Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File:                     v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier:          8dc2FTwQbP+W+NNGHDKcy3ez08ZR9qsBoBMxQloGBMg=
Subject key identifier:   52:B2:C0:D7:17:A6:E9:31:C1:61:9B:C8:72:E7:E4:63:F8:0A:85:82
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       0785
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number:          0719
Signing time:             Mon 02 Mar 2026 00:43:12 +0000
Manifest this update:     Mon 02 Mar 2026 00:43:10 +0000
Manifest next update:     Mon 09 Mar 2026 00:43:10 +0000
Files and hashes:         1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: B90dUi5JIcXODbt2Ua0OQpoJXb1Kru3DbT2xhimoHDk=)
                          2: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: NOaVU4q5vDhTCfS8D0magdRbNPsrNEg2xYPHqGcyq74=)
                          3: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: UCc+DbJCpOApyDxFAfgaNwfGqcYO0Lw+1K3uPVDAppM=)
                          4: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: Om4qQKnR/ADlcoIytwUPeq9RDFGoVRvj56Lkmeu3bys=)
                          5: 671FC40EE29211EE94348874C4F9AE02.roa (hash: VorX/TcJnMctyKf1znFoq4UgSn2F6EKq1vU97sOrAnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Mar  2 00:43:10 2026 GMT
            Not After : Mar  9 00:43:10 2026 GMT
        Subject: CN=69a4dd20-46a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:41:03:1c:d9:45:0a:96:ae:c6:87:c9:5c:27:
                    48:2e:75:af:a8:cf:64:4d:33:23:4e:b1:26:42:0e:
                    f7:55:3d:91:22:f2:bf:ae:21:12:98:0b:f3:35:90:
                    a9:88:64:e9:72:14:d6:47:b0:61:66:b3:32:c3:76:
                    bf:07:1c:66:d8:f4:6a:b6:fa:16:be:b7:bc:41:a4:
                    f0:1c:cd:e4:5f:44:65:0e:72:15:c4:7e:11:f1:c1:
                    8a:c8:25:88:85:d3:84:24:a7:6e:53:20:c4:02:cf:
                    8b:71:aa:36:dc:03:51:f3:bd:36:77:e9:51:6a:c9:
                    2c:06:ce:f0:eb:50:35:38:b0:ab:f7:af:46:82:44:
                    f2:1d:69:8e:c6:a1:9c:e4:60:40:1a:da:c6:98:92:
                    9c:b9:06:03:82:d7:12:8f:d3:f3:29:4c:97:44:32:
                    c9:82:e5:fc:d3:50:c2:cb:c9:c1:f7:e4:dd:3d:e0:
                    8f:82:dc:8f:67:35:46:ae:c2:60:64:d0:5d:c0:d8:
                    58:51:cb:35:e6:14:61:eb:e0:3c:b3:a2:62:44:ac:
                    9e:5a:a9:27:39:e3:c0:65:fc:21:43:78:3d:89:63:
                    39:e9:33:7e:35:31:7b:f1:b1:51:dd:f1:f2:b8:ae:
                    18:e3:db:80:a8:39:dc:d7:3f:df:00:7d:6e:04:f3:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:C0:D7:17:A6:E9:31:C1:61:9B:C8:72:E7:E4:63:F8:0A:85:82
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5d:33:02:6b:2e:e3:9f:d3:57:c5:c4:77:e8:16:73:04:12:
         50:96:8e:20:bb:dd:ce:92:fa:93:e9:bf:8e:3f:cc:2b:6d:35:
         13:fc:21:42:ef:06:3d:03:60:bf:56:7a:14:79:28:73:5c:a4:
         73:5a:54:bd:19:3a:54:0f:b4:73:4a:9a:22:ac:82:c3:4a:c9:
         9b:e1:77:33:17:37:d0:a7:de:0a:77:da:4a:3d:ca:d7:33:dc:
         28:a8:08:25:6f:68:ca:3b:82:c3:c1:a7:00:00:20:47:98:cc:
         86:ca:92:55:bc:7c:02:2c:67:1c:20:24:0b:28:ef:12:61:e1:
         ec:ed:5b:18:fb:ea:4e:91:97:b0:e4:21:3b:e8:fc:1d:c1:18:
         ab:17:cd:d0:0d:7c:ea:0e:33:96:0d:0b:3a:ef:8c:9c:01:7f:
         b9:38:8c:d0:2d:3b:ee:82:46:13:58:5e:52:06:c8:57:c1:3f:
         7b:1b:d7:d1:fa:2b:d6:d8:fa:25:dd:3a:e6:ea:bf:bc:aa:4a:
         41:88:d3:65:9f:a7:84:03:56:a5:36:aa:aa:35:a7:6b:7f:9d:
         18:ba:71:bf:f6:22:5d:61:a7:f4:a6:bf:01:41:b8:25:7d:1d:
         3b:f8:df:a2:18:75:69:88:61:c7:a9:90:52:9a:5e:b1:5f:50:
         93:92:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:43 2026 by rpki-client