Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File:                     _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier:          1X70inh4A4lfV5iJAdHIta/u4tV4u1N/Wl5OoJl+cag=
Subject key identifier:   09:36:D1:8A:B5:A1:ED:9F:7B:92:9B:2C:33:CE:6C:F1:3C:24:65:FD
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       3587
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number:          3556
Signing time:             Sat 28 Feb 2026 15:00:17 +0000
Manifest this update:     Sat 28 Feb 2026 15:00:17 +0000
Manifest next update:     Sat 07 Mar 2026 15:00:17 +0000
Files and hashes:         1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: dbaDUQHrvgWKbYzSROWnh1U0+RHikvM1xMlrApBK75E=)
                          2: 931C5524175011EB8585CA60C4F9AE02.roa (hash: zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=)
                          3: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=)
                          4: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: UllqnXfDL+2VdUTPx8xQ2Za44+cPvkaWdFYKS+C8QQM=)
                          5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13703 (0x3587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: Feb 28 15:00:17 2026 GMT
            Not After : Mar  7 15:00:17 2026 GMT
        Subject: CN=69a30301-b330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:0d:76:03:35:f2:30:a5:c8:6d:4c:22:3c:
                    75:4a:0a:68:0b:4e:3b:7b:8a:99:ea:6d:0e:4c:fa:
                    da:5f:3d:ac:95:62:fc:91:15:b0:2f:56:28:73:2e:
                    28:04:f9:b7:06:09:9d:b0:7d:fa:3a:ca:1f:1d:84:
                    9b:b7:7d:12:a6:1f:46:17:11:c3:5d:94:fa:07:00:
                    8d:e9:b8:fe:63:ee:80:00:10:66:a0:8f:41:e6:f3:
                    c8:aa:01:02:0f:53:76:de:76:aa:3c:f4:b6:c7:67:
                    4b:1d:e7:7b:ed:34:10:a5:ad:d1:b8:29:2b:7d:d4:
                    d6:70:ca:f6:80:69:3f:71:78:be:c3:16:25:20:e9:
                    90:fc:57:d9:19:2d:bf:d9:35:1c:71:9b:5f:af:a0:
                    e0:41:ad:36:0a:e2:da:2f:a0:98:5f:b7:43:1a:5f:
                    91:e6:8a:9c:2e:8f:12:8e:78:da:8a:07:66:5b:a1:
                    b8:b6:58:fb:11:80:0a:7a:9c:ab:53:26:e3:30:ee:
                    c5:21:00:c2:df:e8:f7:c8:ab:78:05:ed:00:6f:2f:
                    84:80:17:c6:cb:32:c6:14:43:12:08:75:b6:21:aa:
                    81:c0:72:24:04:bb:69:ce:67:71:d5:05:81:f9:95:
                    f5:03:2d:a4:52:4a:c1:05:02:97:6b:17:49:08:aa:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:36:D1:8A:B5:A1:ED:9F:7B:92:9B:2C:33:CE:6C:F1:3C:24:65:FD
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:50:d8:5a:97:11:6e:0f:cc:a8:77:a9:82:a7:e4:e9:f7:98:
         d0:7f:19:f7:8c:83:1b:17:14:c6:4e:60:5f:ac:b0:d1:5e:b0:
         25:ce:e0:ca:7a:6d:5e:f8:05:14:78:20:1a:49:e5:0d:2a:6d:
         06:68:f5:cb:81:cf:fe:9c:cc:77:98:8b:8d:22:9d:bd:e5:a1:
         fd:d9:dd:ba:ea:11:1c:5d:1d:03:2b:12:b2:8d:a4:a1:a4:7d:
         ab:1d:68:b1:f1:df:93:91:74:b4:56:5b:72:0d:9b:46:b1:b6:
         cb:51:4a:b9:c4:bb:64:d9:cd:55:ad:6f:ea:25:a8:c4:53:9f:
         11:2f:05:0c:ee:28:1b:42:ad:ca:c4:f6:ff:55:83:7e:01:9c:
         dc:e2:e8:cd:b7:94:9a:00:74:3b:02:10:64:a2:db:fc:59:2b:
         01:ac:21:7a:32:f2:9d:49:1f:a2:35:26:75:18:6c:e3:7b:e7:
         90:97:e2:7b:ef:11:27:41:8a:bc:e9:5c:9c:10:af:9d:3a:da:
         4b:87:5c:25:1e:7b:6c:fc:35:99:f4:a4:18:0e:3d:3d:95:b2:
         13:5f:8d:7e:5d:02:68:82:e9:76:73:c2:46:d3:91:c4:86:52:
         0b:4f:81:b1:12:95:37:23:c8:b6:96:3a:30:cc:b2:8c:fd:6a:
         44:37:b9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:22 2026 by rpki-client