Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          koTcy9Qk9XP2Y0SusoCXmUoOXKE1bF1PneO1ydsADKU=
Subject key identifier:   EA:49:97:82:C1:A2:5B:61:24:DC:B7:77:A2:93:AC:03:67:39:06:32
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          0174
Signing time:             Sun 01 Mar 2026 01:45:01 +0000
Manifest this update:     Sun 01 Mar 2026 01:45:01 +0000
Manifest next update:     Sun 08 Mar 2026 01:45:01 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: cJ/S4MY1tqPqwxeaAy+PY2nvFzZqnJbo/JUuSqleKtA=)
                          2: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: tVoqqiLOyxPllbxtoURxBqeqQkGic1F20vbAS9lt0XU=)
                          3: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: D8epG3RbH6PIZsRmwRm9X6xHLsgomayBZPYyoKFX7xI=)
                          4: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: /hckAqwo1+lWDkJCZw3Kbnzd3MmtHS//7geQDM2KeAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Mar  1 01:45:01 2026 GMT
            Not After : Mar  8 01:45:01 2026 GMT
        Subject: CN=69a39a1d-96ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:fe:af:4c:c0:05:fc:eb:a5:ca:94:63:15:
                    0d:c9:b9:f3:7f:ac:61:fe:fa:b1:1f:30:01:68:c2:
                    f4:2a:7a:4b:74:a4:92:92:cb:52:6b:b3:1e:4c:62:
                    ae:d2:8a:b1:b7:95:2d:d5:38:c8:25:f9:d2:ca:e3:
                    90:68:4e:cd:56:ed:c0:96:3b:a9:3d:1e:9d:93:a6:
                    d3:a2:1e:8c:4f:1d:d4:7c:98:9b:b1:fe:02:9f:f1:
                    11:44:26:16:08:db:7f:fa:86:77:21:3b:26:cf:c0:
                    30:5b:f6:39:8e:60:87:f9:8c:f6:90:a5:62:07:31:
                    25:ff:08:ec:5d:34:59:5f:6e:86:d9:0e:1b:62:ab:
                    42:5c:22:fd:4d:68:c7:7c:8e:b1:04:f0:3b:80:f0:
                    f9:b0:a9:81:78:12:79:b2:4b:68:89:20:b9:b1:05:
                    11:c0:23:2f:75:28:cd:2f:46:cd:42:43:ee:dd:03:
                    65:6e:51:b0:2c:10:d6:49:da:a8:03:3f:a8:75:12:
                    f6:0e:2a:19:bb:99:39:90:1b:9c:ab:2f:c8:d3:fc:
                    20:64:a4:e6:1c:53:60:93:2e:a7:48:1a:86:98:86:
                    18:68:a0:e4:79:19:0b:97:24:a7:f8:7f:c0:d9:88:
                    d1:3b:33:ba:d2:43:50:08:4b:33:73:13:f7:a9:0f:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:49:97:82:C1:A2:5B:61:24:DC:B7:77:A2:93:AC:03:67:39:06:32
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:89:be:2d:88:0f:13:88:f0:60:d6:41:09:ef:03:71:d1:
         6b:80:74:ab:37:fb:fc:93:19:a7:9d:1b:d3:f5:46:3c:31:c6:
         24:e6:74:ca:01:32:33:89:09:9b:f8:7a:59:a0:1a:95:54:bd:
         24:f1:e3:3c:64:2a:2a:a9:49:a0:ac:fe:66:78:e4:68:a1:5d:
         07:13:3f:be:a7:98:1b:b2:f4:32:fb:e6:65:6d:90:15:aa:c8:
         b6:f7:90:96:8d:cc:56:ae:e0:f6:de:d4:47:86:1f:20:f9:ed:
         9d:c3:9f:e4:ae:bb:21:13:dd:de:13:1e:32:8b:a9:ba:db:0e:
         d0:14:70:71:18:9a:4c:b1:79:49:13:b9:8d:59:dd:99:e7:1a:
         ad:00:fe:78:fc:f0:69:df:2e:94:7e:a2:b4:a1:66:c9:21:37:
         c8:e8:20:f6:d2:3a:56:29:92:24:a2:01:48:c6:5c:3e:f8:2f:
         6f:4d:e2:d9:43:7c:7d:09:b7:26:e7:9c:92:b7:a4:e1:73:6a:
         06:fb:70:ae:92:f9:35:f7:a6:a7:a2:69:e5:df:61:7e:fe:3d:
         9c:7b:dc:18:88:a3:4a:44:9f:2f:5e:36:0f:95:00:ae:b7:ed:
         f5:d9:c5:d0:c1:3d:b8:72:8b:f8:54:ea:db:e5:78:3d:69:7b:
         27:09:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:51 2026 by rpki-client