Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File:                     40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier:          6+Fa+mNmQzx790BD+Sw+q371RJuTRhG9MtVJLcwltt0=
Subject key identifier:   AB:34:E3:9E:31:C1:62:70:1C:CC:15:AC:4C:70:F5:CF:A0:99:0D:5A
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer:       /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial:       0377
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number:          0369
Signing time:             Mon 02 Mar 2026 01:02:13 +0000
Manifest this update:     Mon 02 Mar 2026 01:02:11 +0000
Manifest next update:     Mon 09 Mar 2026 01:02:11 +0000
Files and hashes:         1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: S9Vqf9Jtna9Ybbcm3Jo5AbXlwOOTp0RgRb18N4X+wXE=)
                          2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: m+WKn873Hl55Khy/g6RA/gEeVV9c4cRJl02WKXW/PsA=)
                          3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: 5bJUFy/NaNMyZ9zgSNCfZmx6vdOpGOHo3QK1QhFuhLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
                          rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
        Validity
            Not Before: Mar  2 01:02:11 2026 GMT
            Not After : Mar  9 01:02:11 2026 GMT
        Subject: CN=69a4e194-3ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:38:d1:57:f2:6b:56:fd:e7:c3:27:50:2f:
                    ff:91:73:94:ed:18:da:ca:21:b6:38:16:e1:f9:1e:
                    aa:bd:31:7e:e9:25:c6:34:96:72:24:2b:60:a3:d8:
                    55:4b:af:3d:20:4c:1e:44:f8:dd:a4:16:67:58:b9:
                    1e:91:64:0e:b6:1f:cc:ab:b7:a1:3a:a6:14:86:ed:
                    28:69:fc:5d:c7:b4:e0:18:86:67:a4:cc:39:b9:1c:
                    16:f4:40:91:f2:91:07:8d:78:04:0b:db:a7:37:99:
                    e6:3c:45:1a:e0:18:0e:2d:d1:3a:8e:f3:74:05:ea:
                    ef:ed:df:18:e4:64:b0:6d:c8:84:db:42:19:9c:8b:
                    1f:b6:ff:65:f4:cb:2c:e9:28:03:1c:b2:dc:42:47:
                    04:6e:17:b4:f0:45:31:b1:a8:48:21:50:44:f0:c8:
                    cd:58:35:de:0b:1b:ed:3a:7f:30:41:45:6b:f9:58:
                    b5:4f:60:49:cc:37:9b:bd:95:2e:15:4f:89:2a:27:
                    ca:f3:34:b1:c9:44:24:5e:8f:cd:6c:db:60:a5:fc:
                    c8:03:b6:23:e5:48:6b:1d:ea:cc:c9:a0:3f:9d:48:
                    da:fb:72:30:87:68:79:69:7a:a1:1a:3c:06:3b:04:
                    70:40:95:29:52:0d:9b:23:b3:79:b8:df:cd:ec:1c:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:E3:9E:31:C1:62:70:1C:CC:15:AC:4C:70:F5:CF:A0:99:0D:5A
            X509v3 Authority Key Identifier:
                keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:03:2a:88:92:f3:36:d5:42:81:f5:c1:46:33:2f:18:90:
         a4:3c:17:7f:1b:b6:c6:2b:a1:cc:5e:12:0f:36:2f:ba:af:6b:
         a1:56:af:4b:14:19:b6:11:e4:b8:1d:df:65:bc:e5:92:32:6f:
         3c:f4:81:9a:0a:2a:fe:03:1f:c7:73:14:69:11:e3:4f:31:4b:
         ac:e4:52:f4:71:21:f9:f8:a9:8d:81:b5:9f:b5:e6:f0:cf:be:
         06:77:88:ac:ef:d3:73:e7:e2:87:8e:df:e2:e9:55:9b:69:2f:
         94:4e:09:6f:eb:03:a7:93:04:7c:20:92:2d:8e:ac:2e:ae:c4:
         de:f4:2a:0f:78:54:8f:37:01:80:fb:d7:e7:5d:69:b3:09:18:
         e9:fd:03:16:36:09:b8:f3:06:8b:40:dc:31:c4:ee:b2:ef:db:
         68:0f:be:e6:63:98:9a:36:b5:d7:47:c4:53:c9:91:cb:e4:46:
         4a:91:65:ba:ce:c2:92:43:de:7b:b8:c8:10:ee:77:50:ee:38:
         0f:1b:d6:62:e2:00:04:57:99:fa:7a:fa:43:49:eb:81:8b:df:
         7c:24:e7:ad:67:80:cc:a9:29:9b:68:79:d7:0f:41:b3:20:ac:
         9c:b8:f9:01:94:bf:91:df:1e:2f:05:ad:4c:ea:12:ae:ea:a2:
         2b:19:5c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:44 2026 by rpki-client