Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
File:                     9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft (raw, json)
Hash identifier:          Nz3D9/4qZjItftWUY7rG8HK3A0u86BQZwjaZtL0CIBo=
Subject key identifier:   29:66:0C:1E:A5:B1:40:4E:80:56:C0:00:FE:29:E5:35:63:2B:B0:CE
Authority key identifier: F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93
Certificate issuer:       /CN=A915A15E/serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
Manifest number:          0295
Signing time:             Sun 01 Mar 2026 02:22:55 +0000
Manifest this update:     Sun 01 Mar 2026 02:22:55 +0000
Manifest next update:     Sun 08 Mar 2026 02:22:55 +0000
Files and hashes:         1: 9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl (hash: quvrUjqCcmAARbf9kETWFMxE01DQ/CEiWU96YsugU4M=)
                          2: EA813D021FFC11F0A17B9441C4F9AE02.roa (hash: bL2x4C3hFzPsFxQRfmXEvusmWmw8PA5YR8wMl58LJXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl
                          rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A15E, serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
        Validity
            Not Before: Mar  1 02:22:55 2026 GMT
            Not After : Mar  8 02:22:55 2026 GMT
        Subject: CN=69a3a2ff-2d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:05:eb:a3:54:a0:d1:99:1f:0a:ca:b7:ec:
                    e7:1a:1e:70:8a:24:4c:6d:2c:63:26:9b:14:a0:07:
                    44:03:59:2e:4f:82:b2:54:65:34:78:30:01:d1:f8:
                    ce:99:9c:2e:88:e7:04:af:02:cd:06:fa:3e:64:51:
                    84:c8:66:35:7c:8d:c8:89:f0:89:35:f7:f7:4e:9b:
                    61:3f:b3:cc:5e:af:5e:50:e1:34:ac:97:77:91:82:
                    ea:8a:0c:ff:84:47:e4:c2:78:b3:15:b8:f4:46:2d:
                    36:4b:e0:63:72:2c:23:96:fc:80:95:4c:98:c3:ac:
                    e7:a0:8f:6c:8d:d8:60:67:14:79:3b:50:f7:a9:ac:
                    f4:fd:35:0e:1f:fa:43:d6:d4:dd:bc:05:ce:c1:26:
                    ae:f4:eb:ec:e3:ec:2a:d0:2c:8c:5c:97:72:13:f2:
                    c7:f5:65:09:0f:fd:ad:30:2f:c5:0a:5c:0d:af:67:
                    d5:5f:6f:95:03:2f:9f:9a:bc:de:92:20:e2:cd:ac:
                    29:09:38:5e:16:1d:cf:5f:36:f6:1c:ef:ee:d1:f8:
                    60:fe:fb:e6:02:b1:38:60:90:b2:08:e5:7c:d2:2c:
                    99:13:66:d2:9c:1c:b5:8a:4d:bc:0a:de:e6:f2:14:
                    da:88:d5:27:b2:d0:6e:42:58:c2:35:71:33:d7:26:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:66:0C:1E:A5:B1:40:4E:80:56:C0:00:FE:29:E5:35:63:2B:B0:CE
            X509v3 Authority Key Identifier:
                keyid:F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:fb:66:fc:f1:fd:af:4e:e5:1b:66:be:54:dc:65:3d:29:
         6a:e8:4c:6f:41:59:1e:e3:03:d0:37:15:e1:fc:44:ae:c1:5b:
         21:33:a4:2a:6b:68:e9:7c:59:e0:21:ff:7f:11:55:2b:fd:3d:
         8b:61:7c:6d:6f:58:dc:6c:8d:da:d8:75:5a:11:fb:94:c5:fd:
         1d:b3:09:cc:9e:2b:cf:8a:58:a6:a4:17:3e:21:bd:37:47:b4:
         a8:ab:b3:83:61:63:b5:1f:81:a5:db:ec:07:45:23:0d:24:38:
         52:c4:36:3c:11:78:13:a6:08:9e:16:53:1d:a3:b8:71:67:5e:
         1a:ea:46:16:91:b1:2d:6d:1d:73:d5:7b:f3:e8:85:7b:36:12:
         e2:12:bb:e7:0a:d1:fa:6b:5f:b3:98:fe:3f:41:6e:ab:a2:a7:
         2b:84:2d:b5:9b:21:1c:92:11:f5:27:e4:7e:35:6b:94:8a:b9:
         dc:12:3d:13:47:9e:02:5f:fb:dc:46:f9:2f:04:48:04:71:d5:
         25:5e:4a:c0:35:62:67:73:2f:7e:7d:37:e1:7c:20:eb:af:ba:
         9c:a2:12:ea:fb:61:d7:36:25:9b:43:15:43:43:04:93:d0:b1:
         c4:5f:f3:79:93:c4:f5:af:f8:39:25:9b:54:f2:10:9a:9c:6f:
         87:ad:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:48 2026 by rpki-client