Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          /FtLJEgdLj7l+ttg/bsm+UfOARZAkqkFhkPKF+ncBuM=
Subject key identifier:   31:C6:29:57:91:FC:57:1E:2C:F1:A2:26:95:5A:95:45:18:30:98:CA
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          01A9
Signing time:             Mon 02 Mar 2026 01:39:54 +0000
Manifest this update:     Mon 02 Mar 2026 01:39:50 +0000
Manifest next update:     Mon 09 Mar 2026 01:39:50 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: jcSoCAiZWxkDnR3S3cGsc11E0P/B6icYIRHFJ+9sutI=)
                          2: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=)
                          3: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=)
                          4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=)
                          5: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=)
                          6: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=)
                          7: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=)
                          8: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: aDzusaC8Tp4Xh29QzEkDqXm9UtTCSIlF3bFjfnnKcb4=)
                          9: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=)
                          10: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: bEqFzt4iqjMszLsbKerzNS5dHxf3l4GzKg2aJu4NNeY=)
                          11: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Mar  2 01:39:50 2026 GMT
            Not After : Mar  9 01:39:50 2026 GMT
        Subject: CN=69a4ea69-039a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:fb:fa:d1:c1:7a:da:c2:45:1a:2c:c9:f6:
                    d4:e9:0c:5b:32:ef:74:08:99:0f:b0:b9:69:6a:40:
                    0c:f9:00:f6:e6:36:86:31:76:ed:36:f0:d3:f5:0d:
                    01:0e:f5:0b:c5:91:63:af:c1:8a:fe:4c:df:b7:42:
                    6a:72:9e:1d:ab:88:3a:23:cc:db:b5:cc:48:85:10:
                    e3:2e:ac:9c:00:89:a2:43:fd:13:97:14:8d:2d:8a:
                    d3:dc:21:a6:b0:0e:dc:13:91:d3:5a:b0:03:26:44:
                    9b:0a:3e:a0:fb:4e:aa:39:42:09:8b:e6:ca:b4:d3:
                    b1:57:98:2f:ef:c0:dc:e8:77:e3:fc:9b:82:d5:c1:
                    15:db:ff:77:b1:a9:e1:ec:32:57:1e:4b:f4:e2:0a:
                    f5:b7:47:fe:a8:b3:30:df:a1:3a:79:bb:fd:0a:e7:
                    82:2d:2b:c4:c2:92:58:a5:67:e6:60:78:a1:a5:6d:
                    d1:5f:89:9f:0f:d2:48:4c:fc:45:84:0c:f5:46:0b:
                    2a:d8:38:bf:ae:c1:d0:ea:80:d8:8a:92:b0:4f:a5:
                    de:79:fa:8a:9e:e3:1e:25:93:20:97:71:d1:20:89:
                    ab:66:0d:4c:8a:52:54:2a:d8:f7:1b:48:aa:dd:ca:
                    28:87:91:56:d3:61:90:eb:e4:5e:99:38:27:30:3f:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:29:57:91:FC:57:1E:2C:F1:A2:26:95:5A:95:45:18:30:98:CA
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:3b:43:d7:de:44:d1:c3:d7:5d:20:bd:d0:79:af:24:f3:
         f7:52:ff:05:45:ae:13:03:b4:e8:29:73:ff:45:6f:26:c3:b7:
         a3:c3:0b:d7:7e:49:f7:19:35:1f:00:3e:af:cc:72:58:4e:3b:
         61:81:c7:27:9d:53:a3:21:00:b4:66:02:e1:30:2d:c9:4c:4e:
         55:73:e3:aa:db:6a:b0:1c:21:03:f2:25:d0:b2:f6:19:fb:85:
         3a:1d:f1:28:7d:07:33:4f:52:f3:94:43:44:49:8a:43:4b:7c:
         3e:f8:89:45:4d:d8:92:a6:39:f0:f7:37:24:43:35:88:e8:cf:
         ea:f2:c0:1b:0d:81:38:54:46:5e:b0:b9:97:3e:44:de:7b:d6:
         3f:f3:2b:e9:c8:68:f9:31:c2:09:2b:96:95:7d:55:59:80:36:
         f5:f3:1d:10:57:c8:bb:59:af:7e:f4:3a:71:69:64:a2:3a:af:
         31:c8:cb:f6:95:ec:b5:42:40:90:b0:16:01:bc:85:24:4b:30:
         5c:e2:a0:5a:b3:e8:e3:0d:df:ec:07:9f:07:9f:e6:88:d2:39:
         9a:3d:a4:06:5f:1f:6a:d8:a1:ae:5e:f1:04:1d:22:33:d4:2b:
         3c:a9:39:69:3e:08:fc:ff:05:4a:b2:0d:59:9f:3a:51:6a:b6:
         f7:51:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:44 2026 by rpki-client