Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
File:                     R-8IU6LX3qJJt8P694FpyPjbx-k.mft (raw, json)
Hash identifier:          I4Nk+2lqXmFLqE/XWFW9s6khDa/0B75huenwR0I54Ic=
Subject key identifier:   7F:A9:93:42:96:48:C5:E2:A7:FD:40:A9:7D:4C:ED:1B:E2:5B:17:99
Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9
Certificate issuer:       /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
Manifest number:          47
Signing time:             Sun 01 Mar 2026 09:44:03 +0000
Manifest this update:     Sun 01 Mar 2026 09:44:02 +0000
Manifest next update:     Sun 08 Mar 2026 09:44:02 +0000
Files and hashes:         1: R-8IU6LX3qJJt8P694FpyPjbx-k.crl (hash: sBp4JQdhwtwiJ1Wo89rc5LVijR+uS8aAjBeHkr+zvjA=)
                          2: 6F324D3CAB2811F08D96D563C4F9AE02.roa (hash: kD5lmzkNkNAiRMyL5raIyZmwcauj/GPpt1ud3VtpSR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl
                          rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
        Validity
            Not Before: Mar  1 09:44:02 2026 GMT
            Not After : Mar  8 09:44:02 2026 GMT
        Subject: CN=69a40a63-978c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:24:dd:b9:45:af:ad:0b:ed:b8:bc:82:c5:
                    d2:d4:4c:80:66:56:e2:a2:fc:58:5d:cb:d5:aa:03:
                    91:3b:ec:30:20:cd:fb:40:50:52:2d:6e:ff:22:dd:
                    35:69:9d:65:1b:3a:72:5d:d1:86:74:8c:ca:ed:74:
                    7c:ae:6b:3f:54:0c:36:1d:6a:5a:ae:e6:3d:d0:86:
                    f5:78:b8:41:50:42:1a:d1:44:23:cf:b6:73:bf:02:
                    87:b2:1b:78:0e:36:a9:0a:d3:af:69:c7:ff:01:bc:
                    62:9f:77:f3:0a:2f:4b:1b:49:83:00:22:7e:88:c6:
                    31:12:03:ba:73:31:b4:4c:88:c2:40:4f:9f:c6:36:
                    16:2b:ff:cb:0d:57:40:7d:f7:ff:24:a6:68:93:29:
                    57:d9:43:9b:a2:7f:0e:02:7a:c5:86:84:3b:92:46:
                    72:47:6d:b0:21:8a:50:48:43:9f:c4:f4:40:94:38:
                    52:35:9e:a8:a4:ae:0d:65:ee:28:c9:a2:17:ab:4b:
                    9e:83:3c:73:de:5d:39:8c:4f:0b:53:8c:db:02:84:
                    4b:b8:7c:a1:0a:c3:53:b5:1e:4c:8b:40:8e:8d:99:
                    6f:cf:f2:10:0a:a1:5f:b1:fd:c9:fa:ca:d0:92:6f:
                    a5:b5:bd:0e:1f:37:6c:66:b6:36:7e:71:e1:39:48:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:93:42:96:48:C5:E2:A7:FD:40:A9:7D:4C:ED:1B:E2:5B:17:99
            X509v3 Authority Key Identifier:
                keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:08:8f:0f:76:41:1c:f6:d4:32:4e:63:7f:c6:c1:34:ab:
         c7:15:19:fb:29:39:d5:66:49:a4:23:c3:af:f9:c1:fd:45:fd:
         35:72:a0:53:62:ee:ad:ff:0b:40:5a:ba:66:56:75:94:31:2f:
         94:04:ba:79:79:5a:f2:1f:7a:77:ee:06:e9:fd:fe:df:30:07:
         2c:23:ed:b7:c6:1d:b4:32:6f:a9:28:53:6b:09:3a:bb:c0:d7:
         84:97:40:a6:a8:c6:2e:26:f6:49:d4:5b:57:f5:70:0e:72:9f:
         5f:fe:20:a7:59:04:f0:e5:ff:71:1b:f9:6e:88:4a:e5:f4:1f:
         08:12:bf:01:c9:eb:d5:ee:a3:ef:b7:70:01:1d:b5:bf:5d:eb:
         65:0f:f7:ff:82:79:4a:e3:9e:33:bd:10:fe:7f:68:24:ba:31:
         41:95:ed:56:a6:26:6a:e5:48:21:3d:08:ad:e4:f8:2d:39:27:
         45:a3:df:6e:23:dc:4f:d4:79:c9:07:4f:a4:0a:cd:39:a7:44:
         34:4d:53:04:23:f8:59:8b:c5:a7:10:d9:90:63:f3:0a:9f:b9:
         5c:74:e5:36:b0:cd:08:48:49:1f:da:75:25:16:b9:a7:84:76:
         0d:84:85:99:a3:fd:62:79:f6:ce:8f:fa:89:5a:1e:37:4b:99:
         b2:5f:1b:cd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTQ2RjExMC8GA1UEBRMoNDdFRjA4NTNBMkQ3REVBMjQ5QjdDM0ZBRjc4MTY5QzhG
OERCQzdFOTAeFw0yNjAzMDEwOTQ0MDJaFw0yNjAzMDgwOTQ0MDJaMBgxFjAUBgNV
BAMTDTY5YTQwYTYzLTk3OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5lSTduUWvrQvtuLyCxdLUTIBmVuKi/Fhdy9WqA5E77DAgzftAUFItbv8i3TVp
nWUbOnJd0YZ0jMrtdHyuaz9UDDYdalqu5j3QhvV4uEFQQhrRRCPPtnO/AoeyG3gO
NqkK069px/8BvGKfd/MKL0sbSYMAIn6IxjESA7pzMbRMiMJAT5/GNhYr/8sNV0B9
9/8kpmiTKVfZQ5uifw4CesWGhDuSRnJHbbAhilBIQ5/E9ECUOFI1nqikrg1l7ijJ
oherS56DPHPeXTmMTwtTjNsChEu4fKEKw1O1HkyLQI6NmW/P8hAKoV+x/cn6ytCS
b6W1vQ4fN2xmtjZ+ceE5SOZJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf6mTQpZI
xeKn/UCpfUztG+JbF5kwHwYDVR0jBBgwFoAUR+8IU6LX3qJJt8P694FpyPjbx+kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NDZGLzI1RDU5OERFQUIy
NzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FKSnQ4UDY5NEZweVBqYngt
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUi04SVU2TFgzcUpKdDhQNjk0RnB5UGpieC1rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
NDZGLzI1RDU5OERFQUIyNzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FK
SnQ4UDY5NEZweVBqYngtay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB0bQiPD3ZBHPbUMk5jf8bBNKvHFRn7KTnVZkmkI8Ov+cH9Rf01cqBTYu6t/wtA
WrpmVnWUMS+UBLp5eVryH3p37gbp/f7fMAcsI+23xh20Mm+pKFNrCTq7wNeEl0Cm
qMYuJvZJ1FtX9XAOcp9f/iCnWQTw5f9xG/luiErl9B8IEr8ByevV7qPvt3ABHbW/
XetlD/f/gnlK454zvRD+f2gkujFBle1WpiZq5UghPQit5PgtOSdFo99uI9xP1HnJ
B0+kCs05p0Q0TVMEI/hZi8WnENmQY/MKn7lcdOU2sM0ISEkf2nUlFrmnhHYNhIWZ
o/1iefbOj/qJWh43S5myXxvN
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:41 2026 by rpki-client