Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
File:                     kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json)
Hash identifier:          h8E+sy9+IFDe6vb1RTag0UtgMjNuPtkT2NRu62AE53E=
Subject key identifier:   04:B8:92:DB:CD:F8:C6:8A:DD:E8:3C:22:43:DE:38:3E:12:F6:5F:3C
Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
Certificate issuer:       /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
Manifest number:          0145
Signing time:             Sun 01 Mar 2026 06:17:20 +0000
Manifest this update:     Sun 01 Mar 2026 06:17:19 +0000
Manifest next update:     Sun 08 Mar 2026 06:17:19 +0000
Files and hashes:         1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: qx0ko9MM/6dF7FRJzS9ZUMudNVndKv7Qx9miMbV+vtw=)
                          2: CCAF2918109411F186362BB2353D8C67.roa (hash: 3H7OHy9sKEgSazQ78IwS5ttc4a8Kne4PE91rXNyqpYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
        Validity
            Not Before: Mar  1 06:17:19 2026 GMT
            Not After : Mar  8 06:17:19 2026 GMT
        Subject: CN=69a3d9f0-5c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:f3:49:69:54:e2:cd:de:07:f8:7c:df:75:
                    15:02:d3:c7:b6:2a:a3:2c:22:4c:0e:d8:6e:d6:d7:
                    d0:1f:d2:c8:a7:56:87:1d:c9:4f:ee:3f:a2:03:da:
                    da:90:72:10:9c:36:b9:f2:8d:92:49:7f:f2:a6:f0:
                    db:f7:f1:31:1a:1b:55:e6:8d:3b:56:a5:10:e7:c9:
                    11:74:b6:40:ff:38:ae:6d:7e:e7:ed:99:9e:83:42:
                    6f:8e:4b:3f:3b:55:71:40:25:d4:84:fe:c9:bf:d2:
                    c9:9e:a8:9b:3b:c3:23:bf:56:30:49:41:88:47:04:
                    c6:ec:6e:d4:94:5d:06:af:f3:df:24:ab:d4:90:6e:
                    81:2d:b9:cf:11:4f:c6:fa:39:2e:0c:62:f2:99:ea:
                    6b:ff:9c:3f:5e:b5:27:df:64:85:46:73:f4:74:a5:
                    aa:c8:27:75:d7:1c:ba:df:7e:c5:f1:84:18:13:6d:
                    75:cc:71:82:52:e4:5f:01:6a:46:29:1d:a8:27:61:
                    03:31:3c:38:6d:79:87:a7:a9:21:6a:06:d6:0d:1d:
                    3b:76:c8:88:6e:72:c5:89:6c:2b:f7:e1:37:a7:94:
                    53:51:79:2a:a8:3e:00:df:01:10:3b:09:60:2e:db:
                    52:05:dc:01:92:2b:a3:e7:d7:a4:f3:c8:0a:4b:ba:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B8:92:DB:CD:F8:C6:8A:DD:E8:3C:22:43:DE:38:3E:12:F6:5F:3C
            X509v3 Authority Key Identifier:
                keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:00:21:69:0f:2c:e4:7c:79:26:7f:8b:4b:dd:6b:46:04:97:
         53:3f:32:a6:87:ad:6a:55:41:55:c8:ef:f8:09:16:55:cf:76:
         d4:01:5d:86:f3:72:f4:9b:40:cc:d2:84:9a:f5:f5:8b:82:db:
         37:00:63:05:e9:f0:12:75:e2:e9:df:a5:e2:d5:49:75:39:c2:
         06:71:90:73:b6:65:61:aa:36:8d:7f:55:64:e5:2b:12:c4:c4:
         01:ac:6a:3a:77:d1:8b:9a:de:11:22:d7:b6:f1:7e:39:58:f9:
         3e:71:b1:eb:f9:76:22:c9:1b:41:89:c1:3e:a4:2e:e0:2e:6f:
         b5:b1:c6:65:a3:ca:8d:26:95:1b:5b:b7:7c:42:f7:b8:07:00:
         42:24:14:ad:f1:0e:41:1f:4a:d7:58:b3:c7:53:9b:c4:15:04:
         c0:c6:89:18:f2:20:e2:65:cc:3f:14:fe:1e:9e:50:ab:d5:2d:
         0a:16:ea:00:d0:e1:07:c0:93:f5:7c:ac:a0:3c:80:0a:03:c4:
         e3:33:79:3a:f1:d2:05:ad:3e:a5:84:c3:7b:75:75:2e:66:35:
         8e:84:37:5c:0c:23:21:27:8a:4a:60:bf:fa:b5:ca:69:c4:36:
         80:81:ba:33:ab:80:f3:04:ea:1d:c8:02:58:6a:18:44:3c:14:
         c8:b1:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:52 2026 by rpki-client