Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
File:                     8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json)
Hash identifier:          0ulWt2GWmqOysuKjJepnGwuCVWMnyGzpy3XmNYgkO5A=
Subject key identifier:   96:DE:F8:4E:20:2E:14:B0:9C:51:9A:47:D2:5F:EC:0B:DE:6D:29:5A
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Certificate issuer:       /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial:       03CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
Manifest number:          03C5
Signing time:             Sun 01 Mar 2026 01:27:09 +0000
Manifest this update:     Sun 01 Mar 2026 01:27:08 +0000
Manifest next update:     Sun 08 Mar 2026 01:27:08 +0000
Files and hashes:         1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: 0WDodfecH407jDgrgjzubPfMDYCSxJMLqM7/YKP/xAA=)
                          2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: 3Kdq8iB7GHkmorOzNCkj5Eih8OtxQjBmOJhG+WoD4A8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
                          rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
        Validity
            Not Before: Mar  1 01:27:08 2026 GMT
            Not After : Mar  8 01:27:08 2026 GMT
        Subject: CN=69a395ed-fbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:ca:f4:b4:1e:be:7b:70:9f:66:23:53:95:
                    ad:1c:32:18:0b:13:1e:7b:67:82:99:90:6a:1e:f4:
                    41:b9:51:0c:c4:6d:ca:da:f0:f6:3c:6b:af:03:53:
                    9d:c8:01:32:aa:1d:27:5e:de:8e:1a:97:af:84:b9:
                    64:aa:5f:5c:e1:90:82:48:9c:bc:a7:34:4c:59:f6:
                    5d:f6:69:a6:f4:7a:15:6f:e6:fd:6a:49:5a:8c:e1:
                    7d:21:91:dc:33:51:3c:86:e3:5c:88:7b:20:92:2f:
                    1e:89:86:8f:78:b0:e7:96:a6:65:16:f4:10:bf:06:
                    d2:35:ea:70:ad:f6:76:6b:a2:d1:00:2b:84:a3:02:
                    fc:48:f0:b6:08:91:4e:ef:6f:a4:94:51:11:4c:6c:
                    74:64:f0:e1:fa:9b:5c:7c:37:28:87:fb:38:4f:c6:
                    ec:84:58:21:20:51:8c:9b:a4:3c:ab:71:37:eb:97:
                    54:e4:22:fe:21:af:aa:f8:2d:11:ba:6d:13:3d:28:
                    88:f1:31:51:d3:b9:64:9b:cf:28:45:0b:2a:e0:bc:
                    f8:01:8c:66:ba:a0:03:a2:b3:91:94:b9:01:de:65:
                    c2:5e:b5:71:6a:40:fe:a1:03:18:c1:29:c2:8e:90:
                    34:22:b9:5c:ba:ea:44:d0:06:38:26:f6:ce:c0:4a:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DE:F8:4E:20:2E:14:B0:9C:51:9A:47:D2:5F:EC:0B:DE:6D:29:5A
            X509v3 Authority Key Identifier:
                keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0a:c0:1b:5d:bd:3d:7c:9f:46:1a:d7:17:7c:f5:31:a4:87:
         9c:39:3d:51:1e:55:b5:70:b3:ae:e4:cd:05:a6:aa:74:d1:e4:
         c5:13:6b:31:27:43:28:44:c5:da:b0:da:c5:e3:eb:ac:b9:f7:
         d5:cd:b7:71:36:43:45:d0:42:fb:22:d7:a3:6d:f2:69:ae:31:
         45:b2:27:38:89:a5:54:aa:58:21:d2:7c:77:b7:ff:13:58:fb:
         30:51:f1:71:1d:6f:f7:2f:ba:53:10:08:2a:c4:f3:a1:97:05:
         70:2f:e2:2c:aa:df:96:68:42:11:e3:9f:e0:f0:6f:63:21:00:
         83:9c:2d:67:29:9c:b3:ec:73:59:8f:cb:42:a6:c6:df:f5:ba:
         40:25:7c:8a:ea:9f:43:c4:b5:06:40:a9:53:4a:5b:d4:1f:27:
         38:dd:1b:ad:d9:13:96:f7:e4:b1:e7:f5:ce:3f:50:15:65:47:
         04:58:f2:30:04:0c:84:63:7f:a9:af:5f:c8:e6:59:d1:4e:39:
         2d:9a:e5:26:60:20:97:77:79:d3:79:8e:04:04:33:16:d8:03:
         f6:97:d2:e4:36:6a:e4:fe:0c:22:46:17:3c:82:92:b1:16:d1:
         9a:29:27:84:44:e4:4e:3d:64:de:4a:45:f1:1e:42:66:a6:f7:
         5c:20:80:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:27 2026 by rpki-client