Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
File:                     ulHQnhOT5woFhzID_3zE4f1-pw8.mft (raw, json)
Hash identifier:          MM7qpVTxdgVUnLy9PZ0ueac0PzVBPXV9ltqjCnhfJM0=
Subject key identifier:   2E:F1:D5:B3:FA:C2:22:D6:02:43:CD:AA:31:97:57:B7:60:D8:91:85
Authority key identifier: BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
Certificate issuer:       /CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Certificate serial:       1C70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
Manifest number:          1C60
Signing time:             Mon 02 Mar 2026 16:14:59 +0000
Manifest this update:     Mon 02 Mar 2026 16:14:58 +0000
Manifest next update:     Mon 09 Mar 2026 16:14:58 +0000
Files and hashes:         1: ulHQnhOT5woFhzID_3zE4f1-pw8.crl (hash: mp8LL1FLr700eWZ2Te2EGf1nlfT2oKog3KrFp/WvFMQ=)
                          2: D3EAE1500B5911EA8CC1114BC4F9AE02.roa (hash: kb+dyeOwVVg/Z6TRUEqLhtnoMRAUu0DJXJFO0yQHy+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
                          rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7280 (0x1c70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B03, serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
        Validity
            Not Before: Mar  2 16:14:58 2026 GMT
            Not After : Mar  9 16:14:58 2026 GMT
        Subject: CN=69a5b783-945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:73:d4:c9:23:93:38:3b:cc:b2:b3:1e:2e:
                    26:00:fc:8a:dc:8d:73:1b:80:0f:69:10:7a:88:c9:
                    f8:b5:ef:47:0e:22:66:a7:15:c6:04:2f:16:23:67:
                    6d:a5:11:9a:4d:78:66:d5:d5:a4:9c:31:ca:bb:d3:
                    4d:14:49:bc:5a:f8:61:e8:b1:b7:26:71:38:ac:92:
                    ef:b4:ca:7e:00:68:fc:a3:c0:a2:56:dc:3e:50:22:
                    f5:c1:52:3d:f7:b5:b5:03:eb:56:a6:20:b3:f2:b5:
                    a7:3d:f9:50:bb:5e:6c:86:84:cd:bb:a5:d3:bb:55:
                    3b:ab:1b:99:cc:cb:cb:c4:c6:b2:66:59:a4:04:32:
                    f9:37:5e:c0:8b:e6:10:77:2b:5e:fe:73:a1:96:c2:
                    b5:be:63:1a:72:05:57:03:36:7e:28:ea:01:70:7f:
                    fc:d9:2c:db:8f:cb:44:53:6d:86:9f:59:aa:bb:be:
                    88:81:ce:c3:0b:35:f1:c1:62:ed:b2:4b:30:06:fa:
                    58:e8:a3:c7:e7:c9:07:0a:7e:bb:11:6b:88:1f:89:
                    75:5b:a5:83:27:51:5a:1b:a4:1b:95:ba:8b:4f:67:
                    67:77:a8:db:d2:3a:e2:24:4e:02:d4:e1:42:dd:be:
                    d0:1e:3c:a7:5b:09:e4:cc:fe:b1:00:ff:d7:92:d1:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F1:D5:B3:FA:C2:22:D6:02:43:CD:AA:31:97:57:B7:60:D8:91:85
            X509v3 Authority Key Identifier:
                keyid:BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a2:df:db:25:6d:45:d2:c9:70:27:c4:de:56:50:10:91:b4:
         a1:70:91:57:17:3c:f4:c3:1d:62:bd:1b:de:9e:c9:f8:73:f3:
         6b:8f:7e:52:c9:6c:38:bf:e6:73:70:28:47:ec:5b:e7:ce:b9:
         c3:73:b7:09:49:e7:e9:37:ec:3c:cc:99:95:10:e1:1c:3e:55:
         76:b4:8e:7b:48:97:dd:7e:6c:02:88:6c:67:91:a8:64:1e:4a:
         44:71:85:0e:6f:d8:29:66:88:52:c5:3b:92:af:e0:ec:28:16:
         6d:a5:37:45:5e:e4:ca:e0:7a:ec:fe:52:be:b6:7b:59:0e:8f:
         19:c1:fe:9b:c1:c2:50:17:b2:cd:20:33:65:4a:65:86:7f:b7:
         f2:e5:78:4c:54:fa:2a:b9:fd:e1:60:ba:3f:41:53:09:55:2d:
         94:94:06:13:c5:2e:0d:89:22:21:7a:0b:30:dd:b5:8e:38:c8:
         c2:e2:d1:4e:c9:6d:bb:84:be:d1:2e:56:08:2e:a2:80:fd:3e:
         fa:bf:7f:cd:90:e0:32:a5:1e:b0:c1:54:88:b9:32:f5:32:8f:
         ac:fd:a0:53:73:a3:a6:72:0b:7f:a7:da:83:98:c9:73:c7:1f:
         b7:c3:3b:e9:f3:23:d6:fb:77:f5:6f:55:7d:d0:e2:1b:93:a6:
         9a:24:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:10 2026 by rpki-client