Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
File:                     9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json)
Hash identifier:          f9raCCkOG5yj5kx6jKNkHx2BKP6QPj7Bdjg5cSeXOoU=
Subject key identifier:   6F:7A:E4:B0:98:4C:0B:4F:17:7F:61:7A:99:AF:0E:29:8D:0A:FC:7D
Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
Certificate issuer:       /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
Manifest number:          10F5
Signing time:             Mon 02 Mar 2026 17:35:08 +0000
Manifest this update:     Mon 02 Mar 2026 17:35:08 +0000
Manifest next update:     Mon 09 Mar 2026 17:35:08 +0000
Files and hashes:         1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: BIui3x6veGMWdt+OigQjVyICuO6efquS1I9YoSVwsBg=)
                          2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: eNZGXS/zqJii4r7Dp4wSHUyscFNYWSRreo4HbBsG1r8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
        Validity
            Not Before: Mar  2 17:35:08 2026 GMT
            Not After : Mar  9 17:35:08 2026 GMT
        Subject: CN=69a5ca4c-00f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:14:d6:41:e2:8a:bf:1a:a4:57:2d:c9:09:
                    cf:c8:87:bd:1f:8f:5b:fc:e8:23:91:21:86:b9:28:
                    c3:1d:8d:b4:2f:59:9c:2c:cf:19:fd:b7:46:3a:d6:
                    a4:f1:8b:98:74:f3:30:e5:c6:dd:f5:2b:05:3b:03:
                    4d:2f:79:5e:67:d8:ae:34:40:12:80:6d:1c:4e:9b:
                    73:24:05:47:fa:a1:bb:06:e5:1a:9c:37:79:61:fe:
                    51:d4:61:e9:1c:70:0b:0b:f0:f0:a0:d0:3a:ec:71:
                    4a:22:c6:c6:71:7c:07:2b:c3:33:e4:e1:4b:09:71:
                    61:cc:e7:d1:f3:ac:74:be:71:87:0f:e0:ff:dc:89:
                    eb:cc:d4:98:28:4b:c7:37:f6:e4:9c:10:b9:9a:44:
                    a4:d1:80:a9:46:a0:b0:37:34:ea:8c:a8:32:65:5e:
                    46:04:3b:be:d1:ba:f8:d5:5d:72:88:7c:15:e4:ed:
                    8e:72:9d:99:3e:89:4e:08:cf:15:9d:1a:b0:5e:53:
                    bb:df:92:ee:97:e8:ad:5f:62:cf:b6:95:2e:6e:27:
                    ba:cf:43:4b:20:ab:24:9f:aa:7f:f1:f3:8a:86:cb:
                    16:7d:a2:dc:93:d8:f6:b3:15:d6:1c:27:54:4d:90:
                    62:2c:ea:1e:9c:2b:0d:a2:d6:05:32:05:80:9a:83:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:E4:B0:98:4C:0B:4F:17:7F:61:7A:99:AF:0E:29:8D:0A:FC:7D
            X509v3 Authority Key Identifier:
                keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:50:28:bc:b9:bf:fa:a4:e7:54:d3:0a:77:b9:d4:2e:95:
         67:98:54:5f:cb:a9:26:36:0e:05:7b:09:4c:1a:7c:d2:09:d6:
         22:e2:8a:c2:c4:35:13:92:9e:fe:47:c8:2b:5e:60:d6:9a:02:
         4a:b3:1d:4b:5b:c5:a4:b6:85:09:43:0b:5b:3e:e5:70:ac:a4:
         51:1d:6b:9b:37:59:31:ee:26:66:16:e5:f9:0e:4f:28:21:81:
         76:49:e2:44:4a:be:d9:0a:33:9e:5c:98:52:31:85:36:22:7e:
         21:67:da:28:3a:0a:e5:5c:3c:a3:7e:4e:ee:84:7e:8b:55:48:
         e6:f8:94:37:97:5f:8d:cf:1f:6d:9d:64:fd:64:2c:39:41:04:
         64:0d:a9:d5:ce:a4:66:57:b0:ba:ea:bb:57:a1:ca:09:de:c3:
         4e:75:b7:4e:81:35:7c:0c:05:6d:57:c2:73:6f:f3:94:86:0a:
         a0:ee:e0:c5:f2:f2:43:fb:c2:74:10:a6:ec:26:0c:03:36:4f:
         1e:09:46:08:d4:6f:46:45:48:14:e0:50:6c:74:4b:23:ca:5b:
         1d:8c:b7:37:c5:f9:c1:f5:4a:92:a3:79:23:dc:1a:db:e9:86:
         a8:ea:02:9c:05:99:b5:ab:07:80:87:b3:81:9e:4e:3b:ea:00:
         7e:a4:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:21:34 2026 by rpki-client