Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File:                     -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier:          ZYVBBXU0EO3DOzd3IU9D1oi/JIoc9JU5hUtwKJffNa8=
Subject key identifier:   86:BB:DD:AE:DF:5C:57:B3:A7:E6:E8:C6:52:CD:00:57:B8:21:D5:36
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer:       /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number:          D1
Signing time:             Sun 01 Mar 2026 07:54:19 +0000
Manifest this update:     Sun 01 Mar 2026 07:54:18 +0000
Manifest next update:     Sun 08 Mar 2026 07:54:18 +0000
Files and hashes:         1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: TPZ02puicx8C5xRVbnU8SB/ezZ+/3l18VmFIOy2v+/E=)
                          2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
                          rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
        Validity
            Not Before: Mar  1 07:54:18 2026 GMT
            Not After : Mar  8 07:54:18 2026 GMT
        Subject: CN=69a3f0ab-6651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:bf:3e:94:e8:b7:62:08:3d:1a:c0:50:21:
                    5d:43:95:11:24:78:24:e8:4e:f9:d3:d0:e3:9d:6c:
                    54:ad:f1:06:b7:61:a3:49:30:3e:dc:24:a4:eb:46:
                    fb:95:66:23:4d:2b:87:74:bc:be:14:23:3c:14:60:
                    d4:fe:52:8d:7f:5e:7d:74:b4:f2:35:6f:f1:7d:42:
                    e9:1e:c6:bf:82:36:de:56:6a:ba:80:bf:89:94:0e:
                    ba:db:b5:e5:11:09:d2:9a:4e:3f:95:57:80:57:24:
                    24:b9:11:38:d7:9a:71:6c:f1:30:48:e4:bd:6e:ce:
                    88:de:35:42:db:39:69:3f:f1:50:7e:a4:7e:74:6b:
                    f7:73:9b:58:b7:1e:dd:89:d0:38:2d:95:66:2d:45:
                    0b:09:bb:36:5c:5f:c1:a3:22:bb:e4:65:cb:ea:3e:
                    ad:01:ca:ff:88:50:46:10:40:a2:2f:f4:3f:9b:93:
                    86:6e:22:35:63:a1:53:91:b1:fb:26:b5:2b:db:02:
                    41:64:ff:1e:2f:a1:ba:d6:9a:8c:c5:cc:02:b1:8b:
                    c4:9a:3b:69:8e:f9:ea:f3:7b:17:71:ec:b4:73:a4:
                    b6:c2:0a:78:88:86:c3:b6:fa:2c:90:f5:38:2d:12:
                    f6:40:54:20:4b:aa:e8:c8:58:bc:21:9d:1e:25:21:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:DD:AE:DF:5C:57:B3:A7:E6:E8:C6:52:CD:00:57:B8:21:D5:36
            X509v3 Authority Key Identifier:
                keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:74:d1:08:56:51:6e:38:08:c3:bb:64:41:09:07:77:63:40:
         dd:95:c4:57:d4:1c:32:21:50:58:96:36:f6:52:49:cb:be:a4:
         38:f4:ae:21:30:94:56:08:b4:26:82:4f:11:a4:22:de:c1:64:
         5d:8d:14:04:ba:58:09:51:ad:ad:bb:c6:69:d1:4f:25:18:04:
         b5:88:67:ab:ac:81:30:8e:6d:96:81:46:58:e7:e5:54:cb:64:
         dd:65:d1:4e:02:c7:c2:98:e5:f1:10:13:a6:50:cd:21:14:bb:
         cd:bc:34:3c:aa:5b:41:72:2f:8d:00:c0:0a:7b:b8:27:ca:eb:
         84:53:d7:68:2b:42:01:e4:9d:5d:85:ff:27:4d:71:09:cd:9d:
         e8:a7:08:10:9c:d3:18:ae:43:b4:fa:bc:80:61:11:86:38:c1:
         cc:68:c2:ff:02:cf:e4:71:96:e6:9c:e4:1e:78:bd:cd:08:87:
         84:cb:b8:5d:93:30:af:5e:c8:6a:8e:13:79:89:14:a9:1b:fb:
         1c:9d:eb:ab:91:38:43:6f:bd:11:a6:73:3d:ed:81:4f:a9:38:
         b6:0f:e1:ae:c4:b7:9c:2e:1b:e9:bc:9b:bb:23:24:07:30:d0:
         f4:75:b2:ae:d4:28:af:da:32:16:6e:ae:e6:4b:76:af:e1:5c:
         1f:81:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:42 2026 by rpki-client