Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
File:                     S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json)
Hash identifier:          U/e1w2kV7UFFiffY9pEm0UcgWTvMRjAgB4XlrdBRTw0=
Subject key identifier:   E4:14:73:BB:2B:55:BB:38:FF:76:9B:36:5C:7F:97:9E:2E:05:84:C4
Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
Certificate issuer:       /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
Certificate serial:       03CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
Manifest number:          03BE
Signing time:             Sun 01 Mar 2026 23:34:21 +0000
Manifest this update:     Sun 01 Mar 2026 23:34:20 +0000
Manifest next update:     Sun 08 Mar 2026 23:34:20 +0000
Files and hashes:         1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: 2dASfg7M1H0iI+zglCTHu46XlVMuA4d+RpM5QfOkfyU=)
                          2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: +ePsXEldU8XwZr86Pjr8gpmcjv5LOq79B94UDeNsGa8=)
                          3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl
                          rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
        Validity
            Not Before: Mar  1 23:34:20 2026 GMT
            Not After : Mar  8 23:34:20 2026 GMT
        Subject: CN=69a4ccfd-1f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:b5:d4:48:6b:ba:3d:5c:69:6c:0c:64:9f:
                    95:24:f2:60:b0:0d:6b:d7:0f:a2:3f:fe:50:28:ca:
                    b2:32:2e:71:ef:4e:f0:89:6b:62:37:28:e1:71:57:
                    f9:fb:40:b5:f8:1f:da:de:03:40:61:e4:40:ad:af:
                    68:9c:80:60:c1:03:89:f4:fe:4b:e1:48:f1:4f:ee:
                    f2:8d:a9:ef:bd:ef:b2:4b:58:7f:a2:ba:81:2f:7c:
                    7d:df:db:43:9c:9f:ca:77:f8:6a:d9:0b:0c:d1:0a:
                    1d:c5:d2:f9:ec:06:ff:89:04:31:22:4c:3c:bf:c7:
                    b5:bd:26:18:50:61:d3:c0:ca:85:83:89:13:8a:44:
                    03:ac:94:63:ad:e1:fd:7e:3d:00:eb:ab:85:0b:63:
                    16:a2:df:ab:60:d7:f1:2f:a5:98:8d:23:e8:18:ae:
                    61:99:84:19:df:9e:2b:33:58:db:3e:da:9f:37:f9:
                    ec:3d:ae:a8:bf:4b:cc:cb:7d:4a:ad:52:19:56:60:
                    29:f8:16:39:c3:1a:bc:8f:7e:cb:7c:eb:36:10:9b:
                    04:bd:eb:69:84:ad:8b:bc:b8:28:54:cf:c6:65:43:
                    21:95:92:91:bb:3a:69:4d:60:77:5a:f7:ff:34:60:
                    01:6a:4e:48:06:bc:d2:11:1d:06:78:40:e0:dd:0c:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:14:73:BB:2B:55:BB:38:FF:76:9B:36:5C:7F:97:9E:2E:05:84:C4
            X509v3 Authority Key Identifier:
                keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:8b:c2:e2:12:d6:05:dd:2b:e7:45:29:fa:61:99:37:0f:
         c3:81:97:7a:7d:0b:11:49:d4:3f:c3:9b:f7:fe:d5:07:a9:62:
         1d:4c:38:bc:43:ed:31:e1:bf:75:32:b7:9a:8c:31:88:f2:3f:
         66:92:da:ea:c0:c2:97:f4:3a:92:5d:06:5f:dd:4b:0c:87:01:
         7a:92:20:4d:1e:4e:26:2c:6d:ad:9e:36:17:22:c3:b1:06:29:
         d4:de:7f:f3:00:b7:78:32:f5:52:dc:de:1d:80:20:98:92:09:
         f2:82:42:5b:88:ad:7b:be:a0:3f:5c:0c:bd:bd:18:61:e7:55:
         05:c1:16:6a:65:f0:f2:e9:3e:b5:f8:40:3e:aa:6a:54:f8:4b:
         71:38:6f:75:a6:db:45:97:3c:fb:a2:0a:8e:20:db:b8:c6:7c:
         e5:74:7a:ba:81:ce:69:76:bf:6f:e1:28:23:89:e5:72:b5:4c:
         2d:8c:f7:22:cf:25:0d:db:2a:53:3b:1f:cc:54:de:5f:aa:80:
         a5:2b:a4:6b:a7:62:ea:fa:c6:6f:85:75:f6:95:ed:56:76:23:
         88:ec:85:89:56:84:61:d7:e9:b4:37:9e:41:54:05:41:f3:d0:
         d3:d2:35:23:3a:74:3a:d3:60:62:ff:c1:41:25:55:f3:d1:30:
         69:89:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:20 2026 by rpki-client