Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File:                     UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier:          CjK06tLXIselVIm0sixAfvxMFgBiyV+hPyAl6RUrLZA=
Subject key identifier:   DB:C2:9F:FF:CC:CF:84:3F:1D:2D:9F:C1:54:97:AA:EA:22:4A:9A:F2
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       2552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number:          24D0
Signing time:             Sat 28 Feb 2026 15:48:26 +0000
Manifest this update:     Sat 28 Feb 2026 15:48:25 +0000
Manifest next update:     Sat 07 Mar 2026 15:48:25 +0000
Files and hashes:         1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: Z1MS6CK5PZ3kyOz5iKehvLzcZtJno/UITAog7jiXcA0=)
                          2: 59B3485028C111E7A885571AC4F9AE02.roa (hash: MyX6SM4sHZHxsdiUbFwM+v8VFzTqS7OCLLsMP0uCrow=)
                          3: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: wpRpc+8U0njhNHbGwBjOo+RuZgkwEeZa9Pqu3yMunD4=)
                          4: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: P7O96Yfngs36i1Yso6tRUdR0UTcCnWvkqMzJTMS0hUc=)
                          5: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: FnsiPBdxFnP5LQukQVG3d42mA5484m2AVmj3oV2t2KA=)
                          6: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: 36bNWyq826on2XLU7og/PScQxw0sLluCdj62sCimk1k=)
                          7: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: 1/+DL1PoqH8yBHyNvZhkg16rUz6sOO89hqHUzOVSkA4=)
                          8: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: +WC2UXiXRAqIzHn7ONEYWXHBgmbJbPnjPVSGS0s7/Ek=)
                          9: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: VUsFSPTS+fH+FbOaolmzdGMNrxq1DeJRsMnTavDc/kM=)
                          10: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: 3InFcZXcKxf33f9FWszWBOSOPJdwVMTqcXaCFEAtgos=)
                          11: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: RyOHGCTj0hywUpSfB0LbQFD/WnXHLiXqG6hMldKxBrM=)
                          12: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: T2OA6la6kiD43UxKezGsuNIwVX4A5ubar9PjrFa2VdE=)
                          13: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: hn226uuDr+Sb6ocn2sePSMCB9luhKNckDxMjXkyTZ+s=)
                          14: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: uGRoaBEpGo4yAmtbgi1VOwtzxczgF1r1S032AP+3DGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9554 (0x2552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Feb 28 15:48:25 2026 GMT
            Not After : Mar  7 15:48:25 2026 GMT
        Subject: CN=69a30e4a-4160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:43:9b:ae:06:60:56:a1:ba:83:75:30:95:b1:
                    b8:39:66:38:cb:03:7f:63:43:98:a3:af:a4:72:fe:
                    3f:94:f9:41:3d:31:8d:18:cb:ef:dd:9a:9b:7d:ff:
                    85:f2:e9:01:60:fc:17:8e:3d:96:7f:3e:45:e2:21:
                    9f:80:29:f4:66:7c:57:4f:dc:78:23:64:f0:01:7c:
                    fe:e8:95:4c:8c:29:d4:85:b5:94:55:de:84:0f:27:
                    b0:58:0a:0a:11:4e:09:6f:0c:f5:ce:20:2e:b5:72:
                    ad:5a:e3:3d:f1:03:1a:78:5f:ee:45:ec:aa:df:9a:
                    9f:5d:1a:b1:e8:72:b9:15:62:8e:68:93:e1:96:57:
                    ea:7b:35:c5:c1:14:f3:51:f9:d8:ab:3e:8b:04:13:
                    7e:99:44:df:84:66:43:7a:fe:a5:fd:55:48:4b:95:
                    68:63:bf:f4:f7:94:2a:b9:7d:ae:2a:59:7b:ab:3d:
                    84:75:c2:0c:ed:c4:ba:6d:12:8f:0f:c1:55:dd:61:
                    21:90:c5:78:89:b2:f6:5d:8e:a3:f4:6f:37:ad:e9:
                    12:bc:e7:90:a5:43:64:ed:30:7c:ce:a5:8f:ea:70:
                    fa:ee:3a:56:4c:d3:17:22:c8:7f:5a:cc:14:fd:92:
                    fc:00:fd:45:6d:3d:3e:25:a8:ed:a6:d5:96:a4:39:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:9F:FF:CC:CF:84:3F:1D:2D:9F:C1:54:97:AA:EA:22:4A:9A:F2
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:10:79:e4:4d:0e:4f:3b:8f:a7:4b:1a:1c:61:72:c5:c2:
         24:8c:62:ce:4c:59:cb:2a:9c:73:c4:49:65:b9:b4:ca:c9:41:
         78:74:7b:c0:2e:1b:7a:c7:a8:05:60:4a:64:4a:92:5d:45:87:
         ff:6c:40:87:fd:41:d1:c2:30:d2:30:cd:93:ad:d5:90:fd:c5:
         13:bd:16:52:9a:e9:d8:4e:1a:1c:f1:27:d5:6c:90:d3:8b:8b:
         35:1d:90:ad:77:9a:15:36:d3:7d:98:4d:00:1f:c9:3a:47:2f:
         2e:9b:d6:39:ba:b8:ab:fa:2b:96:c1:7b:f5:6b:5a:21:a8:38:
         12:02:35:4a:48:3e:6f:d4:40:72:4b:57:6f:aa:00:02:0d:17:
         a5:1b:99:d8:89:76:a1:b9:9d:ed:21:a7:2d:ed:4d:f8:f8:08:
         65:b6:a2:dd:9f:a8:8d:ae:73:fe:2a:d8:fb:d0:9c:0d:d4:59:
         3a:95:33:8b:94:62:76:3a:d4:43:d2:c9:00:d7:88:1f:c5:6a:
         8b:f3:cc:37:d0:e2:a1:69:e6:d1:ae:05:4d:06:7c:3d:bf:d0:
         d5:61:3d:82:ab:6e:2b:1a:b6:55:e3:4e:a5:a7:50:89:d3:d3:
         27:b5:99:29:39:6f:86:aa:14:d7:2c:4e:c1:0f:55:7a:94:55:
         aa:4e:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:32 2026 by rpki-client