Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
File:                     n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json)
Hash identifier:          MjynMUQ3rtw5fyqRjNO3lkIsLTWGvOZuz8panYZR5kI=
Subject key identifier:   65:6A:73:E3:D7:8A:48:CF:83:C3:54:8E:B0:80:79:02:34:A6:38:E2
Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
Certificate issuer:       /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
Certificate serial:       07FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
Manifest number:          07F7
Signing time:             Mon 02 Mar 2026 00:23:35 +0000
Manifest this update:     Mon 02 Mar 2026 00:23:34 +0000
Manifest next update:     Mon 09 Mar 2026 00:23:34 +0000
Files and hashes:         1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: 6nChGFpf8P0+7rdoM6DlyVAKoyDtp4LDactL7T6IAmA=)
                          2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: wiBw1Q4j5CS0vrUgcJpbPls3Qv93cguUP6O6djdQ/yY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl
                          rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
        Validity
            Not Before: Mar  2 00:23:34 2026 GMT
            Not After : Mar  9 00:23:34 2026 GMT
        Subject: CN=69a4d887-3572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:4d:31:b3:ef:da:d4:aa:02:38:da:a2:19:
                    f4:74:a9:e8:d0:d0:35:d6:3e:dd:5b:eb:ed:98:14:
                    44:9c:35:c6:7d:25:ef:ba:76:93:34:65:8a:af:e6:
                    e4:4b:17:e1:14:78:f4:d1:74:cc:cd:12:0a:c1:7f:
                    ee:d1:5c:78:fa:93:92:0a:dd:21:8e:3f:98:2f:9b:
                    6c:e8:78:61:d9:48:56:0b:ad:39:b9:60:8b:d1:0d:
                    70:95:68:0c:98:0f:ca:51:b9:ab:b0:93:fa:10:47:
                    29:93:78:66:9f:91:25:58:b5:f3:8f:48:ed:55:1b:
                    32:87:a4:46:ea:46:b1:f7:a5:57:4b:54:96:f6:9f:
                    22:30:95:84:46:34:62:3a:21:87:39:de:3c:ec:43:
                    80:d4:55:13:be:bb:08:d2:45:4c:5b:d9:36:ba:e5:
                    86:1a:54:57:2a:ae:5d:d1:3b:aa:2a:8e:53:6b:1a:
                    4e:8a:44:f9:82:9f:87:68:1e:f1:14:8d:7c:6d:94:
                    c9:ec:02:06:92:18:30:19:ed:71:8f:16:e9:55:ed:
                    1f:ce:54:0b:7a:e3:2d:82:d8:78:97:b8:24:16:19:
                    e4:29:89:a7:2c:e1:2d:84:4e:86:b5:84:a7:24:26:
                    22:c1:78:4a:09:60:74:8f:92:54:e3:dc:6c:0f:7d:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:73:E3:D7:8A:48:CF:83:C3:54:8E:B0:80:79:02:34:A6:38:E2
            X509v3 Authority Key Identifier:
                keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:d5:08:fa:e3:be:74:0f:2d:f4:3f:05:c9:22:0e:a0:57:
         0b:36:5d:5a:13:92:82:c8:48:1a:6d:8f:10:2f:97:b0:8d:0b:
         65:4e:4e:af:b8:e3:26:84:b6:41:67:3d:82:4a:5f:60:0d:09:
         1d:e2:85:a9:82:c4:22:8d:be:a0:70:d7:ad:42:d2:23:aa:14:
         61:5f:cd:e2:c8:0a:57:c0:34:77:b6:9a:a0:8a:50:6c:ce:c1:
         a3:e9:13:35:35:5e:c5:a6:83:30:61:d7:a9:f9:9f:4c:06:36:
         3e:4e:85:d8:bc:f2:55:32:b5:d3:8c:65:d9:37:26:63:2d:25:
         b8:02:4a:e9:d2:2f:f8:1c:af:0e:93:09:c7:64:3e:bd:59:6b:
         4b:fa:c1:1e:56:54:99:b3:7c:b1:01:15:0f:49:a1:91:1d:38:
         ac:5a:9e:33:6c:95:30:99:4e:0d:d3:d1:84:96:43:6a:66:d4:
         e7:bd:b3:53:80:de:c5:35:ac:2f:ff:8f:4a:a9:1a:a3:bf:7e:
         77:b9:d7:ef:1a:a5:c3:71:8c:16:ce:43:71:aa:93:e9:5e:1b:
         08:1d:be:dc:44:8a:a1:c9:01:bb:20:23:6a:e6:0c:01:2f:93:
         c9:c8:e6:1a:b5:1a:34:d9:dd:8e:c8:83:c9:06:56:59:f5:9c:
         38:7c:b1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:00 2026 by rpki-client