Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File:                     23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier:          dW5r1H4QI5SPvcstZHx5IyJnA2LgVbJj+mT9TYSwm3A=
Subject key identifier:   89:6C:6B:4B:63:37:60:F6:E2:18:B5:84:6B:D3:D1:27:C1:FE:A3:D7
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer:       /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial:       070E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number:          06EB
Signing time:             Sun 01 Mar 2026 23:48:55 +0000
Manifest this update:     Sun 01 Mar 2026 23:48:53 +0000
Manifest next update:     Sun 08 Mar 2026 23:48:53 +0000
Files and hashes:         1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: 6dDpLURdXEXPVgxA9TQ/u3qgvqFH3zHoR+//uPbwZv8=)
                          2: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
                          3: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
                          4: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
                          rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
        Validity
            Not Before: Mar  1 23:48:53 2026 GMT
            Not After : Mar  8 23:48:53 2026 GMT
        Subject: CN=69a4d066-1a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:c7:f7:16:06:12:ae:2b:2c:25:2d:2d:e6:
                    35:8c:62:c5:fd:df:ad:dd:03:39:c8:50:93:e8:fd:
                    7f:d1:64:68:74:33:43:a1:0d:8a:84:b3:b2:3f:ed:
                    37:ef:99:ef:04:b2:0d:5e:de:e4:8a:4d:a9:fe:53:
                    63:49:e0:96:5f:ce:1b:89:c2:c4:e5:4a:83:d6:bc:
                    06:17:a7:15:11:48:90:57:65:4e:b4:b7:3f:de:2b:
                    91:59:93:bf:71:b9:93:e1:41:60:c5:99:9e:ad:21:
                    ed:10:78:09:69:64:64:f4:89:d2:a8:b0:89:e5:b4:
                    ad:47:77:14:21:7e:35:37:71:47:e4:b7:b5:14:cc:
                    42:cb:a6:d6:29:7a:de:1e:85:03:79:20:0a:c4:60:
                    c6:10:d3:fd:5e:ec:1d:52:73:84:dc:62:32:f0:4e:
                    2b:85:19:d0:b8:86:0a:5d:f3:19:e2:73:9e:ac:c7:
                    22:49:b6:7d:29:da:59:98:32:9c:e1:33:0a:13:c5:
                    30:ad:a5:ad:00:28:78:c2:d8:91:c5:50:dc:ff:fd:
                    6d:91:e3:e4:9b:bb:0f:f3:95:13:2e:8b:fa:7a:9e:
                    2f:ab:3d:7b:b8:83:a5:41:3e:a8:8f:6d:ab:13:88:
                    85:ad:ac:4d:57:f6:a3:61:ca:7f:22:9a:cd:e3:9f:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:6B:4B:63:37:60:F6:E2:18:B5:84:6B:D3:D1:27:C1:FE:A3:D7
            X509v3 Authority Key Identifier:
                keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:29:de:62:72:86:96:c4:d1:12:2f:9f:48:d3:a2:39:18:36:
         b6:16:33:5d:2c:75:79:08:16:e0:a9:14:aa:bb:01:d5:4d:87:
         b7:bd:b5:51:4a:ba:71:fa:51:58:80:7a:25:cb:8b:35:79:02:
         86:6c:f0:d2:b4:37:eb:3a:35:0a:62:44:f4:0b:ff:d0:7e:7a:
         1e:ae:f7:e3:63:04:d4:ac:ce:4e:c1:ab:46:55:39:8d:9c:b1:
         81:a7:46:93:17:58:20:8f:83:68:d3:86:5b:c9:c7:b6:7b:b7:
         42:7b:7e:ad:d4:32:43:18:62:69:11:20:7f:cb:26:1a:41:05:
         83:7e:e4:be:2b:24:a4:6f:ee:35:a7:12:42:f8:60:22:fd:26:
         a4:cf:26:09:ca:93:c2:d9:a9:bc:b9:9c:1f:0c:44:cf:bb:fb:
         3c:dc:22:ea:9e:bd:b7:75:c7:4c:e1:d9:82:ea:72:9f:2f:19:
         4b:ec:8d:63:33:5c:e8:2d:35:bf:0c:78:27:b4:d8:65:ae:a5:
         a8:6e:b7:18:ca:2b:ea:01:cb:13:e9:64:3e:b5:28:07:d9:1d:
         b6:03:9b:1e:24:68:6a:ee:e6:6b:4a:5b:cb:62:39:46:fd:fc:
         cd:0a:f4:8a:46:65:14:96:e4:54:00:89:d0:30:e8:43:ac:9a:
         6b:31:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:55 2026 by rpki-client