Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File:                     -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier:          RfmJG+8eyyIogsfoBJ8MWtcyyvJGt7d67HOaB+/mJS4=
Subject key identifier:   D5:24:A9:89:46:5B:B1:A7:5D:62:AF:C5:BF:55:74:19:1E:01:7E:77
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer:       /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial:       358E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number:          3558
Signing time:             Mon 02 Mar 2026 01:46:57 +0000
Manifest this update:     Mon 02 Mar 2026 01:46:55 +0000
Manifest next update:     Mon 09 Mar 2026 01:46:55 +0000
Files and hashes:         1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: lhhgIp47ApYYKsAeF2dRu+i0XF4P2niAH0HAJSDxSos=)
                          2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
                          rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13710 (0x358e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
        Validity
            Not Before: Mar  2 01:46:55 2026 GMT
            Not After : Mar  9 01:46:55 2026 GMT
        Subject: CN=69a4ec10-e736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:71:af:df:d0:4a:3a:db:00:52:3c:bf:f2:
                    8e:e8:52:3a:f4:76:ea:77:4e:2d:48:16:a5:07:a0:
                    fc:c3:6d:96:37:08:e9:d9:9c:de:0d:ea:35:db:38:
                    02:1a:17:8e:f5:0c:cd:a3:13:1f:80:19:e3:88:4c:
                    92:6c:27:04:c3:80:f4:f8:33:1c:3d:50:44:e3:7c:
                    60:22:9f:bb:31:6a:b6:8b:3f:f5:c3:f9:48:a7:79:
                    5e:d0:d8:b6:7a:4c:25:40:d5:b2:55:75:d8:86:c4:
                    b2:4f:1d:a8:1d:e7:9c:21:da:81:db:33:53:4d:0e:
                    20:60:83:f9:25:b9:cc:f0:73:20:02:b9:b4:03:09:
                    e6:b2:80:45:ef:11:e6:e9:fb:40:93:8e:4a:9f:33:
                    d3:92:02:5e:e3:b3:cc:dc:ea:79:ea:30:95:bc:6c:
                    87:92:69:20:62:81:77:14:ab:96:93:e1:dc:5e:19:
                    c1:df:f6:29:a0:57:f3:22:08:e6:f8:fa:95:5c:3c:
                    04:48:ec:60:ee:20:62:c8:db:71:30:ba:9a:6f:ea:
                    8b:99:40:5a:b0:82:e2:2c:cf:bd:3c:f2:d0:39:41:
                    e5:a4:ba:00:83:37:fa:66:2a:e0:c2:b8:44:46:1a:
                    68:27:c2:7f:db:1f:b2:6c:99:83:a9:1c:7d:6a:8c:
                    9d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:24:A9:89:46:5B:B1:A7:5D:62:AF:C5:BF:55:74:19:1E:01:7E:77
            X509v3 Authority Key Identifier:
                keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:4d:a6:f7:f7:12:07:b6:40:bb:87:d6:ae:15:06:98:3b:
         54:63:5a:fa:4a:10:89:ca:5c:44:62:35:66:78:e9:3d:f8:43:
         4c:a3:bb:06:f4:ac:60:ed:32:db:af:87:ca:fa:86:bd:7c:cc:
         25:19:d4:8c:fc:91:10:68:57:5e:44:d9:3b:21:9c:e2:1d:c8:
         39:f5:a5:2b:f3:a6:21:18:99:77:bc:ec:66:52:09:d4:6c:f3:
         46:2c:91:e9:e7:1a:5e:16:3b:90:ac:3b:96:b8:02:25:cf:43:
         a7:8d:95:c0:1d:b7:b9:4d:2c:51:72:31:28:f2:18:e9:34:64:
         87:54:c1:db:d4:27:39:b8:c2:17:5a:48:a4:a5:d8:96:06:19:
         a8:3a:2a:f0:65:dd:50:22:92:a2:6e:0f:a9:4f:48:3d:e7:55:
         d8:01:ae:25:49:81:eb:93:80:87:01:2a:70:37:00:35:f5:da:
         1f:45:da:3c:34:b8:75:d5:c6:9a:fb:96:5b:e7:dc:23:9f:a1:
         62:98:eb:3f:9c:93:7f:f8:e0:f5:72:18:c4:62:bc:b9:2b:f3:
         64:be:07:fe:7b:a6:bf:bf:fa:76:3d:7e:68:43:00:8c:64:68:
         a9:14:51:1f:68:54:b6:e0:f2:07:25:15:cd:d6:49:ab:f8:d9:
         66:46:b0:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2
RjU1NDFFNDAwHhcNMjYwMzAyMDE0NjU1WhcNMjYwMzA5MDE0NjU1WjAYMRYwFAYD
VQQDEw02OWE0ZWMxMC1lNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGtxr9/QSjrbAFI8v/KO6FI69Hbqd04tSBalB6D8w22WNwjp2ZzeDeo12zgC
GheO9QzNoxMfgBnjiEySbCcEw4D0+DMcPVBE43xgIp+7MWq2iz/1w/lIp3le0Ni2
ekwlQNWyVXXYhsSyTx2oHeecIdqB2zNTTQ4gYIP5JbnM8HMgArm0AwnmsoBF7xHm
6ftAk45KnzPTkgJe47PM3Op56jCVvGyHkmkgYoF3FKuWk+HcXhnB3/YpoFfzIgjm
+PqVXDwESOxg7iBiyNtxMLqab+qLmUBasILiLM+9PPLQOUHlpLoAgzf6ZirgwrhE
RhpoJ8J/2x+ybJmDqRx9aoydUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUkqYlG
W7GnXWKvxb9VdBkeAX53MB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE
NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0
OTJfdk1YYnR1Znh2VlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeMpNpvf3Ege2QLuH1q4VBpg7VGNa+koQicpcRGI1ZnjpPfhDTKO7BvSsYO0y
26+HyvqGvXzMJRnUjPyREGhXXkTZOyGc4h3IOfWlK/OmIRiZd7zsZlIJ1GzzRiyR
6ecaXhY7kKw7lrgCJc9Dp42VwB23uU0sUXIxKPIY6TRkh1TB29QnObjCF1pIpKXY
lgYZqDoq8GXdUCKSom4PqU9IPedV2AGuJUmB65OAhwEqcDcANfXaH0XaPDS4ddXG
mvuWW+fcI5+hYpjrP5yTf/jg9XIYxGK8uSvzZL4H/numv7/6dj1+aEMAjGRoqRRR
H2hUtuDyByUVzdZJq/jZZkawww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:33 2026 by rpki-client