Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File:                     H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier:          LXYR0bNXaKWL3A6iUW7aui3up0CidgrvEY6FwyZyK5U=
Subject key identifier:   C1:E3:30:95:83:A7:E8:9A:B9:8A:09:21:91:6C:6E:AB:DA:C1:67:52
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer:       /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial:       0CCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number:          0CB5
Signing time:             Mon 02 Mar 2026 00:25:23 +0000
Manifest this update:     Mon 02 Mar 2026 00:25:21 +0000
Manifest next update:     Mon 09 Mar 2026 00:25:21 +0000
Files and hashes:         1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: UvyJaMYL1aKk2JJrAe5H05OLod79nP5YTj34F8X4Nbg=)
                          2: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: tcDVHJrWSVmqtE3KfMdxpE8eti6SUsQc8cAfExl/fX0=)
                          3: 172E487A416911ECB6B11742C4F9AE02.roa (hash: Ipc6oIv3wAFztOTtoYsux+k4MR+JL3rDy/edFa4+Y34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
                          rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
        Validity
            Not Before: Mar  2 00:25:21 2026 GMT
            Not After : Mar  9 00:25:21 2026 GMT
        Subject: CN=69a4d8f3-d1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:d2:45:7a:12:ac:63:c0:96:e2:42:34:e7:
                    c1:52:46:ea:3c:46:c1:46:ba:29:f4:68:d9:4b:4e:
                    f3:16:41:ac:bd:40:60:a6:2b:79:cf:c0:69:1a:ee:
                    ca:05:87:10:f6:e3:92:59:bc:cf:12:98:3d:58:25:
                    b3:89:4f:4e:b2:e2:73:eb:27:fe:b0:86:fd:2c:80:
                    a6:e6:9b:64:bc:b6:ff:fc:17:2d:19:5c:13:63:7f:
                    d3:74:10:ab:10:e5:18:dc:51:1b:79:a5:eb:ae:7a:
                    54:a4:15:17:fe:b5:52:bb:54:15:9e:a9:ad:83:3c:
                    d9:34:f8:1c:f6:1d:aa:11:8e:b1:14:03:c7:70:47:
                    05:45:74:d5:70:1d:c4:ad:df:16:33:7d:98:26:ae:
                    be:a1:d9:ff:a9:1c:eb:c7:d8:f1:e4:e8:8f:77:92:
                    b5:6d:a1:6e:89:1f:48:5f:ef:da:60:46:bd:e6:ab:
                    0c:b8:56:db:f4:b0:c1:23:4d:d3:9f:47:e4:5f:73:
                    fa:03:1f:4f:11:fc:20:94:ab:fc:f9:57:ee:b5:25:
                    eb:f4:39:48:bb:b0:31:3e:3a:eb:3a:ab:20:18:81:
                    f6:ca:6c:7c:de:23:c3:0e:14:f2:8b:c3:3d:fc:2e:
                    51:da:6a:a5:bb:f2:47:e1:24:85:77:8b:e5:59:bd:
                    5b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E3:30:95:83:A7:E8:9A:B9:8A:09:21:91:6C:6E:AB:DA:C1:67:52
            X509v3 Authority Key Identifier:
                keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:55:db:19:63:71:36:b7:fc:98:b5:7f:b4:05:5a:2e:f9:85:
         68:53:3f:82:ed:d6:75:4d:a0:f5:f5:62:49:09:3b:6f:e6:39:
         47:0f:65:e3:c8:69:bf:6d:76:26:af:47:1b:23:c1:b1:95:ed:
         6c:9c:f5:aa:01:cc:0b:d2:ce:5b:73:b2:f4:55:e7:01:ea:90:
         1e:f2:b0:a3:8d:8a:e3:09:ed:0d:d0:8d:85:06:1a:a1:ff:95:
         40:5d:58:7f:a8:3d:df:1c:43:b1:f9:00:44:4f:0a:7d:d3:94:
         0b:27:96:74:2d:ce:44:6d:1c:b1:fc:9e:c1:63:a5:9c:89:3f:
         11:0a:89:12:bc:a5:18:a8:62:ea:97:83:f5:cb:1b:89:c5:7c:
         8f:98:26:e0:b8:56:be:3a:80:71:2c:0e:52:76:7f:1d:b1:bf:
         6e:06:cb:59:8a:6e:1d:61:1e:1e:a6:0b:f8:58:37:96:79:06:
         fc:40:49:25:b4:f6:9d:d3:d5:8b:69:0a:9d:3e:42:de:ea:89:
         f4:0b:79:b8:ab:ab:fb:3a:1f:81:5b:eb:73:22:41:5f:e9:e1:
         61:21:5f:3c:7a:55:0e:e5:66:28:1b:8e:d8:f6:f0:f7:6f:ec:
         6e:8b:31:82:f1:16:6f:ae:36:52:2f:d3:4b:ef:89:f6:37:67:
         8c:b2:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:09 2026 by rpki-client