Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
File:                     sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json)
Hash identifier:          N9Ov3oO06npTK0FWeCDZPJ6WGad0JJ9WQbiPPSCbjn4=
Subject key identifier:   B5:64:53:2C:C3:1E:69:59:10:8C:69:A3:C6:77:1C:C9:78:77:BC:CF
Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD
Certificate issuer:       /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
Manifest number:          EE
Signing time:             Sun 01 Mar 2026 07:28:50 +0000
Manifest this update:     Sun 01 Mar 2026 07:28:50 +0000
Manifest next update:     Sun 08 Mar 2026 07:28:50 +0000
Files and hashes:         1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: 2lPbhX1rvJRvtA1VMzOha8KaKqOcpwf1GGwZ/A+kDZI=)
                          2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: pR/AYlcoSeqOspa7u7n734XUDFYwytW2eGkt0XW/tEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl
                          rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
        Validity
            Not Before: Mar  1 07:28:50 2026 GMT
            Not After : Mar  8 07:28:50 2026 GMT
        Subject: CN=69a3eab2-307c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:64:03:7a:9b:b6:87:ae:f6:9e:6d:81:08:
                    05:a9:cb:6f:42:9d:fd:71:bd:86:5b:32:b1:03:6e:
                    19:ae:43:24:e9:90:1e:be:bd:19:4a:92:42:da:b6:
                    48:5c:e1:91:31:04:ce:2a:a5:6f:78:cf:c0:40:36:
                    58:c2:24:00:51:ff:fe:27:24:f6:1a:d1:13:ea:c5:
                    d5:0b:1b:b4:e4:0e:14:2f:b7:1f:a6:af:d7:dd:e1:
                    31:be:5b:fb:aa:d9:3e:8e:b5:05:8f:de:7c:73:34:
                    74:20:95:bd:61:a3:61:79:51:4a:f8:0a:0d:2a:06:
                    fb:88:6b:91:96:03:d1:cf:99:80:61:8e:9b:f7:40:
                    38:12:c2:96:c9:61:89:35:9e:f6:90:18:b7:07:29:
                    b4:d3:2e:64:d3:06:b5:00:aa:38:f1:98:92:af:c2:
                    a3:34:f8:cc:b0:a4:04:3d:65:64:8b:33:24:20:cf:
                    9c:6e:63:78:fd:fd:b7:fe:9b:4d:d7:c1:aa:76:bd:
                    b8:53:8a:20:28:fe:3d:93:8e:c2:54:f0:b1:53:bf:
                    5f:e1:2e:ca:fd:a0:50:7f:75:7b:3b:3c:24:8e:fa:
                    ff:2d:7b:a5:f9:29:c4:ca:76:02:ff:4c:70:f1:38:
                    af:f9:38:7b:d4:64:fb:b9:f5:03:36:c1:89:30:4b:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:64:53:2C:C3:1E:69:59:10:8C:69:A3:C6:77:1C:C9:78:77:BC:CF
            X509v3 Authority Key Identifier:
                keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:f4:b2:63:0f:b2:e2:b3:4c:07:e9:a7:39:17:be:13:b1:
         84:9e:5e:25:22:9a:3d:59:b1:08:39:e2:08:99:68:33:f1:bf:
         d7:33:ab:dd:d3:1c:94:ef:75:ec:77:b8:34:36:47:b7:f9:20:
         63:8a:86:30:c9:8a:b8:c7:38:6f:d7:92:8f:d4:6d:93:53:e4:
         d0:dc:12:68:6c:20:91:ad:7d:1a:1c:4a:4d:b8:46:68:c7:c1:
         e7:80:c9:25:df:5c:00:22:45:f4:89:7c:a8:c7:88:c6:ab:73:
         e3:56:1f:2b:c9:1a:10:2e:ec:62:95:24:f2:87:89:93:60:c1:
         6d:2e:fc:e4:38:d8:fd:6f:ee:d9:b8:f9:92:7d:05:69:31:78:
         74:a6:68:1c:02:4b:61:89:aa:9f:b3:27:61:8a:03:56:2f:11:
         1c:a7:30:65:6e:1b:9b:be:7d:93:2c:23:c8:ef:5e:7a:0e:b7:
         c8:bb:4c:66:98:c7:aa:83:ac:e1:32:23:b1:07:5d:76:96:98:
         a9:c9:95:15:6a:be:82:97:cb:c8:a5:fd:50:57:d1:f1:d1:e1:
         6c:d9:44:25:fb:37:7d:4a:b5:46:1b:2d:a2:35:3c:e1:d1:60:
         e2:09:78:38:51:fd:87:fd:b0:3c:6d:77:b5:b6:17:d8:74:e1:
         e3:27:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:26 2026 by rpki-client