Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File:                     FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier:          EhdXdAxCFq8kGh/ym5BYzgseoM+1pid2qSLOjdM9v/Y=
Subject key identifier:   34:D6:D7:88:CC:E2:28:3D:D1:B9:A1:25:26:E8:9C:03:AF:60:01:38
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer:       /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number:          05DD
Signing time:             Sat 28 Feb 2026 23:32:43 +0000
Manifest this update:     Sat 28 Feb 2026 23:32:42 +0000
Manifest next update:     Sat 07 Mar 2026 23:32:42 +0000
Files and hashes:         1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 1QZuuUgdioDRqzJ+M2e2mt/VcgeGoRhmJ2LeXCdwzsQ=)
                          2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
                          rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
        Validity
            Not Before: Feb 28 23:32:42 2026 GMT
            Not After : Mar  7 23:32:42 2026 GMT
        Subject: CN=69a37b1a-cf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:ae:22:d2:ae:4a:40:29:8f:0e:df:47:00:
                    db:54:01:27:22:ed:18:ac:8e:1b:d8:00:4e:e9:19:
                    5c:0c:6d:03:23:d5:96:e7:b5:4e:be:47:e1:40:81:
                    54:b2:46:b8:6a:ee:b2:8e:c8:9b:fe:d6:62:f8:68:
                    1f:46:95:f0:7e:03:e4:86:ac:95:17:d4:62:cc:21:
                    2c:60:3e:a9:6f:89:6f:57:c5:9c:fd:b7:e2:05:5b:
                    d9:5b:1a:46:70:f9:f2:a9:d7:21:08:c3:0e:c5:bc:
                    85:20:bd:e3:7e:36:3f:46:bf:e6:b0:f2:e6:41:78:
                    a1:9d:e3:ae:34:2a:e4:6b:3c:2d:96:f5:30:2f:61:
                    af:8d:7d:0c:6f:f3:f0:ad:8d:89:53:c7:e1:b7:d9:
                    14:84:fc:21:f3:8d:d1:fd:7f:41:1a:90:8f:d6:a8:
                    a9:ad:7c:ca:88:14:90:9c:8c:4c:cc:ae:05:a2:9c:
                    3f:eb:8f:1b:8f:0e:35:9d:05:99:dd:76:03:e8:40:
                    43:c2:96:31:f4:4a:cd:4f:58:82:67:9f:f6:9c:d4:
                    87:6d:d7:b7:bb:c2:ad:5a:4a:a8:ec:7b:dc:99:97:
                    e7:68:48:ba:57:46:28:9d:17:a2:5f:44:29:7c:54:
                    b5:00:7d:44:42:84:2d:1e:5c:d6:b4:c3:1d:14:0c:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:D7:88:CC:E2:28:3D:D1:B9:A1:25:26:E8:9C:03:AF:60:01:38
            X509v3 Authority Key Identifier:
                keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e8:b6:48:be:81:03:54:12:a5:5c:e4:ab:9a:06:b2:01:1f:
         68:1a:92:f3:05:b6:4f:a0:40:2f:35:fb:2d:a0:0c:6e:aa:4a:
         c2:94:ef:18:98:49:88:c9:86:45:a4:87:2a:3f:89:06:e4:e3:
         a8:1d:2b:aa:91:65:02:a0:c1:a1:a6:e6:a6:0e:a2:d8:14:d2:
         16:9f:89:e1:ac:38:c6:b6:df:91:5e:f7:77:de:85:92:72:83:
         fa:69:8d:78:9e:3a:4f:b1:9c:2a:45:6f:a4:93:1a:8e:96:f2:
         f3:b4:02:4c:a4:fb:c7:2a:64:45:f3:b1:c7:19:31:4d:aa:c3:
         55:32:18:5e:dd:56:23:33:9c:de:5e:31:5d:f9:fa:48:18:4c:
         76:bb:cf:75:12:74:39:33:13:79:76:be:39:71:31:6a:cc:44:
         3b:bb:8a:d8:89:26:93:03:34:2d:00:8e:7b:15:1a:08:f6:e9:
         21:8e:6f:72:3e:24:95:1d:c0:88:e9:5b:27:cb:ce:1b:51:68:
         c7:08:c3:f5:f7:3a:f9:9c:fa:f7:f9:36:71:14:fc:b4:5f:fb:
         8c:c2:60:f9:5a:db:07:7e:f8:dc:d3:4e:15:be:8d:5d:f0:1d:
         70:3b:51:a0:9d:5d:40:70:48:30:c1:3b:7d:15:44:cc:05:19:
         80:30:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:35 2026 by rpki-client