Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File:                     L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier:          t+YpQN3uIjw/RGhptwgaYay6b4PEpjLaCa2A43+RhYg=
Subject key identifier:   54:57:C2:C6:A0:41:E0:67:E8:41:90:DF:7F:E2:E5:D1:8E:0E:4D:2F
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number:          A5
Signing time:             Sun 01 Mar 2026 08:32:00 +0000
Manifest this update:     Sun 01 Mar 2026 08:32:00 +0000
Manifest next update:     Sun 08 Mar 2026 08:32:00 +0000
Files and hashes:         1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: t6qCAbuz+2A4jdOi7H4ErIsW25spGoVjVUWbNQTeUM4=)
                          2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: 92OvboQnu0AfbGHnNVWc8k1x0nqYtBas1dH8qeWSNlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: Mar  1 08:32:00 2026 GMT
            Not After : Mar  8 08:32:00 2026 GMT
        Subject: CN=69a3f980-0025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:59:3b:4a:45:78:55:c0:03:91:83:1c:44:
                    4b:ea:a8:85:71:24:f7:da:87:1a:f0:94:d7:ef:cb:
                    cc:a9:69:ed:6e:f3:d1:53:01:6e:c3:9c:f5:b6:4f:
                    3d:40:11:3a:0d:fd:13:af:11:b3:e5:cc:28:cc:b7:
                    4f:a6:d2:24:7f:54:65:2c:65:26:14:ae:7e:7e:9a:
                    b9:a3:7d:c6:de:dd:51:54:f4:22:e8:66:42:3c:74:
                    ca:e4:84:30:11:bc:e0:3a:9e:a9:96:07:c5:61:c0:
                    99:d5:ae:66:69:6f:17:36:bf:4c:3b:a0:04:5b:b9:
                    92:12:fb:73:ce:f2:e8:30:e8:17:3a:e5:0c:70:01:
                    c1:2e:1a:34:e2:27:8f:5e:31:9e:ea:82:8d:6e:d6:
                    00:01:d1:0e:31:29:33:cf:50:97:66:65:94:9f:d0:
                    b5:da:a3:05:b3:da:f9:b0:60:1e:80:a8:49:2a:d7:
                    68:62:81:bc:c2:3e:05:f8:3b:25:44:57:0d:30:bf:
                    f4:4b:ac:2e:95:81:cc:5b:3f:72:48:38:4d:3c:3f:
                    c7:6b:4c:44:ac:25:50:4f:66:75:fe:d0:9e:be:f9:
                    3f:8b:bd:a4:5f:fc:37:85:35:35:6a:d2:ec:f7:66:
                    e7:4a:9e:77:4f:dc:9e:d0:be:f0:a2:bc:7e:fe:2f:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:C2:C6:A0:41:E0:67:E8:41:90:DF:7F:E2:E5:D1:8E:0E:4D:2F
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:e2:10:17:68:89:47:fe:e9:01:72:d2:e4:f7:25:25:7f:
         bb:6b:b3:ea:d7:dc:74:55:c6:03:f1:77:29:c1:30:ab:fc:f3:
         9d:2d:87:80:3f:5f:08:65:b0:66:ec:3f:8b:86:c0:5c:df:3e:
         6a:07:0e:87:ea:df:c5:d4:cf:36:ca:69:6f:b6:ad:1c:df:4c:
         82:4c:85:7f:87:b4:2d:f9:6b:ec:8b:c4:63:b5:4b:d6:f5:c4:
         4a:93:55:17:9e:e2:ea:ac:da:7a:27:91:35:ac:ca:f7:d3:5f:
         c8:e3:40:61:a3:b5:f2:32:0b:17:a6:d8:c5:c1:20:ee:f3:a7:
         2a:c7:6c:e5:e6:1a:ca:1d:c2:a6:35:eb:54:ff:f6:ed:f1:20:
         ee:86:c3:53:d9:7f:f2:49:07:f4:e9:60:cd:64:c6:9a:b9:27:
         c7:cc:20:00:19:98:c4:06:5a:2d:87:e4:91:15:b1:04:5a:19:
         d3:ef:0b:88:02:1e:4d:df:fa:37:93:54:13:36:21:20:6d:46:
         bb:ca:34:15:8b:ec:f5:32:f4:7d:ff:c7:51:13:17:5e:c3:11:
         42:da:79:b6:63:50:11:06:5e:32:13:3b:a2:c0:c3:40:ad:dc:
         85:43:85:ba:9b:f5:fe:36:a5:f3:c0:e9:15:ae:28:c4:06:86:
         62:aa:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:47 2026 by rpki-client