AT9dOCnH1/iJjA3qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
        Validity
            Not Before: Mar  1 08:21:59 2026 GMT
            Not After : Mar  8 08:21:59 2026 GMT
        Subject: CN=69a3f727-445b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:2c:e6:57:57:cd:89:59:9d:06:a6:79:8b:
                    94:2f:cc:61:ec:3b:ea:6e:e6:3a:40:c9:ef:fe:e4:
                    c3:54:43:2c:e3:7c:4d:ee:d3:de:0d:dd:57:0a:3e:
                    db:01:4f:70:a1:ba:1c:d8:3b:cf:fc:ef:a7:18:2c:
                    cb:52:01:9f:83:bb:04:5c:38:b4:a5:49:61:68:ea:
                    84:73:f5:99:ea:12:b0:66:f4:f7:8b:18:91:63:aa:
                    d1:56:b8:43:ee:c2:d6:90:80:79:5b:17:17:40:85:
                    92:75:ad:61:cd:0d:83:34:3d:ab:16:01:de:e6:85:
                    04:0d:f8:29:1d:2d:b4:f8:bb:e8:08:af:ed:9f:43:
                    c3:cf:1d:b0:44:eb:53:cb:89:ac:61:56:7e:4f:86:
                    6d:26:c3:f5:13:ee:1b:eb:34:8f:23:bf:4d:bf:a0:
                    6f:82:13:a2:38:b1:5f:5c:25:d7:2d:1f:e9:c7:66:
                    dc:50:ca:2d:09:58:e4:9d:f4:e4:4b:e8:3e:05:e4:
                    04:47:b3:5e:06:39:92:0e:8d:ff:42:4a:37:60:3a:
                    cf:52:ce:2e:b4:f8:82:9b:db:b9:a2:5f:7f:cd:26:
                    ce:29:dc:a0:09:29:69:65:b9:d1:ea:20:22:d8:af:
                    d0:c6:53:19:61:a9:34:c4:32:05:3b:26:1a:a3:f2:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EE:7F:2A:42:24:3C:AF:AB:55:CC:E6:48:B6:F1:83:AD:34:FA:D6
            X509v3 Authority Key Identifier:
                keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f3:58:e9:b2:cb:a3:df:3c:49:d5:e6:86:f3:13:15:06:26:
         ff:b7:bb:e4:c8:27:64:a3:7c:a6:ec:c7:45:a2:0b:d7:3d:16:
         2e:12:a8:b8:e5:83:36:09:53:e9:26:68:a7:ca:12:08:fe:40:
         df:e4:59:63:7d:09:e1:f0:1e:ed:6d:a9:58:8f:7e:14:4a:33:
         80:25:86:71:30:0e:1e:f1:89:41:b0:c2:61:70:e4:42:1f:3e:
         0c:72:01:02:07:74:46:f7:99:e6:0a:3d:61:0c:a7:ac:42:a1:
         89:1a:25:cf:66:a1:85:c5:7c:51:ec:db:87:59:6f:61:23:94:
         30:2d:8a:f2:a6:06:f9:b8:cd:cf:15:f3:5a:e6:5a:0d:a1:1f:
         85:a9:4b:f8:96:1b:7a:61:43:4f:e9:e0:92:e4:09:21:85:d5:
         6f:13:af:15:77:66:f1:24:89:b4:6d:fa:44:00:81:5b:6c:da:
         e3:f3:03:d1:81:88:52:e6:02:92:91:ed:89:a3:fc:f3:39:5e:
         f9:90:3f:9b:77:89:c6:bb:1b:23:71:bc:e4:f8:95:93:f6:3e:
         25:04:5d:be:23:18:f2:a4:b3:b6:80:40:1e:09:6c:f4:75:e7:
         f8:26:75:f8:b9:48:46:67:02:cc:84:7c:14:b4:c4:da:aa:6e:
         f8:6c:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:43 2026 by rpki-client