Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
File:                     TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json)
Hash identifier:          s4Ix1b/QyLXnbgV7r0FI/8+GXCeA14zSnZgXnQqLpI8=
Subject key identifier:   31:70:F7:32:46:B9:B4:9B:C1:10:1A:01:7D:1D:E0:9E:7B:52:B3:00
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Certificate issuer:       /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
Manifest number:          01F8
Signing time:             Sun 01 Mar 2026 03:56:22 +0000
Manifest this update:     Sun 01 Mar 2026 03:56:21 +0000
Manifest next update:     Sun 08 Mar 2026 03:56:21 +0000
Files and hashes:         1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: HPmeR8N+Hmpc/5rTlryOX8hFKemKaS3fMkS2GkMGMXY=)
                          2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: mX0oS42d4Afnuz1c6BL0lN1MWESAc87z/AqUedcAt4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
                          rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
        Validity
            Not Before: Mar  1 03:56:21 2026 GMT
            Not After : Mar  8 03:56:21 2026 GMT
        Subject: CN=69a3b8e6-f66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:57:56:f6:c4:1a:05:7c:83:6e:a8:04:4d:
                    0f:bc:a4:8c:17:e9:42:3d:24:79:5b:ed:35:f0:ce:
                    68:7f:c6:8e:f6:26:4f:b3:68:18:b1:ca:44:48:a7:
                    ca:9a:95:7b:25:52:9c:22:d7:e3:5f:f1:48:32:40:
                    ce:93:b3:4e:f2:53:30:a0:3d:ba:5e:9a:bc:b1:b8:
                    12:84:e5:85:f7:94:73:f9:30:67:35:ca:a8:3d:72:
                    60:4e:aa:38:3c:1d:85:7f:99:6e:45:15:c3:a0:56:
                    c7:7c:34:f7:d5:92:70:40:77:99:98:36:dd:42:eb:
                    4a:46:54:4f:6b:72:dc:0a:8c:2e:67:ed:97:d0:16:
                    14:74:e2:39:1b:29:e8:55:dc:45:26:46:7d:02:26:
                    04:19:b8:ef:89:6e:70:a0:af:dc:d8:dd:73:ef:7c:
                    75:24:de:15:cf:58:d5:da:c6:5c:1f:34:1d:d2:32:
                    c2:15:a7:2c:d2:f8:9d:65:be:33:86:19:31:82:ef:
                    0d:c4:0a:3b:c6:eb:74:3e:3e:13:80:98:02:16:3d:
                    c0:20:d8:91:70:d8:68:9f:2b:5d:d1:5b:56:8b:81:
                    6f:89:e5:d9:20:3d:b9:02:33:39:7a:18:a0:0d:eb:
                    ea:f1:fe:62:3e:e4:07:2d:8c:30:e7:62:14:33:aa:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:F7:32:46:B9:B4:9B:C1:10:1A:01:7D:1D:E0:9E:7B:52:B3:00
            X509v3 Authority Key Identifier:
                keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:19:44:70:f7:5d:0b:d5:a6:0b:ed:65:34:15:9f:5d:33:53:
         97:77:7f:1e:f3:33:b2:52:76:98:b5:09:21:36:37:8e:38:4b:
         7a:77:4c:62:54:86:9e:0a:2c:72:cc:32:f2:97:d5:e6:16:c7:
         32:a2:47:66:c4:4b:11:b0:8f:07:81:b7:fb:a9:26:95:99:cf:
         09:d2:6a:dd:9a:cc:7a:93:6a:cd:3d:4f:7a:2d:0c:72:9d:ad:
         25:b0:5c:48:6b:7d:17:78:a6:4d:71:cf:29:ae:e2:bc:ab:24:
         e0:c6:59:e1:1f:a6:35:5b:ce:f8:bd:98:45:db:fc:33:e9:f6:
         d8:12:79:f4:5e:ca:6f:85:11:00:de:63:c3:bb:1e:34:31:42:
         5f:b0:cf:65:4c:c9:bc:b5:cb:de:c8:43:2f:e2:b8:19:eb:41:
         37:bc:6e:19:bd:45:8a:90:54:6a:8e:ec:17:b6:b5:39:db:0c:
         cd:cc:74:d8:bf:ca:9b:bd:3e:84:bb:40:a6:2e:fb:d2:64:0d:
         0e:8d:80:a9:ad:94:f9:e9:96:41:42:78:75:4b:53:a1:68:41:
         b8:ba:ec:5d:ee:78:b2:6b:8f:f8:d7:27:90:d4:32:9d:52:0b:
         dc:6f:65:8f:91:72:e4:47:f3:d5:db:8e:28:9a:33:6a:a9:63:
         df:5d:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:39 2026 by rpki-client