Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
File:                     XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json)
Hash identifier:          WxlzjjRMyV6dOipsGaY02rU7Pl88NnoiJ5lUKxLanKk=
Subject key identifier:   AC:CB:21:0E:F4:D3:A4:D2:33:13:EA:AA:CA:0A:73:94:EC:FF:6A:AF
Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
Certificate issuer:       /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Certificate serial:       0CDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
Manifest number:          0CCE
Signing time:             Mon 02 Mar 2026 02:13:16 +0000
Manifest this update:     Mon 02 Mar 2026 02:13:14 +0000
Manifest next update:     Mon 09 Mar 2026 02:13:14 +0000
Files and hashes:         1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: 4IoN/NNRT+RqB2ET7srPlW2VqZgB0AEdk0ETBlwP5ik=)
                          2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
                          rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
        Validity
            Not Before: Mar  2 02:13:14 2026 GMT
            Not After : Mar  9 02:13:14 2026 GMT
        Subject: CN=69a4f23c-19a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:4b:ae:59:9a:9a:28:ac:e0:1d:77:4a:b6:
                    ac:1c:1d:b1:fc:12:c4:2f:54:a1:4e:7c:42:77:8b:
                    6e:a1:d6:8c:26:eb:b3:55:cc:5a:59:3d:01:9d:6e:
                    3e:3b:7f:d2:76:74:09:bc:2c:e0:66:c4:5d:eb:0b:
                    7f:3c:49:c2:50:68:54:3a:4d:d0:05:4b:3c:85:2a:
                    db:e4:b5:71:df:63:a3:fd:21:f7:ae:82:48:2f:c7:
                    2d:c0:5b:b2:27:9f:12:cb:9e:25:85:6f:62:b2:28:
                    95:4c:0f:e8:4b:30:7a:ef:00:21:9b:7d:fe:48:1b:
                    3b:30:35:7c:f5:8b:29:c7:f9:95:04:a9:09:ba:0e:
                    cd:d9:3b:53:3f:cb:4d:04:98:19:47:3e:76:e0:5d:
                    67:81:8a:5d:72:0e:fe:a5:61:07:4f:d4:60:33:a8:
                    3d:29:e6:2a:71:9a:a5:b1:f8:54:96:5c:ca:e5:d3:
                    fb:3a:0f:09:fd:91:0f:e3:9f:71:5f:b2:74:51:77:
                    b8:9e:ca:35:a2:3b:12:74:3d:b6:98:c9:20:c7:d9:
                    94:a5:fa:f7:3d:8e:9f:01:73:b4:c5:16:40:36:23:
                    60:f8:2d:d5:be:55:c6:6e:84:64:b1:09:8e:ac:40:
                    b2:43:54:c2:73:ba:e1:d7:6c:65:84:ba:53:19:0a:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:21:0E:F4:D3:A4:D2:33:13:EA:AA:CA:0A:73:94:EC:FF:6A:AF
            X509v3 Authority Key Identifier:
                keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d7:d4:8b:20:f6:06:dd:54:09:8b:ce:65:37:3c:63:42:7d:
         7c:d0:e2:59:fd:cf:a6:fa:89:b4:6a:77:58:ec:00:36:9c:2b:
         2e:b1:cc:a7:b0:83:67:7f:e9:a8:51:c0:6a:a3:ca:a5:aa:fe:
         8c:83:a1:44:d3:9c:e5:eb:60:73:38:9e:7d:63:92:3e:14:e7:
         9e:ea:f1:47:1b:68:45:91:16:2d:5c:33:1f:10:66:69:7b:8a:
         c3:6a:05:b7:98:5f:c1:27:5f:7b:66:77:67:e1:d8:6a:09:be:
         be:66:0e:6b:1d:6b:1c:56:83:cc:8f:42:00:5c:27:ad:7a:cc:
         75:9f:8e:24:a0:a6:fa:31:82:bb:b2:f8:a8:a8:9c:80:a4:67:
         80:79:16:cd:2b:ef:65:13:cc:fc:0b:57:b1:37:ab:ec:f9:d2:
         72:b0:7d:d4:c5:c0:4e:53:5f:1a:af:52:c4:7e:0d:15:5f:18:
         4a:76:3b:9a:a9:d4:57:39:37:f2:a2:cb:37:d7:2c:4e:67:6d:
         e7:0c:96:53:1b:ad:ed:26:ee:62:c4:f8:cb:f5:4e:1d:dc:3b:
         e7:0a:21:64:49:14:a7:1e:e9:8e:79:81:20:94:4a:f4:44:3e:
         e5:79:7d:87:bb:13:bf:ff:9d:2c:c9:a5:e0:2c:85:40:96:1a:
         bf:3a:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:51 2026 by rpki-client