Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
File:                     f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json)
Hash identifier:          GdSlwRdU1dOqPCtYR61QDutId68Q9gH3kbKpddAOf68=
Subject key identifier:   D4:B4:28:CD:B7:30:78:12:81:14:15:C4:CC:97:AF:26:5A:0E:A3:F8
Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8
Certificate issuer:       /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
Certificate serial:       0917
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
Manifest number:          08E7
Signing time:             Sat 28 Feb 2026 14:47:06 +0000
Manifest this update:     Sat 28 Feb 2026 14:47:06 +0000
Manifest next update:     Sat 07 Mar 2026 14:47:06 +0000
Files and hashes:         1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: DoAvqJRRJ+okjWE0f/6xVf14zLlFFOeS2Hy2yuFdrdU=)
                          2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: geYBmD1DM/AUXSPUgRalrZ3WyRIJCoCzSg/oC0uheIE=)
                          3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: zD1hAOWgfFf8imPdjoaN6Kre5zSjJhCHRQDKqb4UceI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl
                          rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327 (0x917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8
        Validity
            Not Before: Feb 28 14:47:06 2026 GMT
            Not After : Mar  7 14:47:06 2026 GMT
        Subject: CN=69a2ffea-f351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:36:bf:40:2b:f9:4a:e7:57:e7:f8:5d:0e:
                    cf:f7:de:72:24:fa:bc:08:1b:ae:4a:ca:9a:71:18:
                    60:1d:7f:97:88:80:cd:09:c9:ef:35:7b:2c:16:7f:
                    28:a7:af:58:31:21:26:d2:ad:d7:b3:08:cb:68:a2:
                    3d:ff:c7:65:f6:db:5e:62:43:96:f5:e0:ee:86:ad:
                    a6:65:47:6c:13:17:90:26:82:eb:8b:7d:49:a5:03:
                    a7:99:17:d7:44:60:57:c8:73:c0:93:97:cc:ba:6d:
                    6b:4d:1b:24:90:de:28:c9:0a:e6:6e:d2:40:a2:e4:
                    84:a0:8e:15:f0:74:7e:58:a9:3b:c6:b0:19:bf:f5:
                    9d:70:66:a1:f5:83:81:c7:58:f2:51:e1:a1:19:2b:
                    fd:38:4c:ef:45:89:6b:f6:0d:78:a4:b2:b8:44:eb:
                    7c:44:a0:5d:19:9f:e4:8c:96:d6:aa:2a:94:70:df:
                    f8:47:2a:94:92:0a:da:98:37:c3:1d:b4:a5:7d:a8:
                    04:05:53:eb:ec:58:07:01:8c:a1:54:1f:10:25:f1:
                    1b:01:8e:fd:dd:46:c3:7d:34:80:31:bd:33:41:24:
                    46:af:04:1d:ab:41:cc:2c:88:66:d7:07:2a:fb:3d:
                    06:67:3e:25:c1:7a:fa:07:ef:bf:f0:0b:20:48:36:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B4:28:CD:B7:30:78:12:81:14:15:C4:CC:97:AF:26:5A:0E:A3:F8
            X509v3 Authority Key Identifier:
                keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:99:c1:f0:0a:df:ed:bf:9e:01:34:78:98:38:ed:18:c6:c2:
         2e:01:39:4c:bd:bf:95:e4:6e:6c:67:21:76:bd:83:87:2f:5f:
         67:62:b4:29:6b:88:5d:ee:51:bc:7e:fd:5c:22:0b:b4:93:bf:
         0d:83:1d:17:19:bf:45:c2:53:b2:e3:f1:a1:ed:3d:19:ef:af:
         94:05:ce:07:dc:5a:ce:2e:ee:e3:7b:1c:3e:50:9b:b8:5c:e3:
         ed:7b:aa:0f:e0:c9:44:ce:fd:43:ae:69:36:20:a3:e8:9c:8c:
         51:49:5d:51:07:3f:a1:f2:d9:42:4e:78:4b:90:bf:6d:04:ab:
         e8:00:1b:af:ef:43:7a:24:3f:eb:b4:63:ba:50:34:c8:e0:64:
         42:a3:23:93:31:c2:9a:8d:c5:aa:c0:3c:22:19:49:97:63:e2:
         d2:45:1b:01:ca:98:43:ea:fc:1e:43:b6:36:4a:a9:40:8b:4c:
         81:d0:8e:95:66:24:d2:b3:3d:60:d1:26:f3:09:72:eb:23:a8:
         13:bd:09:dd:41:7f:86:78:de:ae:8a:9d:05:ba:3e:77:fc:f2:
         52:6c:67:4f:71:3c:e5:b8:16:16:5c:c1:8a:0d:8b:59:2e:19:
         83:c5:2c:cf:d7:9f:8f:18:04:e2:10:35:42:19:a0:10:90:18:
         e4:47:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:09 2026 by rpki-client