Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File:                     3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier:          wCfv+10BXut1ptj6QSxtQb8KAgWx3Xy0gvPkII9iY1w=
Subject key identifier:   3E:65:4F:4E:77:B7:45:51:85:16:73:02:70:DF:A1:D9:FA:DA:90:1E
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer:       /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number:          0170
Signing time:             Mon 02 Mar 2026 01:47:29 +0000
Manifest this update:     Mon 02 Mar 2026 01:47:28 +0000
Manifest next update:     Mon 09 Mar 2026 01:47:28 +0000
Files and hashes:         1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: FfOlk5iaqUxRLHc7Fx7fipZupgR89FBQpqf1W0uSfRE=)
                          2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
        Validity
            Not Before: Mar  2 01:47:28 2026 GMT
            Not After : Mar  9 01:47:28 2026 GMT
        Subject: CN=69a4ec31-5336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:8f:3f:54:78:88:07:a8:9b:ce:1d:07:0b:
                    73:29:c7:0f:2f:52:37:47:10:29:f5:62:a8:94:9e:
                    d2:07:bc:8b:e6:8d:ed:48:c5:53:2e:9d:c4:a0:50:
                    9a:cd:0c:f3:b0:c1:59:50:ee:b5:b9:6e:e0:af:c4:
                    50:b1:33:f8:c6:80:a4:ac:f0:9d:c5:17:09:09:fa:
                    80:31:4d:1d:b9:30:82:19:71:14:a0:60:11:56:e9:
                    83:12:0f:7a:54:6e:c2:a0:19:b5:d3:ff:8b:3d:81:
                    82:44:fa:aa:41:28:b6:6e:2c:a1:e4:c8:ef:dd:c3:
                    bb:6a:20:8e:0e:dc:02:08:81:b9:8d:bc:ea:81:9d:
                    7e:33:86:01:03:11:81:b5:4c:48:22:f7:bf:de:f2:
                    63:1f:8b:c5:01:65:3c:2c:2b:40:ea:a5:57:b6:1f:
                    95:4d:42:b8:6b:d9:16:94:80:9f:cd:2d:98:af:f1:
                    33:87:08:c1:69:66:b4:ee:90:84:63:a4:fc:48:7f:
                    61:71:ca:5d:ae:e3:06:4b:58:d4:32:5f:66:53:9e:
                    49:b5:1d:0e:51:6a:6b:c0:39:61:3f:53:e9:5f:b9:
                    3f:0f:4f:d0:b4:f6:e8:41:e8:b9:0b:df:2d:52:02:
                    39:f6:39:ee:e8:3c:5a:06:2a:d3:68:48:66:5c:52:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:65:4F:4E:77:B7:45:51:85:16:73:02:70:DF:A1:D9:FA:DA:90:1E
            X509v3 Authority Key Identifier:
                keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:27:08:1d:bc:41:29:84:fa:67:76:99:23:5a:0a:45:29:
         60:46:84:f3:82:8b:36:42:21:c8:5f:c1:1c:f2:bf:34:c9:68:
         90:86:8b:b6:8c:f9:36:28:ac:bc:bf:3e:f6:98:83:c3:d8:7d:
         ed:b1:ae:db:fc:5b:c9:f6:39:65:07:5b:e7:3d:6a:13:9a:cc:
         ed:a3:53:e7:5d:d6:4a:ad:46:0f:c0:1a:a2:14:42:98:0e:49:
         a6:7b:d1:98:57:35:52:6f:5e:c9:9e:29:66:79:c3:4d:fc:e5:
         fe:96:c4:0d:03:0e:bd:d9:ff:9c:86:c2:cf:f2:7e:7a:65:32:
         32:da:fd:e5:bf:97:c3:cf:88:2e:6a:4f:46:d4:3d:eb:04:32:
         c7:20:50:1a:4e:36:82:ef:cb:68:16:b7:3e:b2:ff:7d:19:f6:
         3c:2f:6b:b0:fc:a5:55:0b:d9:ef:e5:9e:93:b5:8d:dd:92:2e:
         ab:74:5f:94:49:3f:64:ab:0b:93:c3:5f:58:cb:19:01:03:8d:
         d2:b0:25:d7:57:24:19:03:45:11:65:ac:cc:84:54:d9:8e:37:
         00:6e:37:c0:e3:ed:8c:53:49:44:ae:ea:a9:f7:b7:53:2e:21:
         bd:0f:11:ef:ca:40:bc:79:e9:ca:8d:95:67:c9:d4:71:50:77:
         ee:2a:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:35 2026 by rpki-client