Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
File:                     8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json)
Hash identifier:          6qMFYLK2/iM5sxvxeVeIq2vUkoCRJGGHihhjL9Of1Xs=
Subject key identifier:   3F:E8:06:5F:57:D3:73:16:22:A5:E1:6A:44:BA:36:80:13:66:E5:BE
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Certificate issuer:       /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
Manifest number:          0118
Signing time:             Sat 28 Feb 2026 14:24:08 +0000
Manifest this update:     Sat 28 Feb 2026 14:24:08 +0000
Manifest next update:     Sat 07 Mar 2026 14:24:08 +0000
Files and hashes:         1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: +p+Z50K0g64cenCEmmubWFnpXtk1I9s8lyK72nLBXok=)
                          2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
        Validity
            Not Before: Feb 28 14:24:08 2026 GMT
            Not After : Mar  7 14:24:08 2026 GMT
        Subject: CN=69a2fa88-3046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:b5:9f:1e:65:de:99:3d:42:9c:21:af:89:
                    55:57:6c:45:1b:85:28:5e:42:02:57:fe:03:13:17:
                    51:6f:4c:5d:6a:89:da:3c:90:fd:66:15:63:08:7d:
                    65:63:15:5f:8b:72:b0:ac:fa:d4:3a:17:46:df:71:
                    45:0e:4d:fd:8a:43:71:99:03:34:bc:a0:ca:aa:e8:
                    ea:c3:08:b0:ff:e9:4e:d1:68:45:cf:b9:e4:13:6e:
                    6c:02:a1:36:8a:50:08:ce:44:be:e2:9d:98:b0:41:
                    13:f3:7c:c6:e4:93:14:7f:6b:b3:27:67:26:31:c0:
                    9c:d3:48:ff:8c:31:6a:0f:90:01:33:16:4c:0a:2c:
                    5f:e4:6f:aa:d9:8b:25:47:17:92:fb:70:2e:64:f5:
                    7c:92:22:67:10:e0:88:ae:1f:c7:c6:88:b9:fb:87:
                    79:bc:bf:a1:69:a5:a5:1e:91:a6:7d:b8:13:f1:3a:
                    7d:19:b5:f2:dd:b3:d5:18:bb:1c:c3:ed:e2:4b:8a:
                    da:34:1e:04:0b:47:63:76:6b:d8:0f:95:22:24:39:
                    a4:9e:95:16:86:7c:b6:4e:e5:1e:97:ac:ec:cd:86:
                    0e:55:20:99:d0:6b:f8:d4:c1:b5:f0:7b:68:29:17:
                    ea:4c:44:2c:17:be:f8:17:a1:19:b3:f8:80:55:1d:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E8:06:5F:57:D3:73:16:22:A5:E1:6A:44:BA:36:80:13:66:E5:BE
            X509v3 Authority Key Identifier:
                keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a7:16:79:22:fd:47:e3:58:3a:0e:e8:8d:85:f1:56:15:35:
         e9:68:dc:9d:d9:6e:f9:5d:8f:6f:9e:ee:61:9b:7a:4d:e5:15:
         70:88:4e:67:33:9b:1c:e9:4b:62:70:88:b3:b8:8a:04:2b:df:
         63:b2:10:99:be:54:c1:59:7d:91:85:d6:1b:a0:c8:b7:5f:57:
         aa:b9:54:e3:46:e3:4b:05:b6:d8:f3:97:f6:19:75:05:df:56:
         1d:ae:5c:b7:c8:9f:05:d7:78:ff:72:23:47:c0:a4:77:5e:36:
         a5:a9:4f:2f:86:d3:99:1e:a9:de:34:77:a2:f2:be:0a:af:33:
         37:6b:d1:13:0f:30:7e:49:bb:b7:b4:cc:96:ef:00:6b:44:f0:
         ea:d8:20:8d:52:90:d6:12:2b:67:b7:1a:11:45:8c:9a:3c:df:
         67:60:47:50:a5:b7:63:19:28:08:5e:64:7c:8d:44:99:5a:e3:
         d6:60:ae:86:2c:01:fd:1c:25:c3:7f:b6:7d:93:f8:a5:74:28:
         2c:21:6f:0c:a4:2f:09:85:23:c1:07:59:5a:a6:05:2a:96:bc:
         d9:4e:dd:dc:78:aa:b7:87:39:f1:0d:c7:bd:f2:5f:0a:be:a7:
         45:68:fc:67:95:02:8c:4a:30:aa:62:6b:df:0d:8c:fc:ce:7c:
         87:7a:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:09 2026 by rpki-client