Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
File:                     QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json)
Hash identifier:          nv1lg6lZV4tqYUB4cvYQaCYhA8QaWAaV92oqD3bZiMg=
Subject key identifier:   80:ED:BD:7D:01:A2:97:93:06:2A:B1:04:FF:0B:9A:15:7A:21:9A:F3
Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
Certificate issuer:       /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
Manifest number:          E9
Signing time:             Sun 01 Mar 2026 07:34:28 +0000
Manifest this update:     Sun 01 Mar 2026 07:34:27 +0000
Manifest next update:     Sun 08 Mar 2026 07:34:27 +0000
Files and hashes:         1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: +9PtYKnL/Z6xXF3x1T0a0hodQqcfcO6g57FkZ0D9IHY=)
                          2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: wJ3laQ7nVagMEJPomzazSfS6B/Yq1uHmjJhmSe/2HtA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
                          rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
        Validity
            Not Before: Mar  1 07:34:27 2026 GMT
            Not After : Mar  8 07:34:27 2026 GMT
        Subject: CN=69a3ec04-6bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:1a:cc:df:6c:32:e3:55:22:ad:d8:0a:e0:
                    b4:f4:b3:2e:9b:88:65:f9:b0:c3:d2:be:1f:ad:f3:
                    20:48:2b:71:3b:c1:29:30:73:fe:94:42:95:0a:76:
                    ab:2e:97:dc:48:73:8e:0b:c6:c4:73:15:16:5d:5e:
                    57:c6:43:fa:22:13:8c:c6:a4:93:54:c1:93:eb:f4:
                    63:e4:59:4c:42:7f:23:0b:de:97:20:24:0c:11:f5:
                    0d:43:68:64:b2:d5:d8:26:e6:3f:60:a6:34:6e:4a:
                    1a:f8:56:0d:b6:7a:49:2d:da:a9:ed:4a:37:27:af:
                    a6:ac:60:61:8e:6d:4e:6f:58:59:99:92:06:dc:51:
                    eb:37:3f:0e:b6:ee:bd:85:cb:fa:88:cb:e7:fa:ef:
                    bd:c6:72:d5:f0:17:96:25:80:63:c4:a8:15:93:93:
                    63:e9:26:ee:60:f2:df:ff:48:d6:fd:db:bf:87:5f:
                    7b:8e:f2:70:7f:fe:49:d8:ac:55:4b:59:c8:30:b6:
                    1c:fc:c4:b1:f2:ef:a5:44:a2:60:b0:0c:03:59:11:
                    fa:79:8d:1c:d4:03:2d:e8:b3:23:08:6d:16:c0:71:
                    2a:01:2a:46:5e:52:91:ab:22:e2:3e:21:5b:27:a3:
                    d7:ba:86:c7:eb:fa:0f:e6:67:9b:bb:4c:0c:67:40:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:ED:BD:7D:01:A2:97:93:06:2A:B1:04:FF:0B:9A:15:7A:21:9A:F3
            X509v3 Authority Key Identifier:
                keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:37:38:d6:06:a2:ce:00:11:60:77:b1:2b:f4:0d:68:5b:76:
         0a:c6:a0:ff:e2:3a:34:13:4e:15:51:1b:7e:7d:7e:dd:75:1c:
         6d:b1:36:aa:64:e2:f5:b8:c8:38:ee:5c:b2:6a:d4:33:ae:5d:
         a0:16:f1:7e:05:1e:eb:89:c0:54:f3:dc:6e:6e:46:4d:02:93:
         98:cd:0e:3b:c1:9d:f6:b9:4b:aa:7d:a1:2a:71:7a:b3:91:80:
         48:98:2a:1f:9a:75:78:67:f9:4c:94:25:cb:fe:ce:cf:05:08:
         dd:21:0d:cf:59:db:e6:39:1d:de:30:6b:99:ce:84:42:16:74:
         12:f9:23:ec:de:41:d5:86:81:dd:25:a0:ff:42:6d:54:4c:8c:
         87:a6:97:0f:e5:c7:41:f9:12:db:e0:bf:38:2a:9d:01:13:58:
         ef:c7:11:b9:a2:c8:45:e7:be:a1:cf:74:f0:01:4b:fd:5a:14:
         33:54:02:77:20:e6:4a:c6:13:34:0c:a5:35:e3:74:31:cb:96:
         9f:f2:ff:29:b8:af:50:67:2a:61:65:fd:2a:d5:c2:b3:98:6f:
         73:4b:35:23:77:40:24:ce:10:bf:97:e6:36:a6:a0:56:80:39:
         f5:28:e0:bd:ce:ec:cc:86:6e:29:e7:57:73:36:00:4f:85:1e:
         27:93:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:21 2026 by rpki-client