Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File:                     MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier:          1h3x+sK4r0qXpkaXoyuMl/hSoJ+4j0WSyu0CnwtBkiY=
Subject key identifier:   1A:F7:38:93:3E:21:E0:46:E0:89:B9:CB:B1:30:AF:BD:EF:B6:A0:8C
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer:       /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number:          1F
Signing time:             Sun 01 Mar 2026 10:20:32 +0000
Manifest this update:     Sun 01 Mar 2026 10:20:31 +0000
Manifest next update:     Sun 08 Mar 2026 10:20:31 +0000
Files and hashes:         1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: aIbL3Sbx/5ohADfO97YCwJ+/AtWlfJYK0chOs8JIGSw=)
                          2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
        Validity
            Not Before: Mar  1 10:20:31 2026 GMT
            Not After : Mar  8 10:20:31 2026 GMT
        Subject: CN=69a412f0-4dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:37:af:5f:91:55:3c:59:d5:1a:28:29:e2:
                    2b:65:9c:06:c7:c5:9e:52:df:0e:2c:44:e4:bb:0b:
                    1e:ab:23:70:62:c8:ac:e7:61:e0:31:ac:95:55:98:
                    af:8b:15:ea:62:6c:f6:76:6f:84:c4:ce:9b:df:a9:
                    22:62:a0:91:25:d6:70:97:e9:86:17:94:8d:67:a5:
                    bd:18:32:61:b7:2d:56:37:3a:9a:42:42:3f:be:12:
                    e4:b7:e4:37:af:5d:90:7c:dc:a8:86:0f:c0:c6:6b:
                    bd:03:c5:1f:f5:25:45:5c:bb:e5:7d:a5:9a:7f:d5:
                    39:20:72:7a:11:51:ff:43:df:f9:3f:13:58:ed:0e:
                    07:aa:5a:a3:42:2b:be:bf:45:28:24:ff:b1:85:33:
                    15:59:d4:92:16:5e:39:e9:79:67:53:42:9e:55:f7:
                    26:80:57:46:e1:6f:3a:02:98:d4:6b:23:66:19:4b:
                    d0:0d:97:57:fb:b9:8f:0e:ed:06:67:4d:97:e8:ce:
                    68:cc:3e:2f:a0:6e:5f:77:ce:af:1b:e8:79:45:81:
                    79:92:43:01:39:57:05:c1:7e:f3:e7:ea:9d:fc:d0:
                    17:e5:b4:9a:0f:8a:8c:12:b0:66:21:46:5a:0a:bc:
                    cc:ba:6a:08:18:9f:95:a6:24:0e:69:8a:87:82:e3:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F7:38:93:3E:21:E0:46:E0:89:B9:CB:B1:30:AF:BD:EF:B6:A0:8C
            X509v3 Authority Key Identifier:
                keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fc:d5:fd:08:5b:68:2d:55:f2:7e:01:3a:2a:df:eb:9c:d0:
         08:7e:2b:8e:82:cb:e9:07:b6:0f:a0:cf:30:94:6f:dd:0b:18:
         44:05:c8:5a:72:da:b0:e4:16:75:ef:be:d5:92:a7:1c:ad:6e:
         16:31:2c:e9:6b:50:09:27:9e:59:ca:b9:1f:89:7d:07:d4:eb:
         47:3d:9d:df:65:90:55:f9:07:e2:5b:68:4c:25:ed:fb:3f:77:
         ab:51:51:a4:e4:18:69:32:e7:dc:f0:98:88:b3:48:e6:a0:51:
         17:0e:68:78:7c:e9:21:d8:25:03:8d:01:68:f9:c6:f3:7f:65:
         0f:6c:fd:21:62:bd:9a:68:f7:3e:22:47:3c:5a:3e:a1:6f:6d:
         03:d2:b7:a9:18:56:31:89:ae:75:67:f2:8f:55:36:f9:7d:11:
         18:d9:89:fd:72:5f:b1:b9:73:77:c4:1f:22:e0:1a:46:30:1c:
         77:17:2e:c1:5c:fd:89:e2:57:0b:a5:da:1d:a0:da:02:40:dc:
         26:a7:b3:8d:58:d5:59:1a:ba:12:74:77:a2:5f:56:47:75:bf:
         0c:70:be:6b:cf:69:49:e8:f5:99:71:e2:99:16:c6:da:7f:e1:
         89:11:a8:c2:21:4f:a6:87:f1:1d:55:97:0b:ad:3b:62:5b:c0:
         be:a5:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:14 2026 by rpki-client