Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
File:                     Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json)
Hash identifier:          kjZqEheHU9An1zS9YvGTfcLIyLVqC8/sn/6TTCbQeUg=
Subject key identifier:   68:7A:62:FD:9B:99:16:0F:6E:A0:79:22:FE:F4:A0:ED:20:9B:21:6F
Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA
Certificate issuer:       /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
Manifest number:          0193
Signing time:             Mon 02 Mar 2026 03:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:25 +0000
Manifest next update:     Mon 09 Mar 2026 03:00:25 +0000
Files and hashes:         1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: Sxlop2BJeeVKSvyZ4F9qB9f4GlQ3INbEudyDkeHjiu0=)
                          2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: qpM8Z2/aK8tIWbW9LEWOpp+9seUQHE+IP9vStE3DYZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBD, serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
        Validity
            Not Before: Mar  2 03:00:25 2026 GMT
            Not After : Mar  9 03:00:25 2026 GMT
        Subject: CN=69a4fd4a-772c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:33:8e:4c:68:ad:b0:5f:48:09:45:50:12:
                    5a:4c:57:08:7e:b9:0c:8d:4b:0a:93:b7:59:43:51:
                    8d:84:45:cf:19:0b:3d:87:aa:84:24:b1:8e:06:c9:
                    85:d3:50:cb:71:59:48:16:7a:ea:c8:86:f8:52:1c:
                    6b:62:90:fc:2b:84:ac:a5:eb:01:24:93:18:f2:5f:
                    18:f6:c9:bf:56:07:9c:ad:a3:f1:d6:3e:75:ad:c0:
                    3f:c5:ff:ab:c8:54:29:10:b9:12:ac:0d:51:e8:69:
                    f3:85:0f:9b:7d:36:6a:6a:47:a6:1d:58:c5:bc:34:
                    94:42:13:9b:c7:82:20:d1:85:9e:25:aa:37:cc:6c:
                    a8:e1:8b:3a:df:41:57:c5:d7:1a:22:1b:7f:1f:96:
                    4b:82:d4:56:ab:1b:d6:35:35:c7:c8:da:07:c4:ba:
                    fe:5d:d2:bb:12:9a:38:22:a8:5b:6d:35:1b:e7:2a:
                    ad:49:91:28:bd:a7:2f:3e:fe:76:86:8b:d4:db:10:
                    3b:08:9d:b3:7c:71:ee:7f:32:60:db:00:40:97:8e:
                    3b:71:29:d1:13:c9:d7:d0:3b:f7:f8:a8:a5:b8:11:
                    ed:c6:d2:bf:df:e1:dc:f4:4c:21:13:fd:05:35:c7:
                    50:b6:6e:d4:3f:7a:44:af:91:f2:f3:a1:c8:8d:0e:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7A:62:FD:9B:99:16:0F:6E:A0:79:22:FE:F4:A0:ED:20:9B:21:6F
            X509v3 Authority Key Identifier:
                keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:69:b2:13:fc:6f:a9:3c:9b:d8:88:09:a5:5e:3e:50:05:
         98:5a:cf:e9:d3:64:bf:cb:ac:b9:cb:e8:86:50:18:22:7c:ee:
         25:b8:98:ee:ac:a5:44:29:34:78:de:fd:6f:ee:58:86:ce:82:
         e9:62:2a:f9:89:3d:ff:05:0f:97:a5:71:bc:e8:e9:2d:ad:a8:
         bd:3e:c0:27:e0:16:0d:c6:53:25:98:8d:3d:ac:52:22:79:4a:
         4e:e0:de:7a:6f:ff:5e:d1:1a:58:81:e3:14:d7:ba:db:16:86:
         e1:67:d3:02:0f:44:a0:78:5d:d8:ef:50:24:cb:85:c4:f3:c3:
         12:36:aa:f5:70:a2:f4:b2:e4:af:e4:5e:2b:f8:30:53:b6:a9:
         e4:e9:0f:a9:81:71:00:3a:84:d6:53:9b:a4:f9:c6:20:47:b2:
         1b:55:aa:a7:ec:71:c1:95:cb:7d:60:84:d9:84:ec:b8:0d:aa:
         6d:81:96:c5:8a:3b:3a:0c:4d:38:07:e4:7e:8b:65:35:a7:fc:
         23:74:75:d0:1c:d4:5c:68:c9:b8:9d:5f:8d:d1:db:3d:45:a8:
         b2:a9:ed:ed:71:6d:f0:90:c4:85:e7:e0:85:21:29:4a:a0:90:
         be:23:a6:3b:1b:fe:0e:a3:66:9d:f9:07:40:5e:93:9a:64:39:
         c2:57:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:45 2026 by rpki-client