Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
File:                     aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json)
Hash identifier:          6loO1dkfjr+WT9+DRVWkgyqn1UA3Kxe0y4LxpRFxLmc=
Subject key identifier:   BE:22:C6:F4:EA:73:5A:E6:5E:60:6B:3F:EC:0C:62:9B:82:DE:C5:99
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Certificate issuer:       /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial:       069B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
Manifest number:          084C
Signing time:             Sun 01 Mar 2026 23:39:08 +0000
Manifest this update:     Sun 01 Mar 2026 23:39:05 +0000
Manifest next update:     Sun 08 Mar 2026 23:39:05 +0000
Files and hashes:         1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: gV//V3avA1SSWj9JispJ71KzQByVpJm+SkudaWQqCRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
                          rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
        Validity
            Not Before: Mar  1 23:39:05 2026 GMT
            Not After : Mar  8 23:39:05 2026 GMT
        Subject: CN=69a4ce1b-1648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:6d:63:90:0f:a2:3a:19:f3:cb:23:5c:25:
                    40:07:e3:13:8b:17:52:de:16:30:ff:2b:22:dd:c4:
                    d4:e3:ff:42:e2:00:23:7a:64:66:b8:f7:8c:93:d3:
                    13:5c:af:5a:bb:2a:1b:b5:dc:d2:92:44:48:60:f1:
                    ed:42:66:04:7a:37:7a:58:95:f7:e5:96:00:43:d2:
                    ee:4b:f2:6d:36:c0:fb:30:7b:75:c5:d0:98:1c:1d:
                    30:19:55:8d:9b:cd:51:21:3a:b1:19:68:6a:33:93:
                    03:52:89:62:a8:c0:d6:3d:3e:81:27:52:70:60:2d:
                    f9:ba:b0:a9:dc:42:a5:e6:b1:2e:e3:89:a6:3d:94:
                    79:7a:93:17:3b:58:f3:26:40:90:a6:09:60:1b:b0:
                    a9:54:1c:b6:22:b2:f1:f1:2e:6b:c2:ae:21:06:a2:
                    39:46:19:2e:eb:b6:a7:23:95:15:96:ed:ec:89:0b:
                    d8:c4:a4:f7:c6:97:a0:a0:52:b7:5c:19:c3:c5:5b:
                    b3:22:2c:5f:b9:44:65:8c:db:c1:c5:93:bc:f9:1a:
                    56:1b:3c:f9:bd:3a:ca:06:9d:b8:a6:4a:ab:74:eb:
                    8b:f1:9f:9d:9e:9a:95:a8:fa:7a:ba:aa:63:5c:3d:
                    8a:42:09:f9:ed:74:15:32:0b:d6:72:a8:b6:84:f3:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:22:C6:F4:EA:73:5A:E6:5E:60:6B:3F:EC:0C:62:9B:82:DE:C5:99
            X509v3 Authority Key Identifier:
                keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:d1:3a:4e:ec:11:ba:28:10:d9:43:5c:2f:99:e6:40:f5:
         94:2e:ea:7e:b6:46:81:82:18:cb:35:17:e3:da:b7:35:69:da:
         59:03:03:bf:14:55:b3:8d:53:57:15:e1:13:1d:52:f7:fc:98:
         57:58:87:1a:c2:e2:e2:a1:2a:4c:45:e0:db:81:30:1e:53:6f:
         88:69:de:2f:90:bd:d9:b5:4c:01:9c:5d:ac:00:fb:62:b6:93:
         ef:78:76:66:7a:80:4d:c5:96:e6:97:db:70:0e:70:50:83:97:
         7c:58:98:c7:ff:86:aa:e5:e6:e5:69:7e:0d:93:18:ef:98:3a:
         fd:bc:45:0f:f5:56:2b:ba:d5:16:f2:04:2c:28:32:bf:98:4d:
         6b:2b:29:ed:f4:92:bd:84:bd:2f:52:cf:fc:45:8d:2b:60:7e:
         33:c9:d8:47:1c:69:dc:78:9e:61:7b:cd:91:a0:6d:bf:56:bb:
         0f:76:ca:9f:4b:f5:9f:8b:a4:35:09:14:3f:4b:81:9c:ee:8a:
         56:af:76:51:a1:dc:62:67:12:9e:98:bd:18:c5:86:4c:6a:54:
         ef:bd:91:88:fe:73:60:cf:eb:84:9f:53:e0:dd:51:36:61:71:
         8f:e7:8a:04:02:9a:57:96:33:1e:5d:28:08:cc:76:6e:2d:d9:
         07:cc:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:46 2026 by rpki-client