Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
File:                     DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json)
Hash identifier:          eamyGI2hvCPbKAZvOP05GhyGiDKmOlMJpNQJVdJdKHY=
Subject key identifier:   24:50:45:0E:72:CC:64:69:F6:F2:08:83:0A:8C:BC:17:82:6E:95:13
Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
Certificate issuer:       /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Certificate serial:       14CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
Manifest number:          14AC
Signing time:             Sat 28 Feb 2026 16:56:36 +0000
Manifest this update:     Sat 28 Feb 2026 16:56:36 +0000
Manifest next update:     Sat 07 Mar 2026 16:56:36 +0000
Files and hashes:         1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: 1Mb2Eu2pvKSAm/jnxo6sl0U9/4u71YL+gtA19uvdJo0=)
                          2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
                          rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5323 (0x14cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
        Validity
            Not Before: Feb 28 16:56:36 2026 GMT
            Not After : Mar  7 16:56:36 2026 GMT
        Subject: CN=69a31e44-5d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:e4:2f:dd:db:31:26:12:e7:d9:f0:0e:74:
                    7c:58:44:98:f3:78:8b:34:06:eb:11:81:cd:2b:1e:
                    ac:c8:2d:e0:c0:e1:da:57:b6:e7:12:99:df:fe:5f:
                    c4:f4:12:07:cd:ff:3e:6e:9d:79:a0:34:ef:14:df:
                    63:e1:1a:df:da:22:e3:b7:47:14:a4:95:a1:9b:23:
                    21:7e:44:49:fc:c9:7d:53:5d:c3:d7:61:be:67:4d:
                    6e:67:e7:71:21:2e:51:90:e6:ed:42:d6:0c:ab:25:
                    9f:1f:78:7b:67:bb:8d:6d:4f:7b:b5:85:37:17:14:
                    5b:b6:eb:21:dd:c2:b8:21:3a:dd:df:c2:e2:32:c9:
                    68:84:3f:9f:97:d0:4b:c0:f6:49:0d:10:b6:5e:bf:
                    9f:48:86:34:0c:83:c8:22:ef:3b:b4:47:94:e7:35:
                    d9:2d:43:4e:8b:e0:46:e3:e6:94:a0:bb:58:b0:20:
                    83:4c:f9:f7:b2:b8:9a:e6:ef:a4:da:44:91:8b:2b:
                    79:dd:29:2d:a0:c1:00:a9:cd:93:f8:80:1c:90:d2:
                    97:a1:74:32:b6:26:29:73:77:25:c4:5d:5e:5f:d8:
                    53:af:35:06:9d:0b:67:45:5c:5a:c1:ec:58:24:1b:
                    d9:08:6b:cf:2e:ba:0e:b4:b4:43:17:51:80:d6:13:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:50:45:0E:72:CC:64:69:F6:F2:08:83:0A:8C:BC:17:82:6E:95:13
            X509v3 Authority Key Identifier:
                keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c1:30:b3:bd:6e:18:bb:fd:a5:1b:a8:31:2f:92:99:4e:fb:
         40:a2:69:6b:dd:6c:c5:f6:e8:da:24:18:b8:88:31:d1:62:19:
         d0:0a:c3:bf:f8:43:da:d7:1a:39:ac:2e:ac:53:03:4e:ed:ba:
         84:f3:3c:b7:47:e1:7c:7f:0b:da:b6:39:6a:c4:d7:50:71:ca:
         f5:17:de:5f:e6:ce:d8:cc:98:e2:df:85:b4:9e:2e:fe:96:e5:
         b5:94:bc:8a:5a:a9:d0:2b:73:5b:14:3f:b4:7c:e1:66:86:ce:
         57:41:3b:96:ad:a2:ab:5f:4f:b7:6d:c6:b0:f5:08:af:95:0a:
         97:08:e5:f7:98:aa:33:56:ed:3e:ce:62:df:44:f8:3c:78:a1:
         06:df:a8:75:0e:07:3d:72:db:13:53:5a:fc:79:c6:01:56:3b:
         ab:b7:88:24:2f:d4:d5:b3:27:ec:91:d8:4d:06:0d:eb:8d:73:
         f2:6b:b3:f5:03:47:79:33:c2:e3:23:91:02:6d:f8:7d:9f:f2:
         52:05:fc:b0:b6:9e:52:d4:af:63:1c:a7:6f:00:98:3f:42:07:
         17:9e:2e:e5:e3:d8:aa:2d:79:7b:53:18:49:c6:50:c9:51:95:
         c6:6f:22:7c:3e:ea:1e:73:8a:0d:95:0e:86:2f:4c:b8:30:7c:
         5b:25:78:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw
RkM1RDIzRkYwHhcNMjYwMjI4MTY1NjM2WhcNMjYwMzA3MTY1NjM2WjAYMRYwFAYD
VQQDDA02OWEzMWU0NC01ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyL7kL93bMSYS59nwDnR8WESY83iLNAbrEYHNKx6syC3gwOHaV7bnEpnf/l/E
9BIHzf8+bp15oDTvFN9j4Rrf2iLjt0cUpJWhmyMhfkRJ/Ml9U13D12G+Z01uZ+dx
IS5RkObtQtYMqyWfH3h7Z7uNbU97tYU3FxRbtush3cK4ITrd38LiMslohD+fl9BL
wPZJDRC2Xr+fSIY0DIPIIu87tEeU5zXZLUNOi+BG4+aUoLtYsCCDTPn3sria5u+k
2kSRiyt53SktoMEAqc2T+IAckNKXoXQytiYpc3clxF1eX9hTrzUGnQtnRVxawexY
JBvZCGvPLroOtLRDF1GA1hMsFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRQRQ5y
zGRp9vIIgwqMvBeCbpUTMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw
NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO
ZGd4MmRXSFZndndQeGRJXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu8Ews71uGLv9pRuoMS+SmU77QKJpa91sxfbo2iQYuIgx0WIZ0ArDv/hD2tca
OawurFMDTu26hPM8t0fhfH8L2rY5asTXUHHK9RfeX+bO2MyY4t+FtJ4u/pbltZS8
ilqp0CtzWxQ/tHzhZobOV0E7lq2iq19Pt23GsPUIr5UKlwjl95iqM1btPs5i30T4
PHihBt+odQ4HPXLbE1Na/HnGAVY7q7eIJC/U1bMn7JHYTQYN641z8muz9QNHeTPC
4yORAm34fZ/yUgX8sLaeUtSvYxynbwCYP0IHF54u5ePYqi15e1MYScZQyVGVxm8i
fD7qHnOKDZUOhi9MuDB8WyV46g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:46 2026 by rpki-client