Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
File:                     dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json)
Hash identifier:          RhbTAXLZbwdWvUOtacAknKmjha6uUX3vUOdqt16U7/Q=
Subject key identifier:   D9:C7:18:4C:B0:C2:C4:12:7B:F6:CD:22:C9:44:9F:CF:2D:08:52:29
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Certificate issuer:       /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial:       0CD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
Manifest number:          0CC8
Signing time:             Sat 28 Feb 2026 18:31:35 +0000
Manifest this update:     Sat 28 Feb 2026 18:31:34 +0000
Manifest next update:     Sat 07 Mar 2026 18:31:34 +0000
Files and hashes:         1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: AzZzRbhtbpnvQAr3SeC8b666rm8r21j1CQ2VgCvo87A=)
                          2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: lExXs/ZWSysLfoXLqxxqgj7BhKcNAbWDLDuu5558YHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
                          rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3285 (0xcd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
        Validity
            Not Before: Feb 28 18:31:34 2026 GMT
            Not After : Mar  7 18:31:34 2026 GMT
        Subject: CN=69a33487-bb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:e7:25:6a:13:72:60:19:ea:01:c9:f8:71:
                    ae:21:cd:29:c0:5a:9b:41:63:e5:66:10:29:57:8b:
                    8a:73:9d:96:b4:9a:e1:8c:e0:08:65:52:c1:0a:d7:
                    b0:41:90:e8:17:6a:80:58:36:4a:d1:28:5f:e1:3a:
                    85:80:3c:8b:f1:88:3b:84:3b:4b:41:7d:95:01:81:
                    ee:43:fa:ee:a8:2a:c0:cb:44:bc:4f:f9:c3:cc:eb:
                    68:f7:0a:9a:dd:77:e4:33:82:02:73:be:cb:92:06:
                    3d:f7:5b:64:c3:77:1e:74:9c:df:3d:f6:09:9c:40:
                    45:1d:8a:e1:70:06:31:82:23:bf:48:56:db:16:63:
                    09:8c:b5:9d:ae:7e:5b:8f:27:64:12:e9:d2:3b:dd:
                    a4:e5:1a:55:6e:41:8f:1c:73:21:a6:1c:67:40:c8:
                    dd:50:81:7b:19:f2:f0:fd:94:f8:ac:bf:23:f4:6b:
                    a1:d4:72:2b:42:08:fc:56:ea:50:41:62:fe:7c:ad:
                    9a:9b:c2:33:7b:47:2b:35:f1:da:10:27:a1:3a:1d:
                    56:28:45:92:1a:9d:06:e7:72:63:ee:61:1e:55:ef:
                    24:2e:15:07:4c:af:f7:a9:c7:3c:65:76:cb:9b:a4:
                    6b:00:47:86:76:f0:8f:67:b7:0b:be:e0:eb:a2:cd:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C7:18:4C:B0:C2:C4:12:7B:F6:CD:22:C9:44:9F:CF:2D:08:52:29
            X509v3 Authority Key Identifier:
                keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:6e:be:5e:3b:83:95:94:91:f5:14:74:61:1b:85:c6:a7:
         3c:b8:0c:8a:e9:f9:e2:24:57:73:1c:42:5c:b9:3b:da:31:d0:
         32:d2:8f:33:74:b9:50:11:a6:f8:78:42:82:e0:d2:6e:e1:78:
         bf:91:5e:8e:67:aa:cd:b9:de:6e:ce:6f:1b:a9:ac:66:2f:fc:
         89:4c:84:a1:be:10:4a:46:df:99:e6:7f:6f:e1:5a:48:67:37:
         97:75:2d:58:83:6c:4b:91:30:eb:8f:cf:12:6d:4e:f8:e9:1e:
         9c:84:00:ee:52:82:c4:54:a6:f8:3e:e4:fb:92:4d:1a:ba:58:
         cd:ac:5e:0b:43:e1:a5:7e:33:2b:4c:4d:ea:aa:9e:5e:cf:56:
         f9:c3:44:28:c5:13:c0:80:48:dc:2f:24:75:cb:61:99:50:10:
         f2:81:92:f9:ec:9b:82:07:5d:d3:30:37:7b:df:58:f3:06:f2:
         b6:b3:aa:15:21:58:39:2a:a2:07:d5:61:ab:77:50:8b:7d:18:
         99:08:02:8a:5e:6e:10:e4:b1:25:02:3d:0f:54:01:71:21:0d:
         95:c2:3b:d4:13:9e:dc:88:df:76:a7:f5:c5:e8:79:74:df:29:
         a0:cf:c1:29:12:38:58:df:93:7d:02:02:ca:9c:c6:27:ce:22:
         d8:6f:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:34 2026 by rpki-client