Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
File:                     IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json)
Hash identifier:          U6Vj43QrJVdKrKAb5zxaAr+WNxraikqhv1Xi+vLJchs=
Subject key identifier:   C2:60:90:F3:C2:3B:89:8A:6F:A0:45:55:12:74:D6:01:42:C7:61:E1
Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
Certificate issuer:       /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Certificate serial:       071F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
Manifest number:          0714
Signing time:             Sat 28 Feb 2026 22:23:25 +0000
Manifest this update:     Sat 28 Feb 2026 22:23:24 +0000
Manifest next update:     Sat 07 Mar 2026 22:23:24 +0000
Files and hashes:         1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: 6KSgqWMEQlgN8WA64CJhTvx/IeYO19NDPDh3kUKAL30=)
                          2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: 4G6we2Th1FMc0knctpDnaHzpZ2DpvqNSVPvecBD6QV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
                          rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
        Validity
            Not Before: Feb 28 22:23:24 2026 GMT
            Not After : Mar  7 22:23:24 2026 GMT
        Subject: CN=69a36add-bb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:a0:18:43:b0:9f:ff:5d:2a:89:b8:08:3a:
                    58:91:65:86:d3:fe:39:99:84:8d:c9:eb:32:50:fc:
                    bf:01:db:b6:5f:1c:29:c3:53:b1:bc:2f:94:e7:b5:
                    dd:f6:8e:3d:c6:8e:e4:3c:43:95:62:60:47:0f:40:
                    a1:b8:7c:35:d3:64:b0:39:01:13:92:74:98:fc:24:
                    be:47:cf:e7:45:21:b2:06:9a:71:9b:6a:16:84:1a:
                    2d:97:05:27:3f:6e:0d:01:f8:c3:06:e9:70:7c:bb:
                    12:1f:86:54:c0:8b:64:df:c6:56:6e:6e:d9:44:14:
                    d9:46:e2:cd:f9:bf:0f:75:60:c0:9f:3a:a4:e3:5e:
                    be:de:62:aa:c0:a5:55:f1:d9:56:79:17:0e:30:15:
                    0f:db:cd:26:ca:7d:25:0a:a5:99:b2:5c:49:cb:24:
                    15:55:be:bd:b9:c5:4f:cd:ae:6f:92:53:ac:00:56:
                    21:2f:e0:b3:29:56:33:8e:00:f4:70:c6:bd:36:2a:
                    7c:fb:fc:11:89:2c:75:e1:6c:c9:8b:36:5b:18:c9:
                    c0:dd:6a:c3:10:ea:a0:99:ec:df:7c:c2:79:e3:61:
                    79:2b:78:9b:b9:6d:50:64:8a:80:cc:ee:d1:c2:c3:
                    7b:01:1d:3f:35:c6:0d:35:b1:6c:e3:1d:47:25:bc:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:60:90:F3:C2:3B:89:8A:6F:A0:45:55:12:74:D6:01:42:C7:61:E1
            X509v3 Authority Key Identifier:
                keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:90:2b:7f:d4:44:55:f3:1d:17:b0:69:94:bb:f1:19:e7:
         90:cc:bf:42:f5:d1:ea:fd:3f:5e:5d:f8:9e:24:16:5d:3d:31:
         02:cb:86:31:fa:e6:9b:e6:99:e2:a3:e8:6f:2d:bc:e3:77:67:
         1f:60:41:69:63:4d:0f:0d:21:72:13:b7:3d:3a:81:40:4b:8d:
         eb:e7:4a:bb:b3:ea:9f:41:d4:4f:8f:98:c2:35:8f:35:5a:66:
         7e:97:08:87:47:76:68:22:64:9f:71:11:8c:c5:6b:4f:fa:03:
         46:89:5e:94:5e:6f:32:cb:7a:08:ff:72:88:40:02:ca:fb:da:
         f3:23:cb:9c:d6:af:3e:0f:62:8c:78:31:d9:ea:a2:6d:10:82:
         db:31:df:f7:9f:26:42:16:f6:fa:ea:19:06:1b:7b:8a:10:af:
         b7:11:b1:ad:46:4d:6b:ad:af:70:e7:72:0f:7b:05:50:f2:ad:
         b3:05:e8:99:98:f8:5f:e0:d7:86:e6:7f:81:f2:1f:f4:f6:14:
         35:ec:fb:93:5f:98:22:27:f3:a5:0b:07:07:83:d3:12:01:27:
         07:78:c9:19:11:28:ff:02:21:d4:1c:52:c2:51:88:9f:b8:aa:
         ed:5e:bf:9b:d6:9f:e0:af:d4:84:f5:76:bb:5e:8f:73:73:61:
         bd:f3:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:59 2026 by rpki-client