Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File:                     4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier:          X3JWFRfe0of76bzLIGkoQ9u8VdCngv4Xr3vVkVZUzLk=
Subject key identifier:   67:2E:8E:D5:AE:15:F5:9F:62:20:2B:89:17:43:9D:B9:3B:87:A7:A3
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer:       /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial:       0E13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number:          0E02
Signing time:             Mon 02 Mar 2026 03:12:25 +0000
Manifest this update:     Mon 02 Mar 2026 03:12:23 +0000
Manifest next update:     Mon 09 Mar 2026 03:12:23 +0000
Files and hashes:         1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: yFE3k+hJPdGJdpS1qKTNukRr6b06Tr348ai3iadrrVU=)
                          2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: 2pN9nTFxj6nclr0WTJ25vKxxUHXAvjKZjFUhskFnTRI=)
                          3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: hREq3dfebI3lmN/AdMfL+hkUkOZoLrGY9aPcGr6VVN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
                          rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
        Validity
            Not Before: Mar  2 03:12:23 2026 GMT
            Not After : Mar  9 03:12:23 2026 GMT
        Subject: CN=69a50018-054b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:1f:ac:45:0a:31:12:62:5e:1c:c5:36:be:
                    3a:87:a6:eb:b7:15:c9:d1:0b:bd:ce:a5:d2:bd:30:
                    ee:27:0b:8b:11:7e:0c:39:fb:30:df:ec:bf:74:7f:
                    cb:3b:ed:4f:fc:f2:10:43:20:8e:d7:2b:dc:6b:df:
                    9b:65:d2:10:1f:a1:67:94:3f:b7:cb:8a:75:78:b4:
                    e0:7d:d8:a1:91:08:4a:f1:66:71:64:3b:82:12:9f:
                    ed:0c:c4:66:51:db:37:5a:f4:8a:cc:b8:c8:a3:4b:
                    b6:46:6c:62:40:d2:0f:4e:91:42:b8:28:82:8b:07:
                    d8:35:53:97:19:cd:b2:cd:83:60:dd:07:c7:17:c3:
                    df:8a:d9:85:63:07:56:4b:c0:ea:c2:c5:9c:9e:e7:
                    aa:23:4b:7a:ee:0a:d8:b5:0a:b1:80:c8:6b:0d:a3:
                    f1:0c:7d:06:13:7a:7e:85:a0:5f:0a:4e:8f:e5:a2:
                    63:14:88:cd:53:33:01:bf:10:76:e3:de:fd:02:dd:
                    88:b7:62:84:5e:ad:63:b1:ac:fd:c2:4c:56:ea:da:
                    96:6e:e5:f2:e3:c1:fb:df:41:c9:fc:f1:4b:25:13:
                    2c:45:69:46:d0:70:ca:e0:97:a5:12:df:dc:76:8a:
                    48:b4:94:39:58:e8:ca:29:73:84:d3:aa:41:24:c4:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2E:8E:D5:AE:15:F5:9F:62:20:2B:89:17:43:9D:B9:3B:87:A7:A3
            X509v3 Authority Key Identifier:
                keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:21:1e:13:08:d5:89:f0:f9:e8:fe:4e:cd:ba:ba:45:18:07:
         09:80:62:66:62:55:24:da:13:c1:a0:52:f8:a8:74:db:61:98:
         2d:9b:96:4c:4b:99:2e:eb:fd:bb:ff:32:34:50:33:82:16:2d:
         7d:aa:d2:9a:c5:e7:93:d7:46:16:38:61:83:2a:13:81:b8:0d:
         99:6c:54:12:cf:18:56:07:78:52:61:63:2c:ff:c2:c0:ab:10:
         2d:85:c3:bf:bf:7e:da:50:49:bc:17:51:5a:a9:25:0e:3a:e1:
         3e:18:a6:e8:a1:39:7f:1e:61:46:3b:7b:eb:ae:c3:7a:7a:16:
         4a:0a:22:ad:c4:d2:bc:54:33:a7:aa:d5:e6:c0:d4:dc:63:9d:
         77:81:15:7c:57:37:e4:d7:a7:21:ab:bd:b9:42:17:e1:0e:ba:
         ea:df:17:4f:7f:5c:c9:b5:16:ba:7d:ac:a3:f0:c7:49:0c:a6:
         e7:f5:b6:23:72:a6:0e:6e:6f:c7:89:5c:03:c4:b8:e5:9b:01:
         5b:1f:72:61:8b:cd:dd:43:27:ab:0f:45:8e:a7:f5:6f:55:1b:
         9c:66:1b:59:91:f2:10:8d:89:5d:74:2a:05:6f:88:50:9a:82:
         32:e3:de:91:ef:dc:be:9f:7a:b4:7d:83:86:8a:d4:fa:f0:cf:
         4e:ba:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:46 2026 by rpki-client