Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
File:                     Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json)
Hash identifier:          eAn3kApfRKolLRofoP6IPsgGfQ1hif48kfU6oH2JYkk=
Subject key identifier:   04:C5:F9:2C:21:ED:80:5D:D6:13:18:9E:C2:99:F5:44:84:75:0F:93
Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
Certificate issuer:       /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
Manifest number:          D8
Signing time:             Sun 01 Mar 2026 07:48:05 +0000
Manifest this update:     Sun 01 Mar 2026 07:48:05 +0000
Manifest next update:     Sun 08 Mar 2026 07:48:05 +0000
Files and hashes:         1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: hjdLVrGaBFf7eTcAn5ALicuJDover+nua5N5B1DW4Ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
        Validity
            Not Before: Mar  1 07:48:05 2026 GMT
            Not After : Mar  8 07:48:05 2026 GMT
        Subject: CN=69a3ef35-0620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:bd:a5:61:7c:1a:33:66:c0:b2:5e:29:ac:
                    3f:50:15:52:3c:68:af:a4:cb:60:5c:5d:8e:79:2f:
                    b3:83:d9:74:8c:31:46:44:12:53:f7:10:0f:e3:88:
                    0a:b5:93:08:3e:75:77:ab:9d:89:da:43:ce:21:c1:
                    d3:5f:7f:64:00:2d:de:f0:9e:0a:d6:50:5a:99:70:
                    2f:03:ec:81:4e:75:87:f2:3a:40:33:cd:96:8d:6e:
                    36:01:16:ee:29:01:e1:fb:16:c0:ae:76:1c:3a:4f:
                    46:48:9c:e9:09:0b:21:1d:32:6a:f8:e6:30:45:d4:
                    9f:77:61:d7:87:19:27:d0:2e:17:10:c8:be:20:6d:
                    2b:63:28:bc:7c:4f:a0:e6:f4:ed:8e:a1:28:69:06:
                    ba:a5:da:ab:ae:90:95:bf:56:54:a4:28:05:d2:30:
                    bb:2b:40:a1:83:b3:67:91:a9:fa:b9:87:5c:a9:f3:
                    a2:89:95:b5:6a:43:67:f3:89:ab:a7:d2:a4:41:2d:
                    18:cf:06:81:bf:60:44:96:3d:e9:94:20:fd:d9:63:
                    27:f9:45:41:05:38:45:e5:73:86:d1:96:7f:6a:c3:
                    ca:58:9f:92:4d:e9:ff:8a:bf:9a:25:72:a5:ef:60:
                    a7:28:7d:23:e6:24:63:78:ad:b1:3e:1c:d4:61:e4:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:F9:2C:21:ED:80:5D:D6:13:18:9E:C2:99:F5:44:84:75:0F:93
            X509v3 Authority Key Identifier:
                keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:31:3c:cb:90:c8:d8:af:83:e8:0a:b3:38:f4:5c:c6:36:02:
         15:a2:87:a8:d6:d9:a8:17:01:c0:a7:e9:98:ef:2d:19:bf:a1:
         ef:53:1a:9e:2d:0c:f3:06:05:41:0f:26:42:de:26:36:a4:d5:
         6b:74:0b:31:95:52:03:da:cd:af:15:78:68:db:ea:a1:4e:21:
         fd:6d:9d:3c:92:ae:f7:1a:2e:c5:0e:63:22:b3:33:af:fb:65:
         55:13:57:03:96:98:2f:31:ae:3d:2b:5e:38:d8:96:a2:98:7f:
         8b:94:e7:03:ad:d1:04:25:79:53:6d:85:85:0b:83:ad:2f:da:
         6c:47:fe:42:2d:a1:9f:ff:4d:54:a4:3c:63:83:5d:e2:e2:f0:
         2e:14:87:98:6f:99:dd:6f:97:6e:04:ff:ca:55:da:1e:1e:f4:
         d1:be:90:05:e0:a8:2e:f4:bd:ad:ae:b7:96:8b:3c:f7:da:3d:
         e1:ce:3d:5d:d1:b5:4b:94:00:e3:a4:80:33:ef:fe:f4:97:f3:
         16:59:2b:9c:19:e8:09:68:0d:1f:f8:df:b9:bb:05:50:28:63:
         a2:d7:5a:b3:04:0f:8e:09:a9:eb:07:e0:57:7b:64:4e:2b:cd:
         d4:8d:ab:21:aa:03:81:e9:7f:76:74:a8:2b:3d:53:57:7a:d3:
         a7:9c:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:43 2026 by rpki-client