Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File:                     9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier:          3WRgc4xkL8YaEgrjC6CNkMGGNrczUoW+u7QYsEjckSw=
Subject key identifier:   A8:B3:FB:08:16:03:32:54:C9:08:68:51:CB:1C:D6:F4:99:AB:48:66
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number:          0E0A
Signing time:             Mon 02 Mar 2026 03:11:46 +0000
Manifest this update:     Mon 02 Mar 2026 03:11:44 +0000
Manifest next update:     Mon 09 Mar 2026 03:11:44 +0000
Files and hashes:         1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: BKQd1KCi67iAQQsNEY98Qe59KdW9SEl8uLIHBqif+AI=)
                          2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=)
                          3: 79666614E79311EC81D3720BC4F9AE02.roa (hash: zwfI7z3VRHjM1UE44yYU3R88zP61K+ImfUlgTgT4/G4=)
                          4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: BuWqwvZP/WAlc5pltyqdqjYN2tYsPZenNwkSyiZ+IjM=)
                          5: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: jTINudEF1PytBKZidbXRaxHONjKZ1aZaJMZAVtgeI8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Mar  2 03:11:44 2026 GMT
            Not After : Mar  9 03:11:44 2026 GMT
        Subject: CN=69a4fff1-45ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:71:83:4f:25:55:38:d0:9d:96:b4:91:57:
                    2c:99:1b:dd:9c:95:39:69:7f:2a:d3:74:85:93:96:
                    1c:35:c3:c0:b3:53:13:17:fb:05:a6:be:b5:89:88:
                    94:17:04:63:24:e5:c7:f7:ca:b9:bd:9c:96:a7:87:
                    0b:e0:e3:98:d3:c7:65:18:aa:34:c0:c2:5c:bf:38:
                    5c:e8:a1:13:f5:de:bc:48:df:7e:63:81:d0:6b:7c:
                    9e:cc:39:6a:41:3d:f7:2c:ba:33:4c:50:e7:b5:d5:
                    bb:b7:c2:ba:71:4b:77:6c:ce:ae:a9:f2:0a:be:da:
                    29:99:3a:87:29:8b:10:a6:e7:ca:1f:48:f5:f0:45:
                    a5:8e:e8:74:03:03:b3:b6:00:7a:ea:1b:cd:e1:a3:
                    67:72:88:5b:41:1b:9b:10:67:49:0e:e1:6b:35:c2:
                    37:de:88:41:88:f3:cf:91:58:bb:7d:5f:7c:88:62:
                    b2:5c:d0:42:7d:f3:42:16:6e:e4:34:65:03:cf:dc:
                    f3:4f:c6:b4:4f:26:66:50:7b:e6:98:06:1b:01:1a:
                    3d:28:8d:bb:14:e8:bf:18:78:07:4f:fd:58:4d:76:
                    50:5d:76:dc:dc:e8:d8:00:b0:43:d1:88:91:10:05:
                    e1:3f:9a:49:87:bf:6d:cb:8b:0f:63:1b:79:55:9b:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B3:FB:08:16:03:32:54:C9:08:68:51:CB:1C:D6:F4:99:AB:48:66
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:48:64:9f:42:a6:bf:69:75:84:71:74:05:de:db:27:24:
         99:99:3b:eb:73:3e:98:9f:4b:43:a4:16:ff:e6:77:e7:cb:79:
         05:89:d1:61:94:4d:b3:12:59:b7:54:18:29:3f:77:f1:f8:0f:
         4b:04:d5:f3:0c:0d:c8:27:5c:70:dd:0a:a7:71:b0:e9:b7:2c:
         15:12:04:7c:31:63:1d:8d:be:97:f5:6e:82:5c:fb:fc:11:f6:
         03:3e:fc:5b:7e:8e:31:a2:0e:67:17:a4:75:c4:a3:d4:80:2f:
         2a:4d:33:b8:35:f0:3a:7e:2b:a1:b7:18:7e:f6:91:7d:5d:8e:
         f8:74:45:c8:0f:b5:1e:6f:00:b6:4a:15:d0:ca:a5:27:ba:75:
         a7:5e:14:a8:88:b9:35:0d:bd:23:b2:66:36:2e:86:1d:51:e8:
         14:76:00:38:10:eb:e6:6d:13:3f:98:7a:ab:99:79:d2:1a:01:
         0c:66:f7:45:5d:f8:66:67:40:42:ff:b9:44:f9:b6:2a:1c:7a:
         9d:65:bc:3d:8e:2d:38:db:d2:c4:9e:ed:5c:70:45:6d:5a:60:
         b5:89:86:d2:da:8e:ff:4b:e5:24:51:b0:e3:47:54:17:cc:20:
         ae:45:91:ca:2b:ef:1a:40:fa:ca:06:ec:f3:a7:a4:cd:62:1a:
         21:5a:c4:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4
OTFFNEY0NEUwHhcNMjYwMzAyMDMxMTQ0WhcNMjYwMzA5MDMxMTQ0WjAYMRYwFAYD
VQQDEw02OWE0ZmZmMS00NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLRxg08lVTjQnZa0kVcsmRvdnJU5aX8q03SFk5YcNcPAs1MTF/sFpr61iYiU
FwRjJOXH98q5vZyWp4cL4OOY08dlGKo0wMJcvzhc6KET9d68SN9+Y4HQa3yezDlq
QT33LLozTFDntdW7t8K6cUt3bM6uqfIKvtopmTqHKYsQpufKH0j18EWljuh0AwOz
tgB66hvN4aNncohbQRubEGdJDuFrNcI33ohBiPPPkVi7fV98iGKyXNBCffNCFm7k
NGUDz9zzT8a0TyZmUHvmmAYbARo9KI27FOi/GHgHT/1YTXZQXXbc3OjYALBD0YiR
EAXhP5pJh79ty4sPYxt5VZsRMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKiz+wgW
AzJUyQhoUcsc1vSZq0hmMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB
MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP
elprUmFOajNNUGVKSGs5RTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADDBIZJ9Cpr9pdYRxdAXe2yckmZk763M+mJ9LQ6QW/+Z358t5BYnRYZRNsxJZ
t1QYKT938fgPSwTV8wwNyCdccN0Kp3Gw6bcsFRIEfDFjHY2+l/Vuglz7/BH2Az78
W36OMaIOZxekdcSj1IAvKk0zuDXwOn4robcYfvaRfV2O+HRFyA+1Hm8AtkoV0Mql
J7p1p14UqIi5NQ29I7JmNi6GHVHoFHYAOBDr5m0TP5h6q5l50hoBDGb3RV34ZmdA
Qv+5RPm2Khx6nWW8PY4tONvSxJ7tXHBFbVpgtYmG0tqO/0vlJFGw40dUF8wgrkWR
yivvGkD6ygbs86ekzWIaIVrEHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:57 2026 by rpki-client