Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File:                     tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier:          kT9AxaagNSKoNGysT2iJ1vsaXt1RFysmuLehXLwlUK4=
Subject key identifier:   45:9C:F6:11:3D:15:DE:50:83:2A:64:A1:3B:4D:1A:30:24:81:15:0B
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number:          0214
Signing time:             Sun 01 Mar 2026 03:53:19 +0000
Manifest this update:     Sun 01 Mar 2026 03:53:18 +0000
Manifest next update:     Sun 08 Mar 2026 03:53:18 +0000
Files and hashes:         1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: y+yApwJZeGyE75MIhQeqklpslAQVuajkDoMEhl94qLs=)
                          2: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=)
                          3: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI=)
                          4: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=)
                          5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Mar  1 03:53:18 2026 GMT
            Not After : Mar  8 03:53:18 2026 GMT
        Subject: CN=69a3b82f-a06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:18:cc:74:76:56:5c:65:5c:24:04:b2:b6:
                    0f:a7:06:02:19:69:f5:71:7f:6e:34:50:8d:a6:10:
                    d4:61:2c:fd:48:1e:9e:96:fc:93:cf:f1:d9:5d:21:
                    cb:19:c7:54:66:f5:be:7c:d1:2e:40:9a:01:ec:45:
                    37:99:d9:28:cc:04:9e:91:18:de:38:49:45:87:7d:
                    93:f0:38:df:c2:23:ab:21:98:54:5f:67:2c:9e:71:
                    75:e3:89:4a:16:c9:c9:47:6c:83:3c:ac:93:33:0b:
                    bf:bc:f5:dd:98:c1:81:8c:ca:09:ef:3a:80:e5:7d:
                    23:99:09:90:14:11:87:90:a5:fe:a0:a1:ae:eb:1e:
                    a9:30:14:03:72:4d:cc:c4:4a:8b:e7:3f:b7:3d:57:
                    a4:e3:a7:10:d1:14:c5:c4:f2:35:2f:60:83:2b:ec:
                    65:64:ee:9a:50:de:b9:68:1c:14:76:67:4d:99:0c:
                    8e:a9:9f:e7:e5:3d:02:4b:87:38:76:a6:8a:1b:dd:
                    f8:b7:64:25:ef:f4:6f:1e:20:77:b8:ff:18:9f:98:
                    fe:01:75:bb:e5:ca:ed:82:a6:1c:10:72:c1:f2:8b:
                    b5:e9:f2:25:d1:b5:a7:24:11:aa:09:6d:80:ce:b1:
                    ce:83:d4:46:28:ae:98:da:f3:bb:e5:0e:8b:c5:9e:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:F6:11:3D:15:DE:50:83:2A:64:A1:3B:4D:1A:30:24:81:15:0B
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:81:7f:7a:3b:04:45:48:26:28:85:1f:9a:1e:a0:5a:fd:
         f9:ba:2c:ca:5b:2a:f5:fd:6f:cd:18:e1:b8:ee:ce:4a:47:78:
         be:81:25:a1:71:7b:b6:70:c9:cf:20:30:4a:d9:43:bb:90:39:
         aa:9f:8f:68:fa:45:30:ea:f7:91:44:3b:dc:b0:96:2c:d8:71:
         b4:5a:be:55:d9:e5:52:26:4e:6b:45:f0:dc:58:6d:13:fd:b2:
         b3:c9:9e:dd:c3:e1:d3:c9:1c:85:28:70:6b:d7:8a:b1:65:bd:
         5f:d4:2b:e2:92:89:ae:71:6a:df:96:91:ad:a9:91:f2:46:73:
         89:87:df:0f:2a:4c:8b:d9:61:e2:ac:60:0a:8d:cb:6d:3c:dd:
         f5:3a:13:bd:d1:d0:a9:c8:47:7a:f9:dc:da:5a:b3:ea:7a:b4:
         e9:fe:74:6b:cf:98:a0:d1:48:92:c9:d1:6e:35:90:85:60:f1:
         92:ed:99:c6:41:61:05:c4:51:d4:b0:55:ef:4f:a9:93:fb:71:
         d7:f2:d7:38:30:2e:49:fd:35:32:34:18:ae:a5:27:c3:3b:ac:
         dc:e4:99:3d:cd:c8:44:b4:af:ec:e8:0a:5f:07:4a:81:73:29:
         dc:dd:de:93:86:25:bd:b3:ad:df:40:10:51:e5:42:82:6d:06:
         89:ed:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:19 2026 by rpki-client