Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          fR7wQiU2ZKnooLb3hvIORHMooFMHcJXZhIcy+2Ivfj8=
Subject key identifier:   28:64:8B:54:CE:5C:44:F6:95:D3:88:89:52:E8:43:C4:31:E7:47:C5
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       03C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          03BB
Signing time:             Sun 01 Mar 2026 01:28:57 +0000
Manifest this update:     Sun 01 Mar 2026 01:28:56 +0000
Manifest next update:     Sun 08 Mar 2026 01:28:56 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: nmnKkTBkCJYBzZnfS9gWAHAJQmqBuUstWS/L8PJJnuk=)
                          2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: 4UMRc+U+QvsxtO1R2mqRXzqp5X2s02DN1FDAeR0/6VE=)
                          3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: daMU3ImqJzsIleot5aS0XfHVIYpdh2rNrlvSYi4RSDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: Mar  1 01:28:56 2026 GMT
            Not After : Mar  8 01:28:56 2026 GMT
        Subject: CN=69a39659-a311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:bc:cd:91:de:fe:15:e1:28:67:8a:c0:82:
                    df:03:dd:67:14:7a:8d:e6:01:0e:25:05:a6:9d:c5:
                    2f:00:38:17:7c:bb:e0:0b:c4:aa:f0:d0:2f:4d:b8:
                    84:33:ab:f3:2d:55:a6:f8:37:d7:cd:7e:bc:88:01:
                    a0:b1:b4:06:a4:94:9e:47:cf:c4:88:34:02:47:91:
                    b1:04:b0:41:41:6e:6c:51:ad:42:98:26:8b:8c:9f:
                    9d:ce:df:61:90:b2:c0:a8:52:c8:25:fc:1e:55:c6:
                    e6:66:68:5e:32:97:f3:22:93:7d:f4:ce:c9:1b:fc:
                    7d:19:c3:8c:9b:47:6b:f4:e4:68:c1:af:85:34:65:
                    66:98:31:e7:8a:b2:27:16:5c:56:5b:82:65:71:3e:
                    29:3b:05:1c:de:93:af:c7:1e:8b:37:14:fb:47:79:
                    6f:81:bc:ca:3a:fb:6c:63:49:8a:b3:2f:7c:ff:0f:
                    a4:9e:2b:47:f8:bd:f6:be:63:b3:b7:6b:ce:36:d1:
                    f6:91:ae:a8:c8:8b:ae:0d:69:20:7f:cc:e1:26:6f:
                    d2:0a:4f:ef:7f:26:bd:42:43:6c:2c:02:e9:21:a9:
                    24:99:a7:92:f6:de:00:16:3d:52:44:bd:80:31:33:
                    7a:c7:91:18:49:17:f3:f1:62:5e:fc:0f:7b:17:0a:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:8B:54:CE:5C:44:F6:95:D3:88:89:52:E8:43:C4:31:E7:47:C5
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:af:de:d5:53:5a:a3:79:01:2f:ab:08:17:d5:1f:de:85:91:
         fb:62:d4:e1:ee:c1:27:8b:c1:96:73:7c:7c:5b:ae:43:80:56:
         41:63:65:d7:65:8c:6f:83:55:2c:b1:f6:0e:c9:8e:ad:e3:12:
         47:95:b9:d2:eb:27:9e:86:9e:f9:66:65:86:65:38:d5:ea:d5:
         88:82:e5:74:56:59:1b:29:34:7b:52:5c:c3:13:e7:4c:92:8c:
         66:97:b4:89:9a:e5:47:2d:f3:e4:ce:5e:17:05:18:2a:32:e3:
         1b:ae:4f:19:40:59:d0:b2:5b:61:66:68:4b:85:bb:1f:92:e0:
         39:4b:89:76:40:32:0f:09:44:d0:7c:0a:c3:fd:65:b9:f5:ae:
         8d:c1:e1:b9:cf:45:0b:61:11:bc:3b:c8:28:e0:d2:59:d9:b9:
         e4:e5:d5:5b:ad:e9:ea:ca:31:72:52:0f:36:f0:10:f2:0e:26:
         3f:51:6c:9f:22:76:63:ee:46:4f:34:0e:69:3a:f1:ba:68:ae:
         7d:ce:a4:5a:13:28:29:34:38:a5:eb:a3:52:30:5b:2d:e0:84:
         c6:14:4f:b9:bc:9a:24:26:8d:4f:06:f0:76:84:29:9b:e9:6c:
         df:69:df:55:cd:86:8f:2a:6a:88:ad:94:bc:3e:d6:d3:48:b6:
         3f:fc:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:53 2026 by rpki-client