Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File:                     dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier:          kNZ1F90fh0Ke2TVjSlNs6raf6fE9v+FZpN18m+zySKM=
Subject key identifier:   4C:39:B2:97:68:0E:94:F8:CF:F2:13:77:AE:0C:28:50:8E:53:7E:89
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number:          017F
Signing time:             Sun 01 Mar 2026 05:35:42 +0000
Manifest this update:     Sun 01 Mar 2026 05:35:41 +0000
Manifest next update:     Sun 08 Mar 2026 05:35:41 +0000
Files and hashes:         1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: PCWLANvmGOjMD8iJUzAg1to/FTHlB7mdwq4R8vaRit4=)
                          2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=)
                          3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: Mar  1 05:35:41 2026 GMT
            Not After : Mar  8 05:35:41 2026 GMT
        Subject: CN=69a3d02d-1cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:0e:d7:b7:e3:c2:75:4e:0e:66:e5:e1:f9:
                    1b:f5:ff:66:78:8a:6b:09:11:69:93:45:7d:ad:a0:
                    3f:69:9c:40:3a:ea:4b:9e:81:ad:fa:dd:5a:3d:18:
                    eb:6d:dc:6a:31:0a:63:f2:25:a1:b6:43:08:15:1c:
                    b6:11:14:9d:c7:b1:ee:dd:94:63:3f:24:6e:b7:30:
                    ed:b3:48:46:53:54:85:b3:a6:c0:4a:d8:9b:c1:e4:
                    21:b9:b8:2f:0f:2a:d2:f1:99:4c:28:29:b9:82:56:
                    45:3d:70:e6:d1:b4:93:f5:22:fc:e9:b8:b6:7a:9d:
                    d6:0f:73:24:23:1a:c4:35:59:1b:e6:7c:2b:c0:6f:
                    c4:46:60:d9:b4:af:da:e1:a8:7d:f0:b6:17:5d:91:
                    9f:2f:78:1c:90:3f:6b:53:ac:33:13:95:68:91:a6:
                    c5:98:b4:51:9f:0f:d5:65:a8:f9:2f:df:cd:a3:c5:
                    e8:49:16:33:01:c0:37:dd:ab:65:f8:bd:dd:84:a7:
                    6c:6f:ed:a2:68:e5:fc:c2:45:5c:d3:9e:a0:5f:d2:
                    13:ae:3d:a9:46:74:a3:7f:40:1d:ed:e6:a7:23:2c:
                    96:c2:6f:3a:61:35:dc:76:06:65:59:b5:27:b0:61:
                    77:42:b6:9d:17:16:41:25:50:6f:85:d4:f1:6f:e7:
                    4f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:39:B2:97:68:0E:94:F8:CF:F2:13:77:AE:0C:28:50:8E:53:7E:89
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:8c:cd:f3:7d:80:bd:2f:31:94:5b:7c:da:c1:da:c7:64:
         90:19:39:a2:58:3e:7c:df:15:96:5e:4d:25:f5:8e:25:39:59:
         21:2c:80:93:c1:a3:20:9e:1d:1b:82:fd:88:f7:0f:3c:47:01:
         c7:e2:9d:8b:b3:5b:f2:24:f7:c8:a3:2c:11:1c:2d:8a:81:30:
         32:e0:f1:28:18:98:ec:c3:fb:1a:e8:28:00:7d:67:65:18:18:
         1d:a9:39:0c:bb:7f:79:0d:71:a4:c4:ac:44:a9:e5:49:bc:e3:
         6f:aa:d2:07:f5:98:3c:2f:13:dc:66:d6:e3:ef:8b:1b:58:a5:
         13:be:f4:eb:07:f1:d1:c2:35:e9:89:3a:8d:24:7e:b5:ca:e8:
         57:1c:68:a4:71:c6:44:35:50:f5:58:f0:b2:7f:c8:61:9c:1d:
         05:a2:db:68:3a:3b:be:d5:f2:ec:7c:52:3b:16:99:1a:4e:12:
         17:0e:29:9e:50:e5:ca:a0:a5:cd:43:a1:4a:0b:3b:ef:98:cd:
         bd:35:bc:83:2f:eb:74:80:41:31:8b:f8:fd:78:b8:73:c3:bd:
         be:1c:6d:c7:ab:da:e5:1e:46:ee:c9:68:3d:47:08:8e:0f:36:
         e9:0f:94:3e:fe:92:e5:2c:c3:12:50:f9:3b:16:31:67:8e:a8:
         5f:46:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:06 2026 by rpki-client