Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
File:                     h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json)
Hash identifier:          Sm2CVmSkK9BD/46QbpjP5xjGO72WthW2TC/puOvPzQk=
Subject key identifier:   8F:11:B6:47:7E:A4:60:A7:4E:82:E7:CE:3F:47:0E:48:03:CD:D6:93
Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
Certificate issuer:       /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
Manifest number:          0105
Signing time:             Sun 01 Mar 2026 07:06:47 +0000
Manifest this update:     Sun 01 Mar 2026 07:06:46 +0000
Manifest next update:     Sun 08 Mar 2026 07:06:46 +0000
Files and hashes:         1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: mNpswg3XdB63byPmHU+rZVha3UQ1NbTTNF4g22G4aho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
                          rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
        Validity
            Not Before: Mar  1 07:06:46 2026 GMT
            Not After : Mar  8 07:06:46 2026 GMT
        Subject: CN=69a3e587-471d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:f8:9c:c8:3a:f9:a4:57:8d:20:3f:b0:db:
                    fc:35:84:05:70:40:26:d9:80:59:73:83:27:e5:9f:
                    a3:c0:5b:db:52:7a:a1:e9:95:64:a1:ef:ae:69:ab:
                    66:57:17:ef:d4:f9:7e:c3:4c:97:d1:32:d4:d4:02:
                    34:07:0e:42:b1:20:ef:82:0f:28:76:ab:a5:0f:67:
                    4c:20:9a:8e:19:14:7e:74:08:b8:4e:7d:df:7f:4b:
                    1a:e1:13:c4:cb:8f:41:40:f1:3f:36:a2:e5:77:0c:
                    bb:8b:da:60:fa:6a:0d:55:1f:b4:12:24:a6:26:80:
                    8b:d6:cf:b1:ce:88:42:49:3a:53:00:2a:87:2a:e1:
                    46:69:70:bc:3d:dd:84:d2:c5:e2:b6:2f:29:25:7b:
                    6b:5e:88:57:fd:41:1c:fd:c5:89:7d:4a:ba:d2:4c:
                    83:99:29:86:60:a9:6b:b3:eb:96:a0:b3:26:c2:6e:
                    4f:0f:a4:48:88:a7:ac:3c:31:eb:7c:ed:b2:d6:8b:
                    7a:e8:31:74:c5:47:e0:72:cf:9f:57:c8:77:e9:be:
                    fa:93:5a:26:da:c3:a5:ef:13:2c:e3:c3:d3:1f:0c:
                    92:97:7a:43:a7:5f:7e:3d:53:83:76:fe:3f:9b:2f:
                    7b:ed:56:9f:be:59:ab:d1:ca:4e:25:d8:58:35:56:
                    af:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:11:B6:47:7E:A4:60:A7:4E:82:E7:CE:3F:47:0E:48:03:CD:D6:93
            X509v3 Authority Key Identifier:
                keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:6b:e4:fb:27:d3:67:9a:ba:66:53:5e:b1:d6:38:6f:78:
         f2:52:bf:a3:a1:1a:55:45:c9:4b:92:47:77:d3:65:32:29:45:
         86:22:3c:41:81:42:96:29:6f:70:7f:df:d3:8f:a1:38:39:a3:
         f3:6b:ba:d9:0a:92:8e:44:a9:c3:7c:cd:a4:46:bb:aa:d8:af:
         a7:49:12:03:55:3b:41:64:ab:17:84:c8:d9:30:c9:77:cc:b2:
         0b:8b:d3:65:55:95:bf:bc:7e:f5:7e:84:74:33:42:5d:5f:4d:
         2e:a4:16:98:8f:27:ff:ee:3f:94:3a:b2:8e:79:fd:53:4b:31:
         b9:5f:6b:16:b9:5f:32:94:e7:10:3a:39:ae:19:f2:c0:c1:71:
         07:72:e1:ec:d1:7d:fd:1e:04:42:27:62:e6:d5:e7:c9:50:b3:
         0f:28:0a:b9:a2:90:55:6d:63:5b:9a:68:48:b2:10:b4:2c:e1:
         0d:3b:73:51:d2:82:2c:01:95:53:9d:cb:17:2f:8b:51:ff:86:
         ca:e3:23:37:e8:18:41:6a:65:d7:17:6c:a2:f4:18:8e:f8:10:
         5d:a9:f2:16:2d:96:5a:98:c5:70:aa:d8:3d:c3:cb:f0:10:4e:
         64:73:f4:ac:74:3b:63:98:3a:21:c8:60:ff:03:fa:24:52:38:
         0c:ee:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:50 2026 by rpki-client