Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File:                     aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier:          lX0QtZkxqY1ADBgEVYnHYFIfFPOxF2e0QR/3/QCMHcM=
Subject key identifier:   89:A0:95:A7:34:B5:87:63:B5:A7:F4:CA:9B:69:F0:28:0F:4C:6B:00
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer:       /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number:          01D6
Signing time:             Sun 01 Mar 2026 04:18:49 +0000
Manifest this update:     Sun 01 Mar 2026 04:18:49 +0000
Manifest next update:     Sun 08 Mar 2026 04:18:49 +0000
Files and hashes:         1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: 2ZdsTt/CbPE2ZpxLfs4nazfx2R+Jrnl6hi5KKazM5BI=)
                          2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: DLzpWEcNmQ3lrkTMIfDWdISHEaJklyBDn769urmD8Y4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
                          rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
        Validity
            Not Before: Mar  1 04:18:49 2026 GMT
            Not After : Mar  8 04:18:49 2026 GMT
        Subject: CN=69a3be29-3bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a4:0e:74:44:83:9d:41:ac:99:d9:3a:55:35:
                    09:c7:24:4b:71:cf:ec:c8:6d:43:a6:24:1e:69:aa:
                    c9:52:4f:3b:e3:f9:a2:58:4d:e7:8d:57:b3:37:b4:
                    fb:ca:e6:b9:eb:a8:bb:61:b8:e4:ca:e1:c4:eb:7c:
                    cd:b7:cc:88:93:d8:4c:5c:4b:73:3b:45:dc:e0:b2:
                    60:4a:e2:48:9f:a5:40:b2:96:76:e9:6a:6b:72:d9:
                    d7:6f:1e:c5:ea:f4:49:34:3c:b9:6c:fb:e1:61:e3:
                    79:96:fc:46:f1:6a:ce:72:f4:ac:8b:37:61:be:10:
                    ad:24:3d:3a:ec:cf:e9:c1:17:c3:07:c2:3d:55:16:
                    7e:78:96:24:e8:64:34:7a:16:bd:69:1e:ab:6e:df:
                    ec:3f:57:d1:0e:00:19:db:aa:3f:5b:08:eb:99:88:
                    68:76:dd:10:9c:b4:d1:e6:aa:db:99:eb:c7:f0:9c:
                    1a:78:65:19:12:ca:37:e5:77:2b:bf:fb:fc:f1:b2:
                    3c:b4:7f:31:90:74:6e:17:d5:69:0f:90:f9:39:78:
                    d1:99:13:b1:77:86:e2:99:62:15:86:5b:c2:0e:4b:
                    ce:df:5b:57:7a:a7:43:00:eb:4c:e5:74:37:f1:5f:
                    4c:19:42:27:e9:d9:a6:57:08:ee:8d:5a:50:f4:18:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A0:95:A7:34:B5:87:63:B5:A7:F4:CA:9B:69:F0:28:0F:4C:6B:00
            X509v3 Authority Key Identifier:
                keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:92:3e:cf:f0:5c:fd:a1:7c:23:eb:37:f7:bb:7a:0f:10:12:
         b8:17:58:d1:e5:44:85:91:e0:b3:89:de:4c:da:b2:c1:86:c1:
         a7:90:62:4c:9d:c5:ef:33:ac:4f:b8:f9:52:cd:a4:7c:d2:47:
         37:db:99:00:95:98:58:0b:36:ee:7e:93:fa:9b:27:af:41:b5:
         55:32:c0:d8:e6:d7:08:b8:68:38:d5:15:c1:ee:83:39:5a:bb:
         27:c9:4c:73:92:1e:1d:c0:59:1a:09:9e:3b:cc:ff:75:27:33:
         a6:c7:31:4d:1f:ed:4c:88:05:3d:58:fb:bf:d5:2d:be:01:4b:
         32:8b:6a:61:9c:d8:6e:e3:f6:c7:43:c0:81:3f:a1:6c:8a:b3:
         43:f7:dd:e3:0c:75:ad:76:98:81:6a:d6:82:58:c8:cd:ff:6c:
         26:f1:91:6b:6b:68:1a:44:62:31:85:de:a7:76:0e:5b:49:d7:
         20:ed:3e:04:46:23:f8:d6:df:3f:ef:6b:08:d5:a8:38:e9:9e:
         a0:a0:0e:77:b6:e0:72:b4:15:a0:f0:84:1a:3b:23:76:69:bf:
         ac:bd:2c:b8:2a:5a:2d:9d:4c:a9:dc:0d:82:22:3c:b8:8c:eb:
         df:d1:dc:20:04:02:1e:16:72:0a:c2:8f:2d:e3:dd:ac:aa:a9:
         b7:dc:e7:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG
NTAwNTFFOUEwHhcNMjYwMzAxMDQxODQ5WhcNMjYwMzA4MDQxODQ5WjAYMRYwFAYD
VQQDDA02OWEzYmUyOS0zYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA66QOdESDnUGsmdk6VTUJxyRLcc/syG1DpiQeaarJUk874/miWE3njVezN7T7
yua566i7YbjkyuHE63zNt8yIk9hMXEtzO0Xc4LJgSuJIn6VAspZ26WprctnXbx7F
6vRJNDy5bPvhYeN5lvxG8WrOcvSsizdhvhCtJD067M/pwRfDB8I9VRZ+eJYk6GQ0
eha9aR6rbt/sP1fRDgAZ26o/WwjrmYhodt0QnLTR5qrbmevH8JwaeGUZEso35Xcr
v/v88bI8tH8xkHRuF9VpD5D5OXjRmROxd4bimWIVhlvCDkvO31tXeqdDAOtM5XQ3
8V9MGUIn6dmmVwjujVpQ9Bi7xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImglac0
tYdjtaf0yptp8CgPTGsAMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3
M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy
OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp5I+z/Bc/aF8I+s397t6DxASuBdY0eVEhZHgs4neTNqywYbBp5BiTJ3F7zOs
T7j5Us2kfNJHN9uZAJWYWAs27n6T+psnr0G1VTLA2ObXCLhoONUVwe6DOVq7J8lM
c5IeHcBZGgmeO8z/dSczpscxTR/tTIgFPVj7v9UtvgFLMotqYZzYbuP2x0PAgT+h
bIqzQ/fd4wx1rXaYgWrWgljIzf9sJvGRa2toGkRiMYXep3YOW0nXIO0+BEYj+Nbf
P+9rCNWoOOmeoKAOd7bgcrQVoPCEGjsjdmm/rL0suCpaLZ1MqdwNgiI8uIzr39Hc
IAQCHhZyCsKPLePdrKqpt9znLQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:12 2026 by rpki-client