Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
File:                     fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json)
Hash identifier:          Dg2hqmYAoo+14xDLjOya/UORXOpZMe1FHS0r0uLHyFE=
Subject key identifier:   86:AA:30:4A:89:DF:34:1D:4E:24:89:4E:0D:D6:D6:88:0A:86:A0:98
Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20
Certificate issuer:       /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
Manifest number:          0997
Signing time:             Sat 28 Feb 2026 21:37:43 +0000
Manifest this update:     Sat 28 Feb 2026 21:37:42 +0000
Manifest next update:     Sat 07 Mar 2026 21:37:42 +0000
Files and hashes:         1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: hhKgRH6K0Yw1jd6vRydRJOvW9x2MsWICS0R2okJsqjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl
                          rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
        Validity
            Not Before: Feb 28 21:37:42 2026 GMT
            Not After : Mar  7 21:37:42 2026 GMT
        Subject: CN=69a36027-7147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:84:a5:60:da:eb:3b:94:63:01:23:12:39:
                    68:02:e2:6e:de:3e:5b:c4:b7:c3:aa:de:59:e3:63:
                    e1:8e:9e:be:94:e7:a7:8a:1f:15:aa:7e:a4:a6:0a:
                    33:29:0b:f9:c0:6b:66:92:35:ed:ba:7b:4f:35:ce:
                    85:6f:dd:fa:0d:80:c4:f0:4d:a6:81:84:7c:34:c3:
                    74:79:a4:3c:99:96:ac:52:c6:8d:2d:88:1c:3b:83:
                    8b:0e:c8:c6:32:e0:9b:d8:ed:53:07:b8:4a:e0:7f:
                    33:60:cc:a6:15:7e:df:e7:78:8a:6f:0f:b1:d0:c0:
                    08:11:78:ad:be:56:2e:bc:d4:f0:9a:73:c0:84:d9:
                    a7:9c:1e:ef:3f:84:f5:99:78:5c:95:db:a9:5f:c7:
                    0b:c0:cb:6d:dd:38:08:83:49:4b:af:31:68:e2:ab:
                    78:e6:25:41:78:45:8a:14:c5:98:b1:6f:b7:ba:5d:
                    c0:fd:1c:7d:10:3c:f8:13:d4:5f:66:6a:d2:fe:bb:
                    b8:5a:9b:75:29:3e:de:4f:9d:53:63:6c:41:8c:62:
                    05:0d:62:db:8c:6b:92:fb:d9:f2:be:9f:30:21:c6:
                    d6:e3:c7:70:8a:5a:07:de:ba:3f:8d:05:7b:bc:2c:
                    f7:23:af:ef:df:a7:b4:ae:9d:b3:c4:60:c0:76:98:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:30:4A:89:DF:34:1D:4E:24:89:4E:0D:D6:D6:88:0A:86:A0:98
            X509v3 Authority Key Identifier:
                keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:98:93:69:78:d3:05:3d:ab:89:2b:18:ad:6c:8f:4e:d2:20:
         1b:12:36:08:08:9c:59:cd:ed:00:aa:5f:8b:f5:f8:ff:36:01:
         24:67:02:93:08:d1:30:70:6f:d0:e8:9e:16:de:1f:2d:85:d0:
         99:27:17:41:44:39:cd:7c:46:f1:c0:ae:d7:10:c5:aa:14:1f:
         ad:c0:50:56:61:e9:01:ec:dc:c3:bd:ff:0f:a5:cf:41:47:7c:
         77:9b:dd:2d:b5:0d:b4:ac:48:79:97:e5:97:a2:ee:da:35:c3:
         d8:88:d9:53:7d:5a:4e:77:4f:40:aa:41:ff:89:80:b0:ea:f0:
         5a:b2:fc:d1:d3:e8:a3:22:8c:a0:9a:d8:8a:32:dc:bc:10:be:
         59:8a:4e:31:af:5c:4e:37:10:f4:95:80:30:ee:94:6f:95:ca:
         29:e2:5c:35:75:87:bf:24:c3:44:32:1e:04:54:c7:c8:55:99:
         4b:20:f4:f7:2c:1a:43:19:3c:78:50:c7:b7:b0:9f:68:38:12:
         cc:25:52:9f:f9:59:ad:dc:77:ca:73:a3:c4:9c:e7:bf:b6:e0:
         ba:1d:31:5e:9b:cd:5d:ac:07:df:04:07:91:4f:7f:92:6d:f0:
         36:cd:3f:72:d2:66:9d:5c:30:b8:b5:2c:36:98:d0:72:03:ab:
         7f:1a:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:42 2026 by rpki-client