Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File:                     MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier:          DqKsWup/Rg5Jk+0u5xtbfVNHK5OsjbUyPEBPM8NVODo=
Subject key identifier:   7E:B4:5C:89:9A:E6:31:FB:9A:C7:BB:E5:A5:1D:AC:3C:54:20:B7:9B
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer:       /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number:          7E
Signing time:             Sun 01 Mar 2026 09:02:41 +0000
Manifest this update:     Sun 01 Mar 2026 09:02:40 +0000
Manifest next update:     Sun 08 Mar 2026 09:02:40 +0000
Files and hashes:         1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: obdRec5kSdctuhBsXbe4/Wi4lKpXsZYzqPZFlLL929g=)
                          2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: RjBz7DM9PWj4EYARJmqJIScM3PQCM6ck/UDuntxMtmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
        Validity
            Not Before: Mar  1 09:02:40 2026 GMT
            Not After : Mar  8 09:02:40 2026 GMT
        Subject: CN=69a400b0-3fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:fb:04:12:a1:8b:4d:6b:ed:d9:fa:8f:2e:
                    88:e1:ef:a5:ab:f3:4b:a5:25:50:5b:24:11:48:ef:
                    15:d7:a1:13:72:b0:68:15:45:92:40:be:45:56:e2:
                    d7:45:3c:9b:39:23:39:00:d5:69:df:91:aa:89:9e:
                    82:b1:76:e1:3e:4d:11:92:7f:eb:43:32:b3:c9:f3:
                    27:1f:ed:d2:c1:6a:9b:67:d5:67:4e:8a:a1:dd:03:
                    54:03:c2:02:e9:e9:94:4a:4f:19:9f:8b:74:73:57:
                    82:c5:d7:80:23:e2:e2:7d:bc:40:d3:62:23:79:04:
                    bc:08:c6:51:e3:a9:b8:62:04:d0:8c:01:9d:61:2e:
                    1d:4f:d0:6f:c2:6e:ca:92:49:d0:a4:df:d9:e5:44:
                    95:43:e2:dd:bd:61:5f:85:f2:1e:7a:a3:9b:c8:f0:
                    5c:09:d5:d1:35:ed:54:62:56:93:bd:7c:76:75:3f:
                    d3:4f:67:da:66:0a:9b:d3:fd:f3:30:ea:eb:74:44:
                    71:31:f6:39:7f:26:e0:48:97:f9:8e:6d:a1:36:79:
                    91:af:8b:fd:60:d7:d9:29:20:e2:0b:c0:3a:45:27:
                    e3:ee:0c:62:5d:93:68:12:58:cc:51:9f:e5:52:76:
                    9e:f9:f4:d8:54:77:c0:c6:d5:fb:46:78:59:2c:ea:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:5C:89:9A:E6:31:FB:9A:C7:BB:E5:A5:1D:AC:3C:54:20:B7:9B
            X509v3 Authority Key Identifier:
                keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:9f:fc:0d:ba:6c:e9:42:e9:a5:71:c5:fe:1b:61:a3:b5:
         be:36:0e:b7:e9:e8:39:db:5b:29:cd:81:ac:ce:c2:17:5e:f1:
         6d:71:34:10:08:b3:3d:a0:3f:1a:e9:90:94:ba:5e:a3:8d:a6:
         cc:b6:9a:ca:01:3d:b8:32:78:bc:3c:c5:09:89:de:ee:5d:3b:
         73:a0:d3:3e:7f:ac:b5:7d:26:33:7f:d1:95:60:c3:b0:5b:7b:
         f7:af:44:62:53:b5:6d:58:ee:9b:72:3d:20:3a:7e:5b:6d:25:
         2e:56:3e:9e:b8:1e:3d:73:b3:c7:07:c9:b7:a6:f1:b0:d0:e8:
         5c:fc:ef:2e:aa:5f:d0:cc:85:fa:0b:f3:d2:46:ff:9f:43:28:
         5c:38:1d:ca:ea:c6:dc:85:6e:5c:9f:df:ad:d8:74:6f:02:57:
         58:f0:ac:1d:13:f3:08:8b:f5:f7:03:f9:4a:f9:03:85:95:09:
         6f:32:b0:31:d5:aa:5b:7e:87:1f:12:3a:16:8e:f5:94:0c:74:
         a8:cb:d9:0e:ed:03:ab:d6:13:58:04:9c:86:fb:97:7c:c6:0d:
         8b:5a:00:d8:de:f5:aa:c3:34:fa:ef:8d:8d:51:81:73:de:c4:
         8c:68:b7:53:10:89:14:ae:2c:4e:57:e4:47:ed:c0:d7:83:ce:
         10:6c:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:28 2026 by rpki-client