Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
File:                     srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json)
Hash identifier:          5k+WamEgFhO5zona0Ikyryp908nWv4hDXXXRma8JLS4=
Subject key identifier:   C9:69:C4:F2:D4:E5:5B:A4:EC:E7:FD:05:12:0E:C5:A4:AF:3D:1F:86
Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
Certificate issuer:       /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Certificate serial:       0B0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
Manifest number:          0B04
Signing time:             Mon 02 Mar 2026 01:49:27 +0000
Manifest this update:     Mon 02 Mar 2026 01:49:25 +0000
Manifest next update:     Mon 09 Mar 2026 01:49:25 +0000
Files and hashes:         1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: wia6iel4ubd8vpbmVPM/n7sRSMMNOmpNr9gCwITPm90=)
                          2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: yqwaJ+NPPeOsoyLIscVacXzjHLr5veEPki/BMKI3KWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
                          rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2827 (0xb0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
        Validity
            Not Before: Mar  2 01:49:25 2026 GMT
            Not After : Mar  9 01:49:25 2026 GMT
        Subject: CN=69a4eca7-6e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:57:0a:cb:4c:2f:cf:d3:70:5d:b7:6a:ff:
                    5a:2c:ec:36:4c:45:ec:24:9c:78:2b:33:a2:18:fc:
                    ca:1c:c0:ef:00:12:89:98:f1:3e:79:11:28:4b:8f:
                    cf:8a:6b:a0:08:e6:1b:3c:d8:ab:ec:5d:fa:ad:d1:
                    8c:52:22:05:e0:90:7a:c3:df:74:dc:b1:83:e3:2f:
                    a9:29:5e:79:7e:7c:c9:df:b9:b8:73:b3:72:8d:52:
                    9b:6e:2f:ab:8f:ff:71:02:e2:2f:95:c2:6e:88:ba:
                    4a:4a:3f:0b:3f:92:ba:d4:55:79:9e:93:68:51:dc:
                    bc:ab:ec:64:8b:c5:48:ec:53:a1:2d:26:85:b3:81:
                    ee:64:fb:7b:4a:6f:a8:55:b8:17:06:98:6e:f5:4d:
                    41:73:a4:09:bc:cc:92:24:fd:4c:61:b3:ed:9e:5f:
                    6c:c8:70:6f:d5:7c:ff:d9:e0:bd:b4:e8:ef:a5:56:
                    71:ff:6f:01:3f:51:41:c0:c6:1e:b7:74:7a:9c:9b:
                    e0:ab:4f:a3:d1:0b:3e:ed:3e:ce:e1:4f:9a:b0:d8:
                    28:46:e0:f5:20:c6:d7:5b:b1:8d:80:a6:13:1d:40:
                    19:db:71:e1:43:2e:72:89:6e:75:2c:57:aa:68:91:
                    f4:07:93:9c:e2:cd:00:21:69:fc:7c:43:9b:68:d0:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:C4:F2:D4:E5:5B:A4:EC:E7:FD:05:12:0E:C5:A4:AF:3D:1F:86
            X509v3 Authority Key Identifier:
                keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:11:86:ae:9b:96:c4:be:d5:f2:28:37:5e:3e:ab:ca:36:a8:
         b5:b1:df:cc:ed:2e:6f:31:fa:ad:db:2e:d9:09:ab:83:4d:4c:
         46:eb:32:9f:12:87:f9:90:27:fa:ad:09:8b:d5:72:b4:b4:a5:
         f3:21:f6:6d:3f:ce:6b:ed:1b:2c:95:93:d2:f4:0d:7d:71:46:
         02:92:f0:fe:70:88:62:c4:a1:24:a3:d9:a7:dc:06:47:20:30:
         63:1f:1b:1a:12:7e:75:45:50:56:74:ed:46:1c:0c:82:4f:75:
         9b:22:1b:db:67:1a:59:5e:71:5c:f7:b5:e5:7e:19:60:cd:64:
         b7:99:1a:d6:1d:f0:2b:c6:10:f5:3f:30:47:61:d8:97:d3:99:
         4a:a5:16:0b:71:8c:61:a8:07:33:61:bf:ba:a2:58:a7:da:31:
         40:ed:72:4f:f7:f4:64:9f:ee:fe:12:47:5e:ad:62:37:89:7b:
         b3:48:78:16:f6:a5:a7:00:97:bd:9d:4c:15:69:80:cf:19:f4:
         6b:33:d5:14:3e:22:46:cf:10:93:1f:fd:97:6f:12:15:84:86:
         db:47:cb:e6:28:d0:cd:38:66:84:bf:8b:b7:c0:3a:16:d0:16:
         f5:80:3a:32:fb:9e:5a:19:ea:1c:5e:0b:83:78:b7:de:31:27:
         9e:1e:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:12 2026 by rpki-client