Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File:                     rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier:          9728xqsfspUc8K8m/Onq5O3tl3dwI+36nD+CS5yZfvQ=
Subject key identifier:   64:16:4F:E3:14:F6:5E:41:6C:25:41:F2:9E:AE:A8:D5:FC:27:17:BC
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number:          06DD
Signing time:             Mon 02 Mar 2026 01:09:10 +0000
Manifest this update:     Mon 02 Mar 2026 01:09:09 +0000
Manifest next update:     Mon 09 Mar 2026 01:09:09 +0000
Files and hashes:         1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: mEVMGru/3No1qSH2C5oWhtFs2BLO27aT4cN+7kPEcyM=)
                          2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 1TSa0PPd+7pwYyolW0O6jfoDGRjZIL5Y7Dutt5Dic1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: Mar  2 01:09:09 2026 GMT
            Not After : Mar  9 01:09:09 2026 GMT
        Subject: CN=69a4e336-79b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:f4:ba:f1:10:f1:fc:f0:71:ad:36:dc:45:
                    14:f2:5e:41:a8:b4:2a:0e:6c:bb:c0:19:8e:2c:df:
                    72:d1:82:df:f5:f7:cb:4b:df:1a:b5:36:cf:fe:15:
                    49:98:21:fc:f0:b5:0d:73:fa:d6:a6:3d:eb:eb:5a:
                    df:d7:67:ce:16:d6:f7:68:5e:93:2a:18:f6:20:98:
                    ae:4c:35:cb:00:61:cb:78:60:23:88:f3:5e:c2:fe:
                    11:38:0c:c8:c2:02:06:82:65:48:05:28:3b:f5:1d:
                    44:25:5c:24:0d:0e:da:4b:ce:47:11:6c:cf:71:eb:
                    21:af:26:96:8d:ff:6a:95:c3:40:9d:69:21:5d:1f:
                    12:59:60:6e:34:58:eb:7f:c1:b9:6b:9d:8d:e9:12:
                    22:aa:16:8f:d5:49:8a:4b:45:aa:e5:18:10:3b:cf:
                    b7:b6:07:b5:9b:ea:63:96:d8:6c:e0:27:df:3c:f9:
                    4f:b6:31:2b:c4:79:f8:e9:74:75:1f:8d:6c:e2:3b:
                    46:24:e6:c9:ef:ec:12:eb:08:c3:29:03:37:83:be:
                    7c:2f:d0:f5:f7:f4:a5:2c:7e:f7:65:15:40:34:00:
                    80:e2:05:1c:cf:64:65:9f:35:99:74:42:5e:df:9a:
                    ac:5c:23:e1:1a:9f:79:5e:68:d9:7b:42:9b:69:59:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:16:4F:E3:14:F6:5E:41:6C:25:41:F2:9E:AE:A8:D5:FC:27:17:BC
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:99:1b:48:45:29:74:6e:06:e1:de:db:18:e8:5d:c7:e9:
         2f:fd:e8:d6:26:bb:89:91:a5:06:8b:75:84:15:07:77:4c:2d:
         72:8b:aa:e1:b4:8a:de:d2:68:ed:4e:6f:32:a3:73:87:1b:44:
         0e:2c:7b:75:51:43:cd:e1:f4:bc:9f:a8:78:94:f6:cc:17:43:
         44:2d:7a:84:82:24:0b:07:46:43:8c:23:f4:b0:ea:b0:ec:3f:
         63:8c:22:02:c3:e5:fa:08:85:26:df:d4:7a:38:3d:63:f9:c5:
         c7:2b:cb:44:a3:7b:c0:10:80:7a:01:18:f8:ff:10:f6:1b:ca:
         04:f2:67:b4:75:c0:7b:d4:3f:ee:25:ae:5d:d4:66:c8:c6:1c:
         1b:bf:8e:89:f2:f7:ad:e8:ce:ef:73:9e:4f:88:58:a5:23:64:
         f7:fa:c2:b8:81:0e:90:35:a9:33:7f:25:9d:1e:71:d0:58:64:
         b6:55:9c:0c:bf:74:96:38:5c:9a:5a:62:59:a8:32:84:8d:7b:
         48:11:67:0b:18:7a:9e:5c:94:ba:8b:c9:02:bd:f5:60:14:09:
         74:09:fb:42:d6:96:b6:a6:10:18:92:6d:c4:c6:f5:31:4e:92:
         e5:4b:6f:51:c7:01:e5:60:50:ed:88:d9:3d:dd:40:f0:37:aa:
         d8:ca:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:10 2026 by rpki-client