Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
File:                     haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json)
Hash identifier:          s+JaaTaVkPxEwRlKA+1TVGYnfstwDNQbHbOSLfEPqMY=
Subject key identifier:   2C:A3:46:76:B2:F2:EF:22:0C:3F:FA:DB:AA:B3:7B:C7:7C:B3:6D:64
Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
Certificate issuer:       /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
Manifest number:          3B
Signing time:             Sun 01 Mar 2026 10:01:59 +0000
Manifest this update:     Sun 01 Mar 2026 10:01:58 +0000
Manifest next update:     Sun 08 Mar 2026 10:01:58 +0000
Files and hashes:         1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: D2PvLbyskycAXMLcmnypsqMxEhW3/IFRdREZ53wDQgc=)
                          2: AED2D108D1FE11F0A9446F52C4F9AE02.roa (hash: 68R9EXgF7x9fgmPkhFANklBkPdwKOHGsH7OYDVsXLgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
                          rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
        Validity
            Not Before: Mar  1 10:01:58 2026 GMT
            Not After : Mar  8 10:01:58 2026 GMT
        Subject: CN=69a40e97-dcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:c9:30:f5:2b:fc:de:b0:0b:9a:e8:a2:93:
                    9c:d5:2c:0f:3b:de:13:af:78:d9:56:ac:80:24:94:
                    0e:d6:0d:76:7f:8e:ca:5b:0b:1d:82:90:ec:15:a4:
                    95:28:7e:15:1e:76:a5:24:ae:e9:22:5a:b7:1d:e6:
                    69:a2:0d:b7:d2:06:df:be:94:db:84:c3:fc:e2:97:
                    2d:f2:86:f3:26:7f:fb:b4:a4:1f:8b:9e:2e:f0:62:
                    91:6d:7c:50:62:22:8e:75:42:26:16:a9:9a:32:17:
                    5b:64:e0:0d:68:43:ab:dc:9d:3a:9d:a7:67:27:98:
                    7d:92:76:f8:51:3a:f5:81:14:6f:08:a7:0d:c1:a1:
                    1b:83:0a:16:39:6c:e3:12:a6:e8:26:5a:37:05:f4:
                    02:8c:30:5a:0c:78:c2:6d:a3:07:b1:c5:58:86:17:
                    0d:c6:5e:a9:b2:32:f3:e7:39:79:df:b6:01:c2:20:
                    31:2e:40:4f:4b:33:88:62:ee:b3:8f:73:59:04:ff:
                    9b:17:73:56:bd:53:3a:4e:96:33:81:9e:d8:c8:53:
                    d1:01:9d:c9:b9:34:68:30:2d:77:07:e8:e5:a6:b4:
                    75:e4:ea:0d:df:c4:7f:a1:7c:17:c5:4c:d6:b3:dc:
                    94:c5:a9:14:71:48:66:1b:aa:0f:c7:35:a9:8d:de:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A3:46:76:B2:F2:EF:22:0C:3F:FA:DB:AA:B3:7B:C7:7C:B3:6D:64
            X509v3 Authority Key Identifier:
                keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:73:1f:05:e9:d7:0f:b1:4c:ae:9d:f3:c9:a0:9a:26:25:16:
         8a:3c:fc:a3:47:da:84:ce:e4:df:72:ab:13:e2:e3:1c:33:63:
         42:f3:02:74:1c:4b:45:0c:d5:82:16:c9:94:b6:37:80:2e:75:
         5a:46:19:66:17:1e:cf:d2:ea:e3:5b:cc:08:a7:18:4c:df:52:
         fa:d9:18:2b:71:fb:e2:1f:6a:eb:bb:cc:55:39:e0:12:e8:2d:
         b5:56:f7:25:64:2e:66:73:07:c8:d6:b4:b4:5e:d8:f2:ab:72:
         49:0f:34:dc:34:99:e0:03:6b:34:14:7a:a5:bd:a7:6b:63:d4:
         85:96:2c:a8:64:2b:ef:10:6b:c8:d4:be:d1:08:03:e1:4e:44:
         6d:b2:99:7a:3c:20:16:9a:bd:3d:1a:89:28:08:f3:50:5b:d8:
         e0:bc:52:0f:48:92:bf:56:5d:ed:41:90:11:c2:dd:09:7a:b5:
         f1:28:54:84:19:24:1a:ba:aa:53:10:9f:4f:a9:77:89:fb:95:
         1f:52:72:e5:73:63:22:e0:d6:f6:a7:62:01:a7:d3:70:7f:34:
         0d:00:c6:f5:d3:ec:ad:56:2f:fd:c7:14:51:75:42:aa:09:50:
         bb:71:7e:e5:2e:61:e0:c0:9e:9b:4e:7b:ca:5a:35:c5:b6:4f:
         b7:dc:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:53 2026 by rpki-client