Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File:                     MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier:          eI+zWjwYUdEPXjIh4M2Nun6vZvu/DTrw3wJYfYjA/L0=
Subject key identifier:   D7:C5:2C:94:A9:FD:EA:03:F2:1B:21:AC:37:BA:74:23:B6:C2:CC:64
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer:       /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number:          01C8
Signing time:             Sun 01 Mar 2026 04:28:23 +0000
Manifest this update:     Sun 01 Mar 2026 04:28:22 +0000
Manifest next update:     Sun 08 Mar 2026 04:28:22 +0000
Files and hashes:         1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: ia6IBz9OuypsSPDE3K4MGBgorfv5nnN5lgCpyUMUfxc=)
                          2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: VkiCTpbHNMdBRPiF1oBiRg7dOTIy/YEbnzSkLjMcvbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
                          rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
        Validity
            Not Before: Mar  1 04:28:22 2026 GMT
            Not After : Mar  8 04:28:22 2026 GMT
        Subject: CN=69a3c067-dcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:7c:81:a6:45:1d:23:1e:ca:84:aa:d8:6f:
                    bb:f4:f6:68:bb:2a:e1:1d:cc:8e:79:99:a6:26:5e:
                    c9:dc:01:4f:01:10:65:4d:b4:f3:67:76:73:94:90:
                    77:a3:04:f3:e4:e1:da:19:6a:43:b5:99:99:6c:d7:
                    8c:e8:a5:1a:30:12:f2:15:01:bf:68:e3:ad:bb:ac:
                    69:f9:46:c4:4a:c8:d3:4f:ae:ae:e6:5b:6a:f8:c4:
                    00:17:da:20:15:0a:68:78:d0:09:b7:c1:f0:ea:09:
                    03:6d:39:71:b6:7f:1d:9f:d3:c7:c9:46:fe:2c:a3:
                    91:e5:5d:78:57:d3:91:ea:a3:17:c3:8c:4a:4c:d1:
                    98:af:59:fe:d8:97:47:7f:37:d2:04:d8:cb:8a:29:
                    55:8b:e4:37:cc:3d:cf:29:f5:08:33:5f:40:87:2b:
                    7b:31:18:72:32:c9:c2:77:24:80:cb:c4:e3:2f:74:
                    22:87:1c:f3:b2:34:c5:f5:e4:db:68:83:d8:4e:c6:
                    c9:7c:22:42:5b:e0:3a:ce:60:d5:1b:0d:a2:04:a0:
                    c5:6b:b3:17:47:e2:e2:16:9d:91:80:e5:6b:87:4f:
                    a9:e1:d6:9c:2c:98:84:a5:4f:c3:b8:b2:25:f4:46:
                    8f:94:e6:3b:d2:4f:cb:86:df:2f:4a:72:28:8f:1d:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C5:2C:94:A9:FD:EA:03:F2:1B:21:AC:37:BA:74:23:B6:C2:CC:64
            X509v3 Authority Key Identifier:
                keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4b:93:95:f4:0d:70:99:48:c1:b0:28:8e:63:54:5c:d3:c6:
         7b:43:51:88:19:08:42:26:ea:1a:c2:00:2a:f1:83:65:04:b2:
         46:e1:c4:a6:19:dd:49:b3:f9:d3:90:f9:be:86:5b:02:0a:01:
         8b:99:dd:f9:ac:07:46:cb:47:be:30:13:06:f8:39:78:3d:4d:
         73:61:a0:99:3f:39:a9:e0:75:1a:83:70:10:28:23:a3:a6:bc:
         12:d4:34:f2:5f:f2:de:35:78:4c:bf:ed:0e:42:66:13:36:a1:
         e2:84:50:bb:17:b8:2b:b5:8b:91:46:26:f8:57:5b:38:aa:48:
         19:be:a4:6e:2e:59:93:d5:5b:06:65:17:dc:eb:cb:98:2b:5d:
         44:03:c5:54:20:96:8a:4b:ca:9b:f4:9f:09:75:61:d1:3b:5b:
         e5:0e:6b:83:51:67:22:b3:60:95:80:8f:9a:2a:bc:a5:6a:dc:
         63:8e:f3:f6:f8:8f:f7:56:65:1c:32:c8:c3:d6:0b:36:c9:1f:
         12:28:d7:41:5c:82:1f:8d:56:cc:66:43:1c:b3:2d:da:5f:ea:
         b2:5e:94:4a:57:bc:62:90:62:61:50:07:87:21:12:9d:d8:ed:
         2e:d6:ce:68:7d:44:78:d5:d2:f1:56:52:0e:23:87:2f:70:4a:
         5a:96:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:26 2026 by rpki-client