Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File:                     mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier:          Fw9zxFQjDZguxE/+ip2cZwrpsx5nVNmg0sdJs7bFiI4=
Subject key identifier:   98:7C:85:03:D1:C2:15:F8:DA:F4:C8:0F:97:DA:F8:D8:12:B3:58:FD
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer:       /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number:          01A9
Signing time:             Sun 01 Mar 2026 04:50:19 +0000
Manifest this update:     Sun 01 Mar 2026 04:50:18 +0000
Manifest next update:     Sun 08 Mar 2026 04:50:18 +0000
Files and hashes:         1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: 4SSVSZcc2tL/aLKQ+3ytu7ZNDRgXUVCrbPvVcup9GAM=)
                          2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
        Validity
            Not Before: Mar  1 04:50:18 2026 GMT
            Not After : Mar  8 04:50:18 2026 GMT
        Subject: CN=69a3c58b-248e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:33:e8:d4:d2:63:f6:af:d1:20:ed:1b:37:
                    86:17:15:c5:62:2e:df:73:f3:44:c8:b9:93:71:c9:
                    51:f1:82:b9:72:ca:d8:0f:6f:7e:a3:05:57:5d:50:
                    13:0e:ee:d7:4e:6d:56:43:b7:50:40:ba:eb:d6:ce:
                    ac:51:aa:a9:a0:7f:d4:3e:62:95:c6:5d:c0:25:7e:
                    bd:47:90:11:7d:87:84:3f:b7:e6:7f:0c:39:8c:85:
                    c6:25:20:2f:08:c7:d9:21:4a:9b:90:4c:58:77:70:
                    48:b6:b0:58:8e:c6:5c:3a:8c:88:4b:43:6a:5d:13:
                    d8:ad:7a:c9:1a:b0:3c:93:13:57:5c:29:5b:98:1b:
                    56:e3:79:ca:45:05:ef:71:62:b7:19:68:b9:d8:e3:
                    d4:76:68:3f:54:8f:03:6f:d5:8f:cb:22:84:b9:9d:
                    3b:3a:a0:7b:58:81:a9:61:0d:dc:50:f6:9a:ef:bc:
                    b8:37:f2:62:e0:44:32:18:d3:d8:99:00:d2:a6:d6:
                    4a:db:9c:41:0b:2d:c5:76:4d:89:c9:eb:ed:e8:58:
                    10:e0:2d:74:70:be:8a:07:91:86:0e:4a:10:88:13:
                    d3:ce:9a:9c:d1:22:6d:ec:20:74:54:8b:30:31:31:
                    bc:45:fe:de:bb:b8:cd:de:c5:40:5b:9b:dd:d8:8e:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7C:85:03:D1:C2:15:F8:DA:F4:C8:0F:97:DA:F8:D8:12:B3:58:FD
            X509v3 Authority Key Identifier:
                keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a2:20:e8:93:90:c9:48:12:17:c2:2d:d1:80:42:85:a8:85:
         34:4c:e7:4f:1d:1b:b0:48:2c:31:a6:2c:04:ed:df:5d:54:21:
         32:fa:14:d2:e3:85:a9:7e:63:c6:16:31:76:1e:2a:e6:39:43:
         d4:9b:16:2c:73:52:1b:2f:f1:ac:3f:0e:42:80:92:1f:9f:6a:
         91:7f:b6:85:c5:22:07:ec:0d:c5:f9:f5:3d:69:e0:3a:28:21:
         f2:df:d4:97:58:84:02:c7:c4:49:f7:3d:fa:b6:b9:17:5a:89:
         8e:e8:b7:ea:e1:74:a5:72:ec:93:be:bb:61:56:75:9c:e7:4e:
         e3:26:a5:c4:da:3b:12:db:15:21:53:e8:d7:b2:53:44:b6:8e:
         b0:ce:71:bd:75:f9:2e:1e:58:60:b1:0e:56:d0:09:2b:65:e4:
         95:16:95:63:82:9a:4d:6f:7d:50:4d:89:b7:59:6b:e4:f2:f5:
         77:63:04:39:4a:a6:18:df:1d:05:8d:55:3a:8c:ba:20:e8:8b:
         2b:4e:83:55:f7:16:7d:d5:dd:67:e6:66:15:9b:42:d3:ec:49:
         b3:1d:86:e9:c2:85:36:a4:b0:12:0f:27:b1:a4:ba:aa:26:fa:
         6f:37:82:79:42:4a:75:7c:b0:90:c3:3c:3b:70:f3:5d:1d:52:
         39:2c:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:51 2026 by rpki-client