Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
File:                     o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json)
Hash identifier:          viCIubkrb30QQzKRYh0AfrBcWZHlvI/Pa1jbabjZWW8=
Subject key identifier:   2E:F9:31:2E:87:D8:83:5E:8D:AA:96:AD:C1:61:71:11:C6:BA:D8:43
Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
Certificate issuer:       /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Certificate serial:       359A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
Manifest number:          354B
Signing time:             Sat 28 Feb 2026 14:34:33 +0000
Manifest this update:     Sat 28 Feb 2026 14:34:33 +0000
Manifest next update:     Sat 07 Mar 2026 14:34:33 +0000
Files and hashes:         1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: 5JJQ/Y3oRgcVYvbsosbHH1ScixFXQ23t8eoWFdNmypw=)
                          2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: XdSTq9a3+iFe4VI7nDUck0LhT2SZbH7g4xQmyCXOz+E=)
                          3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: 3yuw549gFThRnTnkqGNghYz3hl96FvE25heVCZ7UvVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
                          rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13722 (0x359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
        Validity
            Not Before: Feb 28 14:34:33 2026 GMT
            Not After : Mar  7 14:34:33 2026 GMT
        Subject: CN=69a2fcf9-dd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:26:c3:75:04:60:3d:fa:6e:29:0a:3b:8f:
                    69:13:4f:d0:1d:8a:c7:3c:64:54:47:64:fc:68:09:
                    ec:2d:40:56:4d:c6:40:2f:eb:9c:72:6c:a2:b3:8e:
                    2b:48:43:d8:a2:a1:ae:53:d9:84:30:52:94:76:9a:
                    0a:0f:a5:d7:07:46:c8:2c:2b:13:c3:6f:12:e7:bf:
                    1f:02:6a:ef:f1:06:41:c5:cf:dc:fa:6f:a6:a4:f4:
                    ad:a2:39:2b:ee:0b:89:8a:a9:ff:70:39:7e:45:2c:
                    26:8e:2f:de:4d:69:00:67:fd:f6:f4:35:2c:b3:33:
                    eb:bc:a3:f6:8b:70:76:7f:af:43:c5:2f:17:76:37:
                    20:e7:77:a7:79:5b:bf:8c:a7:18:33:a3:a1:fb:97:
                    31:bd:01:21:b5:91:f8:01:cf:fc:8d:01:9a:33:a5:
                    f6:27:4b:1d:ae:e6:60:a9:fb:7d:ee:35:f4:74:9f:
                    eb:b5:bb:4c:bc:75:51:dd:78:c7:f3:9c:ef:9f:1a:
                    7f:56:75:a9:82:82:79:26:f2:7d:cb:22:31:97:93:
                    c6:a0:f1:11:3b:e9:92:48:52:a6:fd:ca:11:fb:25:
                    41:1e:0c:11:8d:23:89:46:a0:3c:3d:d2:85:a0:57:
                    30:28:49:be:e6:39:87:43:cb:c1:8c:88:97:76:b7:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:31:2E:87:D8:83:5E:8D:AA:96:AD:C1:61:71:11:C6:BA:D8:43
            X509v3 Authority Key Identifier:
                keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d3:6b:64:dd:1a:0b:5f:50:ac:fa:36:ac:5e:4b:c9:51:8f:
         24:db:44:bf:2a:a4:ab:7c:d8:cd:c7:2d:df:ef:17:06:d6:fb:
         c3:5e:47:22:28:c0:34:99:ff:a7:9e:14:ef:02:f1:c4:2f:e8:
         b2:83:01:bf:4e:cd:1e:cb:62:9d:5c:0d:56:89:73:74:d6:da:
         4a:5d:75:b0:89:ce:e8:66:20:6a:1b:1d:a7:67:0f:00:13:a2:
         3d:b8:85:19:07:0a:a2:d3:d0:22:ee:88:27:88:d2:01:90:fb:
         85:d8:af:9e:f3:96:1e:63:d3:82:dc:2f:c2:b8:88:c6:cb:fd:
         69:2a:32:1e:e0:34:64:14:1d:86:9c:04:37:a9:a0:09:4a:0d:
         56:20:6b:2b:6c:9c:34:9d:9a:1a:b1:d6:ff:38:b2:5f:ae:b5:
         de:50:20:7a:29:97:d0:77:ee:76:a9:5b:f5:4d:00:85:5a:a2:
         cf:a5:9f:79:a9:fc:95:e1:7e:cc:c5:f1:e1:38:54:57:d2:3e:
         26:d3:e5:fd:70:13:ce:7e:69:53:b9:0a:66:65:75:ab:ef:65:
         11:63:ee:b5:77:a0:01:cd:17:bb:ce:f7:b2:bf:4f:f9:fd:81:
         35:3a:cf:92:c4:ef:60:79:0c:23:98:63:92:ff:72:51:4d:03:
         7c:2f:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:32 2026 by rpki-client