Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File:                     hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier:          afTb41R8e+Q7Mq4tccbT4Nqxy7CLmQYpkX2GhRxOajQ=
Subject key identifier:   85:2F:12:22:FD:60:8E:6D:0D:41:61:A4:F4:6C:31:7A:AD:F8:CE:7F
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer:       /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number:          0163
Signing time:             Sun 01 Mar 2026 06:00:03 +0000
Manifest this update:     Sun 01 Mar 2026 06:00:03 +0000
Manifest next update:     Sun 08 Mar 2026 06:00:03 +0000
Files and hashes:         1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: EN7wG7AhcP64YVvpijYEfTtUWDc4F+skVYWr3WYUjPI=)
                          2: 35274C3080AF11F0BAFC1E65C4F9AE02.roa (hash: 7HONP22Ru+ZwbPqR0qZD9dpRS6n+36hJIPSSh9b77BI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
                          rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
        Validity
            Not Before: Mar  1 06:00:03 2026 GMT
            Not After : Mar  8 06:00:03 2026 GMT
        Subject: CN=69a3d5e3-a212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:a7:57:cc:3a:e7:a8:bd:74:af:13:92:e7:
                    be:72:5c:62:6d:f0:db:a6:47:1b:a4:b9:6d:a7:16:
                    e8:af:7e:17:45:1d:a9:6d:15:26:de:55:3e:fa:ad:
                    d1:88:c0:bd:39:01:41:06:10:11:e3:3b:c9:03:de:
                    b7:26:53:c5:df:8d:e1:ec:1d:a3:cf:fb:e7:37:ad:
                    3a:36:88:bf:87:ae:a9:ff:13:d9:8b:0e:5e:76:96:
                    46:cc:7d:8e:7d:a7:f5:08:d2:74:89:f5:bf:c3:4b:
                    01:4b:b8:1c:91:a1:25:c2:bc:35:60:81:53:6d:40:
                    6b:96:f4:d3:d3:ad:ef:7f:76:93:72:17:0d:61:41:
                    25:52:b6:b3:e7:e4:0f:a0:9e:21:68:42:54:ce:82:
                    de:41:71:fd:c8:6f:ef:44:c2:5e:8e:17:50:a0:9a:
                    75:ff:1a:7a:a3:56:48:e5:2a:e9:d9:4b:c3:3a:0a:
                    69:90:71:c6:0f:87:46:c4:d5:3a:06:ee:30:48:35:
                    11:fc:81:e4:5c:de:86:35:81:8f:01:5d:fa:6d:8f:
                    0c:a1:57:82:66:26:e2:9a:7d:4c:e4:6d:6a:e4:03:
                    5b:56:53:ab:2d:c6:ec:d9:0b:f6:eb:22:dc:11:63:
                    6c:32:63:56:49:34:3d:a7:05:99:f9:fe:f1:4e:da:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:12:22:FD:60:8E:6D:0D:41:61:A4:F4:6C:31:7A:AD:F8:CE:7F
            X509v3 Authority Key Identifier:
                keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:dd:6c:04:88:4e:ca:e8:b5:76:04:3e:c4:c7:e6:4b:7d:
         07:00:76:d6:7f:c1:a4:b3:4d:61:14:7f:f4:41:cc:01:6f:a9:
         b6:ea:df:7e:c0:a8:16:7e:a6:f9:3e:1d:2e:ee:96:91:1d:b5:
         cb:96:30:34:f5:3c:36:da:d4:de:75:47:69:86:2a:b4:4b:57:
         b4:10:78:8d:b8:c2:12:ba:5f:5f:7c:c0:ca:d7:22:3e:93:87:
         81:a9:e7:cf:01:f3:5c:ca:44:e0:73:5b:ec:77:a0:8b:c6:63:
         a9:11:57:44:b5:1b:79:77:81:54:65:39:be:45:42:0f:c7:7e:
         0f:88:49:ec:9b:eb:b9:c6:ed:ba:70:55:ed:07:b5:27:e5:ed:
         11:ec:73:1c:1a:34:2e:61:49:9b:1a:34:21:be:b6:6b:02:99:
         3f:77:4b:78:f0:e6:5f:8d:0a:28:1d:12:e6:b9:8c:47:42:38:
         cc:1e:a5:75:1d:a6:6d:85:85:fa:8d:aa:ac:54:7c:ba:a9:f6:
         ce:c0:00:3d:06:05:c9:1a:ad:8c:a2:c1:08:f0:dc:8a:29:8f:
         42:ba:0f:a8:76:ad:bd:f6:c8:6d:79:b4:03:19:70:32:ab:fe:
         7e:9e:57:40:43:04:c2:62:39:f6:f9:09:30:e7:32:c7:84:42:
         84:bc:a6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:42 2026 by rpki-client