Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
File:                     0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json)
Hash identifier:          sqUa9iUtB65mW9LuDJZuocNh19V/I4ptO/70kGDblRc=
Subject key identifier:   D0:B8:85:BA:77:02:20:6B:00:BC:EE:0D:07:B3:B6:4F:B7:13:2F:21
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Certificate issuer:       /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
Manifest number:          0A
Signing time:             Sun 01 Mar 2026 10:41:20 +0000
Manifest this update:     Sun 01 Mar 2026 10:41:19 +0000
Manifest next update:     Sun 08 Mar 2026 10:41:19 +0000
Files and hashes:         1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: S44knBfU/AfhlKO5St2HvOddycv3q6zUFyjEHwuT3lA=)
                          2: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
        Validity
            Not Before: Mar  1 10:41:19 2026 GMT
            Not After : Mar  8 10:41:19 2026 GMT
        Subject: CN=69a417d0-24d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:e7:6c:7b:f3:98:1f:47:44:82:d1:65:46:
                    02:b4:ac:b4:b4:02:b3:d0:45:9d:00:ad:38:f8:7e:
                    c6:8a:1c:e2:31:05:ca:82:57:d4:b8:94:35:6c:81:
                    f6:fa:20:6e:0b:2e:53:90:75:4d:c8:8e:bf:73:99:
                    f0:23:98:76:25:b2:61:b2:4a:93:a4:b5:e3:90:67:
                    bd:03:c4:f4:9d:58:62:d8:b7:01:69:fb:75:44:bd:
                    8f:dd:8b:99:1b:bb:55:54:97:73:32:dc:a0:19:2d:
                    81:7e:59:5e:27:db:97:28:f9:00:8b:23:9e:ef:55:
                    ff:26:3a:4f:3e:06:07:3f:5b:2e:54:f9:e8:da:c3:
                    59:22:46:c5:ae:71:cb:00:64:e8:60:68:25:d0:47:
                    63:ff:01:dd:15:89:0f:0f:20:c9:a6:77:6e:82:af:
                    3b:7b:d4:35:0b:f8:50:87:27:5d:6f:ef:bc:c1:3d:
                    e4:8c:bd:f1:c3:4f:75:f9:be:af:9e:02:0f:0d:1a:
                    b9:a9:a6:dd:52:c5:74:d5:6f:0f:65:fa:c2:20:83:
                    03:02:14:f0:9b:bf:49:e8:b4:e9:a8:b6:dd:bd:89:
                    05:96:51:35:18:8e:2a:da:88:2b:21:4c:7b:f0:a9:
                    a7:d0:dc:51:f2:e2:6c:42:d3:5c:b6:fb:2b:d8:dc:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B8:85:BA:77:02:20:6B:00:BC:EE:0D:07:B3:B6:4F:B7:13:2F:21
            X509v3 Authority Key Identifier:
                keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ec:02:98:32:27:d2:56:74:c9:19:28:1b:9f:0b:f6:42:06:
         9b:8b:eb:99:85:11:ff:4c:18:ae:53:4d:82:a9:b2:aa:96:cd:
         98:a3:2c:79:64:a1:e3:71:ad:6f:b5:94:ee:0e:b2:d4:4f:4e:
         81:a1:d3:79:a7:a1:bb:f8:8f:1b:af:38:36:87:fc:1b:7d:c2:
         16:0e:ef:f5:b7:a4:31:d6:f8:3d:d7:e4:ba:0e:57:8f:ae:b2:
         f2:e7:59:ae:f7:a1:19:c7:88:7e:52:30:1e:88:34:87:48:68:
         eb:82:ed:6c:4c:9f:9a:b0:2b:a1:d4:f2:dc:71:21:66:ee:f4:
         26:86:c8:38:75:30:b3:40:cd:26:c8:7c:e4:32:4a:b7:1b:6a:
         93:28:58:20:ad:be:56:98:d4:e0:10:ea:01:8a:a1:0a:99:69:
         6b:28:d2:20:11:72:e5:52:9a:04:2e:fb:eb:6b:87:62:d4:d8:
         f6:fc:7c:07:be:b5:a7:59:f4:92:e7:ec:db:db:98:34:b8:4f:
         e1:15:0f:4d:57:75:68:2e:c5:98:58:76:75:09:86:10:15:95:
         89:5d:ee:35:97:5c:76:28:ed:ab:6e:cf:ae:bc:ae:f6:47:a0:
         ee:a9:8b:b0:d9:00:aa:45:11:b0:3b:05:3b:46:ad:38:55:13:
         60:ee:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:42 2026 by rpki-client