Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
File:                     1lqglKUeKDl1O1khC2zyxUkVwB4.mft (raw, json)
Hash identifier:          BbFdMmn/y1FlmxQJ2K1pqX2jNNxWM95Iw/feeWEAnNo=
Subject key identifier:   05:E5:78:E0:58:EC:F5:91:E6:19:77:F7:3F:1E:54:4A:CD:69:46:8A
Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
Certificate issuer:       /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Certificate serial:       0A68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
Manifest number:          0A60
Signing time:             Sun 01 Mar 2026 23:11:46 +0000
Manifest this update:     Sun 01 Mar 2026 23:11:45 +0000
Manifest next update:     Sun 08 Mar 2026 23:11:45 +0000
Files and hashes:         1: 1lqglKUeKDl1O1khC2zyxUkVwB4.crl (hash: F2UOP3civvSh2rIMmIyB3uRSXrCRnUNBfdxiiDpBCIs=)
                          2: 220853047F2211EA8E730F35C4F9AE02.roa (hash: dvtbQl9WFxEalnHzoaHQdlGL9o00cBASyRMK3uXNSHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
                          rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1AA, serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
        Validity
            Not Before: Mar  1 23:11:45 2026 GMT
            Not After : Mar  8 23:11:45 2026 GMT
        Subject: CN=69a4c7b2-3449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:1f:3e:d8:65:8f:68:68:5e:b5:d0:4d:9b:
                    f7:7c:55:f5:df:36:10:5e:c8:a5:42:f5:41:c2:b2:
                    79:cb:0c:ea:cd:cc:1e:cd:2d:f1:bf:78:c1:d9:4c:
                    ea:85:03:00:27:c7:c0:13:91:cf:83:52:11:44:8a:
                    ba:a3:0a:b6:8a:5d:b7:c5:85:dd:5e:f1:e8:39:3d:
                    0e:7a:c8:8d:df:da:79:3d:df:fc:01:05:20:1b:b7:
                    4d:c7:11:fb:76:c6:0c:0a:4b:0f:4f:f5:77:12:74:
                    0d:4a:fc:e5:82:a7:42:37:c7:40:54:2f:88:f6:a2:
                    dd:56:b5:bb:ca:cd:27:f7:24:db:9b:0a:29:6f:ff:
                    e9:3b:f4:e3:d4:8f:ab:98:f7:6f:8f:fc:7a:30:d9:
                    aa:47:c8:3f:72:77:9e:da:eb:f1:34:07:e1:f8:a0:
                    0d:1d:be:02:32:df:de:a6:46:aa:b6:35:ae:f4:e6:
                    09:21:25:1d:2a:03:9c:0a:9f:9a:0c:7b:83:6c:e5:
                    4d:99:63:6b:0e:80:fe:db:20:29:44:9c:72:73:db:
                    0f:56:c8:d6:32:ba:71:5a:1c:a2:ef:45:09:28:a7:
                    b6:f1:1c:bd:88:b9:4b:fe:06:ce:c8:c4:91:a7:20:
                    11:54:8f:f5:d8:b7:a7:e6:7b:8e:c0:4a:32:ed:c9:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E5:78:E0:58:EC:F5:91:E6:19:77:F7:3F:1E:54:4A:CD:69:46:8A
            X509v3 Authority Key Identifier:
                keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:66:b7:10:29:c5:4b:72:4e:38:db:d4:92:73:96:84:48:64:
         0f:3a:2a:37:1d:e4:06:4e:d1:e6:14:54:eb:32:ec:31:9e:36:
         64:4b:28:bb:cd:02:16:f2:46:38:55:e8:8a:8e:73:28:82:51:
         57:dc:45:7a:63:08:24:98:4a:a1:04:a2:1c:41:94:61:83:19:
         85:0e:0f:5c:c8:b4:5b:43:21:43:8f:53:2d:09:88:5a:c6:8f:
         a8:9c:fb:c8:36:12:4a:ea:a2:03:00:55:0d:a2:d6:79:94:19:
         1d:6b:9f:c0:7c:a4:aa:dd:38:88:5b:42:4f:19:af:dd:5e:c5:
         dc:9c:66:96:53:5d:d3:c4:b5:6c:22:69:ce:3b:82:b8:54:3f:
         2f:75:db:65:9b:13:0f:ce:fb:fb:fb:c2:9f:76:15:71:5c:14:
         1e:b5:04:ff:10:11:f0:31:b3:d0:7f:df:51:7c:d6:17:49:89:
         d3:28:c7:a2:32:9b:4d:da:86:ca:08:16:94:86:3a:a8:35:9c:
         ac:53:3b:e8:7d:32:a5:85:3a:aa:01:85:b4:e4:72:fa:f2:d9:
         a0:a8:22:4d:a5:6b:96:2d:1c:68:36:0c:0b:ee:2c:2a:04:7f:
         56:d9:5c:85:04:16:d9:4e:9d:f8:5e:54:1c:1d:52:54:65:80:
         5c:6c:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:01 2026 by rpki-client