Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
File:                     125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json)
Hash identifier:          kvDS0hh7AcRRr+EOEe8JXbyqnFz44H86Gtcgo88hfDg=
Subject key identifier:   8F:05:64:17:E2:2F:9D:42:43:C8:41:0A:EF:99:BE:65:67:80:A3:75
Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
Certificate issuer:       /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Certificate serial:       0599
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
Manifest number:          0591
Signing time:             Sat 28 Feb 2026 23:49:21 +0000
Manifest this update:     Sat 28 Feb 2026 23:49:21 +0000
Manifest next update:     Sat 07 Mar 2026 23:49:21 +0000
Files and hashes:         1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: WlkywMcnrU/u+gR/7GpqQXFPnx+8isCuxT1eOMYQYqo=)
                          2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: 8MfWeNhYxhDpcu3Q2id403p9h7HPr5MWk8+ke8t8UDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
                          rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
        Validity
            Not Before: Feb 28 23:49:21 2026 GMT
            Not After : Mar  7 23:49:21 2026 GMT
        Subject: CN=69a37f01-2627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:e8:46:e7:f0:31:a1:8d:14:ce:d7:00:42:
                    c2:6e:30:21:b9:b9:3b:61:9a:ee:a8:3d:92:ba:71:
                    46:c1:88:d1:18:09:e2:c6:d5:db:fc:a2:67:10:6f:
                    0e:51:4c:a6:49:3e:9b:d0:cf:59:28:68:49:55:a8:
                    0a:76:dc:14:33:4b:fa:94:37:86:43:87:ab:1b:39:
                    a1:8b:00:15:df:89:ba:ec:7e:df:f1:e3:32:dc:6c:
                    d0:a4:27:e0:8e:f0:b7:fd:63:fe:85:5f:78:e4:5b:
                    29:69:e6:00:04:d6:ba:17:0a:21:5b:d3:97:40:42:
                    ca:21:0c:ef:c3:0a:ce:76:3b:e0:4b:c2:e0:4c:25:
                    05:16:a0:64:57:f4:dc:ed:21:6d:d7:a4:f6:db:aa:
                    1e:cc:a3:ea:a5:fe:92:fa:e9:f4:07:df:f2:98:ac:
                    b9:80:a5:02:f5:7d:4d:ab:ce:6f:d9:7d:61:6d:f2:
                    e7:54:ed:09:e8:ec:c1:47:ea:8c:6b:60:54:8c:a3:
                    56:9b:33:db:ab:44:10:f6:38:08:f8:f8:16:be:b1:
                    b9:a6:d9:10:9c:b7:c8:d5:61:d7:e5:71:73:7d:f8:
                    a3:ea:da:98:d7:d9:ae:a8:91:38:7a:5f:5a:6b:48:
                    83:65:9c:81:b3:3d:96:a2:72:2b:b4:dc:b1:99:67:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:64:17:E2:2F:9D:42:43:C8:41:0A:EF:99:BE:65:67:80:A3:75
            X509v3 Authority Key Identifier:
                keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:4c:da:bc:fa:e5:5e:b8:0a:c8:1e:ff:27:d7:fd:93:50:
         18:04:c3:b6:b9:3b:45:49:cc:44:98:5c:69:84:fd:f9:30:35:
         1b:0e:32:14:03:69:17:41:0f:36:5f:05:66:78:ba:fb:40:4a:
         5f:4a:dc:d3:01:c7:d3:58:19:41:90:31:95:e5:f0:93:db:00:
         f2:46:b0:2b:34:f3:71:23:d3:90:97:90:3e:4b:c5:52:2c:59:
         38:54:26:60:43:a6:a4:46:dc:b2:86:ce:a1:43:40:f3:62:3d:
         3b:8c:3a:0d:39:a8:52:00:25:d8:bd:f9:da:52:c7:2d:e3:bc:
         22:8f:21:0e:1a:9f:50:88:dd:58:2f:30:62:f7:97:9b:e8:0e:
         ef:d9:f4:04:fb:1b:83:63:65:da:4a:01:36:24:67:98:4e:85:
         3f:dd:41:c2:e5:fa:2b:a6:90:e5:ab:ce:7b:a2:1f:83:aa:45:
         bd:a9:06:2b:ce:81:64:44:02:20:09:83:2e:1a:b7:12:d5:2f:
         fd:98:13:70:46:b0:dc:69:95:ec:8b:af:55:7a:cc:eb:ae:b9:
         a2:57:97:6c:85:01:80:cf:5f:d3:ef:99:1e:21:4c:fd:8f:e9:
         52:a1:ae:63:cc:1e:5c:2c:d1:a7:49:1b:be:3f:a4:58:a7:76:
         dc:a7:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:16 2026 by rpki-client