Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File:                     MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier:          db0EDrgzmNiipEboCi2mzhM/OCKl9rIF3bq1ElYqm1M=
Subject key identifier:   18:3E:9B:BD:65:10:CB:5E:DF:3B:42:41:47:27:56:00:86:6A:80:A4
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer:       /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number:          FF
Signing time:             Mon 02 Mar 2026 01:47:40 +0000
Manifest this update:     Mon 02 Mar 2026 01:47:38 +0000
Manifest next update:     Mon 09 Mar 2026 01:47:38 +0000
Files and hashes:         1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: jUe4A6z75HuoeZ59jwhJBeH7GgMoAZysTppMHQ8+OsQ=)
                          2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
        Validity
            Not Before: Mar  2 01:47:38 2026 GMT
            Not After : Mar  9 01:47:38 2026 GMT
        Subject: CN=69a4ec3b-f898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8e:44:24:5c:a2:43:a8:63:57:13:9d:dd:c4:
                    6e:eb:bf:1a:cb:72:76:27:72:8e:46:51:36:c2:06:
                    fe:ec:9f:bf:85:9d:d9:8b:40:45:ca:b4:ef:75:d2:
                    30:37:71:08:47:00:9c:df:73:64:c1:d1:7b:22:aa:
                    63:51:54:05:2e:69:f3:89:66:68:a1:0a:29:76:49:
                    05:df:fd:86:de:61:7d:53:aa:fe:67:4b:5a:8f:b8:
                    ee:7f:42:6c:b0:8a:08:8b:ed:34:d3:d0:06:99:c7:
                    59:fd:37:bc:6f:ac:76:21:bd:95:d6:4f:27:d6:91:
                    09:8a:65:43:e2:ee:7f:60:91:af:3a:a9:7d:36:ec:
                    7f:76:81:f5:bf:a0:63:26:29:66:55:54:96:30:84:
                    f9:0c:4d:2c:64:38:34:95:ea:7e:fd:b1:78:75:d2:
                    8b:d8:a6:c5:0a:05:7b:61:a6:d1:ab:e3:79:51:98:
                    51:9e:2f:bb:71:93:58:1f:fb:b5:91:3e:9c:b9:13:
                    55:56:29:3a:54:b0:92:ff:0b:68:fa:f5:c7:e3:cf:
                    d1:16:b5:08:14:48:e2:c7:6c:61:82:97:73:64:9e:
                    7b:99:df:31:ac:2a:9b:7c:6c:81:fd:25:ac:1f:d5:
                    1f:a9:6c:5a:7a:c2:c3:0f:c8:96:ff:8f:45:3b:4a:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3E:9B:BD:65:10:CB:5E:DF:3B:42:41:47:27:56:00:86:6A:80:A4
            X509v3 Authority Key Identifier:
                keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:d8:dc:a4:f9:29:1e:9e:06:1c:84:57:d5:16:28:d7:05:
         51:4f:b3:06:cb:cd:08:e0:dc:fe:7d:89:cd:fc:37:b0:09:ca:
         b0:bd:f4:c2:9f:dd:a1:09:60:2c:90:1e:27:ea:cf:53:85:6e:
         e0:1b:04:84:f5:f5:85:80:12:47:d9:27:5e:f1:7d:2e:a5:22:
         94:cf:e0:8e:d2:cc:c3:28:3d:8e:38:6c:7a:64:be:91:c8:21:
         81:66:22:f1:7e:dc:7e:74:fb:1c:25:be:6b:4e:78:7a:60:cc:
         d2:10:9b:59:20:71:b9:c9:16:17:71:55:d4:22:1f:50:a9:62:
         a0:d5:27:b5:1b:06:7f:44:f4:e6:b3:68:ad:2e:80:6b:67:48:
         21:83:11:ca:5c:52:69:a8:f7:71:bf:a0:d2:f2:86:f9:af:15:
         ee:74:19:e8:2e:b8:d1:98:24:f3:ee:dd:e6:a5:63:50:45:44:
         e9:84:61:77:11:46:7d:be:79:13:cc:eb:18:92:17:6b:73:13:
         dc:b6:e1:f6:ab:d0:1c:96:64:81:f4:37:14:55:55:46:36:11:
         09:e8:4f:5b:54:74:da:64:31:ef:db:39:7c:03:51:61:7b:68:
         2d:75:7b:fa:b4:a4:b8:7f:be:40:48:44:af:8f:88:b0:7d:bc:
         b9:e5:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:18 2026 by rpki-client