Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          ImVXtdZJr0Lfi7vWFCfM0kSbzZvxZWRp6IdzY7/+4NI=
Subject key identifier:   78:33:A6:C5:48:A8:C4:A1:C4:B8:E9:C9:8E:14:21:D2:C0:B9:50:C0
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          01F5
Signing time:             Sun 01 Mar 2026 23:26:41 +0000
Manifest this update:     Sun 01 Mar 2026 23:26:39 +0000
Manifest next update:     Sun 08 Mar 2026 23:26:39 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: dk7NZEQect9ZIartc47alzHOZZyZWkNS27BLeHnNg6g=)
                          2: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: FH6JSVfglSJW7zuwD+OJ46zvfhHml/ygJE5GmV2jsMs=)
                          3: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: iY35LoSvM9oPWkN6X48RImg679lod79dGJ3KBptY5sg=)
                          4: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: 7jejQFCLFReXGJQV4oKdD5zrpZgZMebY1hReW7qEYmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Mar  1 23:26:39 2026 GMT
            Not After : Mar  8 23:26:39 2026 GMT
        Subject: CN=69a4cb31-76b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:93:52:5c:32:bb:23:99:09:8a:9c:72:03:
                    e1:33:31:a1:38:65:e5:1a:01:e1:c2:6a:4a:f7:35:
                    87:3b:26:60:c4:df:6a:a9:87:1d:2b:c8:49:6d:ae:
                    68:37:a2:44:60:cd:0c:6e:46:74:9d:c0:f7:cf:23:
                    46:d7:e4:63:95:74:a0:4b:01:69:54:7e:f5:ad:1d:
                    59:af:e3:de:8c:07:22:17:cb:5e:ab:c4:cf:32:27:
                    06:65:f9:25:6c:0d:05:73:6d:67:4a:39:07:b6:00:
                    97:8a:8c:81:9a:b2:b0:46:56:31:08:57:84:01:9d:
                    30:76:fe:07:cd:e9:e4:4f:45:62:63:a2:c4:15:8d:
                    d6:de:fd:eb:9f:e3:6d:5b:48:eb:e7:b0:26:b5:9c:
                    ec:f2:d0:b1:ee:41:90:f3:19:2e:e5:d3:1e:4c:f5:
                    5b:d0:fb:22:be:d5:e1:37:bc:56:29:61:79:b7:f6:
                    f4:d6:fe:ec:d5:b9:59:65:4d:ec:a0:09:04:0a:ba:
                    fd:cb:96:a4:5c:e1:1a:b6:2c:fe:49:bd:4e:d8:1d:
                    15:f6:19:07:87:ff:7e:8f:f3:03:23:61:4d:87:60:
                    4e:dc:51:10:bc:9c:f1:f1:17:55:ab:ab:cb:65:31:
                    81:47:08:3c:64:20:e2:48:1a:fd:0d:57:3d:8b:09:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:A6:C5:48:A8:C4:A1:C4:B8:E9:C9:8E:14:21:D2:C0:B9:50:C0
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5d:bb:f4:f4:63:28:00:43:65:0a:cc:08:28:27:ae:90:44:
         5a:12:21:d1:76:53:54:c8:eb:9d:29:20:ad:17:3b:b6:a2:1f:
         51:a6:85:05:5d:47:d3:81:77:0a:d5:a3:30:07:28:54:93:77:
         99:43:51:0d:c1:26:0d:7c:92:a6:a3:0e:5d:65:01:91:26:02:
         a8:bc:dd:5b:28:cb:86:bf:eb:0a:e3:ad:ae:d6:1e:92:2a:6f:
         40:e5:b1:c2:fe:51:23:9b:75:86:69:30:78:da:bb:8a:85:b5:
         fc:6b:7e:29:cb:4c:f5:90:98:d6:75:72:aa:06:a0:80:68:0b:
         3c:37:ec:a0:f1:dc:a3:2d:c3:36:a9:cc:25:ff:37:02:50:8e:
         20:2a:23:ce:fc:a5:a8:79:d2:72:25:fa:59:d8:4c:a7:a2:a4:
         4f:0e:77:05:5c:24:9f:49:00:b9:fd:35:b0:be:cf:8d:2b:c1:
         e3:86:aa:6c:19:28:45:13:c1:34:b9:85:dd:7e:7d:ed:bf:b1:
         18:d4:bc:d7:02:8d:eb:ec:68:03:09:95:ac:72:6a:1a:22:bb:
         ad:16:27:2d:3d:e8:e5:85:c2:36:2b:33:ca:22:3a:22:3f:29:
         0d:73:9c:64:58:4b:32:f9:e6:26:c7:ef:dd:23:bb:9b:3d:ff:
         c3:61:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:55:24 2026 by rpki-client