Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
File:                     84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json)
Hash identifier:          vfPq7DR0bdPJLqZtNeAZXQOC+VbOnbT3PTXBioHU1HA=
Subject key identifier:   85:27:79:A7:4E:E8:A2:5B:69:CA:56:9F:EF:A1:A5:24:E7:BF:D5:5C
Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A
Certificate issuer:       /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
Manifest number:          0587
Signing time:             Sat 28 Feb 2026 23:52:45 +0000
Manifest this update:     Sat 28 Feb 2026 23:52:45 +0000
Manifest next update:     Sat 07 Mar 2026 23:52:45 +0000
Files and hashes:         1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: K/yTazjWML2OG8d71Mtu7eHNZi/t+OH1fzkk0Gwnhi0=)
                          2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: ksNFagOfVMmNunRnOoSWeJDWRZC4HhFsn1AY5q9lcGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl
                          rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A
        Validity
            Not Before: Feb 28 23:52:45 2026 GMT
            Not After : Mar  7 23:52:45 2026 GMT
        Subject: CN=69a37fcd-f6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:42:95:d6:b8:81:45:35:05:f5:9a:b0:1d:
                    3e:47:43:9e:7a:8d:3a:57:99:66:22:34:dc:f6:3e:
                    75:d5:f2:df:54:de:69:c4:d2:f8:92:95:69:e1:ea:
                    35:11:8b:a4:6c:34:4b:95:2c:6a:ab:dc:69:4c:3f:
                    0b:b3:dc:26:0a:b2:da:33:c8:83:69:7f:62:f4:1c:
                    dc:3d:9f:18:9a:60:9e:67:ca:e8:16:bf:b1:18:e6:
                    c9:d7:28:ee:85:c1:7c:ec:84:0c:0c:51:b2:6b:9b:
                    4a:15:d1:be:14:e0:6d:ea:01:bc:01:73:19:3a:b7:
                    dc:a7:cb:24:65:e8:be:21:e7:ba:3f:39:f9:87:ee:
                    4d:7e:a9:42:7d:09:5b:f9:12:73:7e:b5:ea:68:31:
                    47:58:e3:a7:8a:81:75:02:83:4f:8e:e9:66:06:93:
                    db:15:14:dc:ef:4c:0b:bd:d7:b3:6b:ef:bc:0f:a3:
                    c6:b4:7d:a2:ae:1b:f9:98:c6:ef:ce:e2:93:ad:1a:
                    ef:70:f3:ef:b8:92:04:2e:61:a6:cb:9b:aa:88:e5:
                    5f:b0:0d:97:da:91:b3:62:93:c7:1d:2a:24:40:08:
                    84:c1:2b:ac:8f:30:67:e4:45:1b:ae:81:44:4c:4e:
                    2b:bf:17:c8:bb:2a:44:2e:42:ab:61:ff:44:2d:84:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:79:A7:4E:E8:A2:5B:69:CA:56:9F:EF:A1:A5:24:E7:BF:D5:5C
            X509v3 Authority Key Identifier:
                keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:d8:2a:06:96:0f:2f:4c:d1:0e:10:54:9d:ca:2f:8c:58:
         3f:a1:86:a4:b6:a1:df:25:d1:37:d9:c6:10:fa:c9:76:be:02:
         fb:48:38:8e:9a:e1:7b:7c:e1:df:f3:4a:7e:84:b0:e8:7a:88:
         c0:53:d2:50:f6:e3:ad:6a:f7:f3:80:ff:52:af:2d:e5:88:e0:
         94:ab:ad:59:ed:3f:cb:ee:e7:2d:71:80:7f:08:6d:de:cd:7f:
         c1:b4:e4:cb:b8:ef:36:6a:35:d8:6c:6d:46:4e:61:7d:90:58:
         4e:69:c2:a6:d9:22:9c:5a:50:2d:d3:e9:ca:1d:17:17:be:06:
         b1:f2:3b:4b:c8:ad:0d:97:af:85:9c:66:67:46:0c:77:9b:a6:
         12:28:7a:d6:2d:16:67:d6:e0:a9:e2:e6:8f:7d:86:1e:76:ee:
         5a:b1:40:19:b3:ea:33:09:69:da:b4:8f:2f:98:a8:f8:a4:ad:
         c8:ca:76:12:07:b5:55:20:d6:cf:a2:d2:f8:9d:a4:f5:a8:f1:
         d6:0a:37:97:4f:25:67:32:c9:a7:3e:0b:a8:f5:1f:6a:b7:cd:
         d7:94:75:8f:1a:69:1c:8b:4e:52:a2:0e:1f:94:27:d8:9c:37:
         fe:b3:f7:ae:82:33:d8:35:92:08:58:9f:6e:2e:d1:1d:bf:f1:
         42:bf:6c:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2
ODMxQjAwNEEwHhcNMjYwMjI4MjM1MjQ1WhcNMjYwMzA3MjM1MjQ1WjAYMRYwFAYD
VQQDDA02OWEzN2ZjZC1mNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgttClda4gUU1BfWasB0+R0Oeeo06V5lmIjTc9j511fLfVN5pxNL4kpVp4eo1
EYukbDRLlSxqq9xpTD8Ls9wmCrLaM8iDaX9i9BzcPZ8YmmCeZ8roFr+xGObJ1yju
hcF87IQMDFGya5tKFdG+FOBt6gG8AXMZOrfcp8skZei+Iee6Pzn5h+5NfqlCfQlb
+RJzfrXqaDFHWOOnioF1AoNPjulmBpPbFRTc70wLvdeza++8D6PGtH2irhv5mMbv
zuKTrRrvcPPvuJIELmGmy5uqiOVfsA2X2pGzYpPHHSokQAiEwSusjzBn5EUbroFE
TE4rvxfIuypELkKrYf9ELYRDgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUneadO
6KJbacpWn++hpSTnv9VcMB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3
NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REM1NS9DQ0JFMUJBNjE3NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bh
a1dtZmdJWko3Rk5vTWJBRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJnvYKgaWDy9M0Q4QVJ3KL4xYP6GGpLah3yXRN9nGEPrJdr4C+0g4jprhe3zh
3/NKfoSw6HqIwFPSUPbjrWr384D/Uq8t5YjglKutWe0/y+7nLXGAfwht3s1/wbTk
y7jvNmo12GxtRk5hfZBYTmnCptkinFpQLdPpyh0XF74GsfI7S8itDZevhZxmZ0YM
d5umEih61i0WZ9bgqeLmj32GHnbuWrFAGbPqMwlp2rSPL5io+KStyMp2Ege1VSDW
z6LS+J2k9ajx1go3l08lZzLJpz4LqPUfarfN15R1jxppHItOUqIOH5Qn2Jw3/rP3
roIz2DWSCFifbi7RHb/xQr9sPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:26 2026 by rpki-client