Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File:                     hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier:          ceO6GtxDs09JeL+fbmv5zUDCYhEi+ERGFufdEEAQb7Y=
Subject key identifier:   A2:C5:AD:56:CC:9C:93:1A:AB:92:7C:9A:2E:3D:FF:4C:3D:F0:54:95
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer:       /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number:          EE
Signing time:             Sun 01 Mar 2026 07:33:32 +0000
Manifest this update:     Sun 01 Mar 2026 07:33:32 +0000
Manifest next update:     Sun 08 Mar 2026 07:33:32 +0000
Files and hashes:         1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: +0bwd6PWcKeFsRdHx6z4a500U4rIbPw40SmwGco4xbY=)
                          2: B2BB920001CE11F182556E3A746F56BC.roa (hash: hhS1qZPFli9Sal+nR4Ez6TDJwFXrsp00XArLdlOD0GM=)
                          3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: wDnirQsBVGr2+TbqtsfsrtJW3jBHzGAZ6azL84nOZGs=)
                          4: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: cRwLsutqQVxWT3ZK97DqtNM6mPPtYnnF8FmbKFlWINg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
                          rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
        Validity
            Not Before: Mar  1 07:33:32 2026 GMT
            Not After : Mar  8 07:33:32 2026 GMT
        Subject: CN=69a3ebcc-082e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:7f:b7:0d:27:6a:84:15:05:aa:16:f4:28:
                    f6:49:3f:46:ed:74:23:9a:68:0a:65:4a:8b:1c:f5:
                    a9:28:c2:a0:dd:0c:42:1c:2d:07:22:b9:bc:22:3e:
                    ee:6a:71:e5:00:be:5f:25:b5:82:54:fc:53:ca:ef:
                    65:9e:67:b7:12:81:03:e7:f9:4a:f3:c4:7a:cc:51:
                    22:84:15:26:d2:d1:31:86:8e:1e:bd:e4:65:3a:35:
                    79:34:3b:41:a2:37:b1:27:63:17:3e:c2:87:ca:5c:
                    e5:31:52:f2:02:03:ae:6d:e6:06:28:88:65:34:fb:
                    56:ed:85:82:0b:48:e2:a3:18:d3:18:f0:75:94:f9:
                    c1:0f:bb:10:4c:68:5d:86:cd:59:c9:3a:59:67:05:
                    e9:f9:6a:96:68:80:20:d4:a2:1f:50:ca:27:c9:5c:
                    58:eb:0b:35:a0:bd:33:f5:c1:86:4d:db:64:7d:79:
                    d9:16:04:7f:96:ec:cf:23:35:cc:16:50:22:c5:13:
                    84:67:84:2b:1e:f9:f0:a4:61:a8:68:d3:d0:f1:5e:
                    71:b5:10:1f:e6:4e:08:d4:8e:aa:fb:cf:85:4c:6e:
                    23:35:5b:dc:44:93:ad:7c:f0:65:94:3c:d9:cc:46:
                    b0:c4:44:5a:f0:ba:27:f5:82:a0:4c:b6:5e:01:49:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:AD:56:CC:9C:93:1A:AB:92:7C:9A:2E:3D:FF:4C:3D:F0:54:95
            X509v3 Authority Key Identifier:
                keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:26:66:05:70:ca:9a:80:c0:13:01:35:2b:77:1b:6a:05:c1:
         a4:34:85:d4:60:f5:79:97:66:33:c7:8f:50:66:90:25:30:3e:
         78:0b:1f:3b:c5:fb:0d:1b:65:1a:5d:8b:0b:41:6e:af:a4:8b:
         1c:51:53:7b:15:2b:1c:a6:97:65:f7:62:e5:83:83:cc:49:83:
         e9:28:ec:44:7b:b9:00:39:8f:0b:39:7b:f2:56:da:4d:f8:fd:
         72:26:a3:7a:dd:55:99:aa:ad:7b:fe:53:78:a2:0b:9a:5c:55:
         be:6e:9f:bf:f6:ef:a7:9a:62:28:94:25:1a:51:ca:69:4f:03:
         e2:a6:e4:90:b3:6e:d9:ac:a7:3f:a0:e7:d4:df:c2:c8:d3:35:
         54:33:93:f2:a4:cf:79:46:89:8e:41:36:24:0f:b4:ad:74:29:
         83:dc:d1:dc:ec:d7:b2:0b:f7:fb:9d:0f:68:fd:d5:a5:cc:5e:
         e4:1b:a1:53:92:f5:40:99:e4:ed:71:2a:35:80:b7:6d:4a:db:
         23:9f:ca:f3:36:4e:9b:18:21:2c:af:70:3b:42:2a:e0:45:eb:
         de:a8:c8:b7:b3:24:a7:c9:c5:47:e3:8d:a0:70:48:12:5a:84:
         c9:39:b2:ec:dc:29:ea:be:36:8b:d9:95:18:d4:55:4d:f7:10:
         ab:65:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:51 2026 by rpki-client