Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File:                     4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier:          N6kmZxREjv3m7XgZyE7WrDW7Md/C8ICRwUIEHytjpVE=
Subject key identifier:   15:96:78:78:61:14:92:51:B8:AF:1A:50:10:F8:7E:23:F9:DA:B4:BA
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer:       /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial:       2297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number:          2284
Signing time:             Mon 02 Mar 2026 03:11:16 +0000
Manifest this update:     Mon 02 Mar 2026 03:11:12 +0000
Manifest next update:     Mon 09 Mar 2026 03:11:12 +0000
Files and hashes:         1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: mAfgBfHu4md8iyiwVFItZp9FPSuMRhULO7KIq2bd4I8=)
                          2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8855 (0x2297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
        Validity
            Not Before: Mar  2 03:11:12 2026 GMT
            Not After : Mar  9 03:11:12 2026 GMT
        Subject: CN=69a4ffd3-dd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:a4:9b:27:51:cc:1d:f9:b9:6e:f7:49:73:
                    13:38:b7:f7:90:58:fd:a6:8c:64:d6:f7:21:b7:80:
                    41:91:63:64:45:f4:0d:eb:23:a3:c2:5b:2d:dd:fc:
                    14:4e:97:47:52:e0:c6:1d:b9:90:04:a0:70:6e:c3:
                    53:5a:c8:e0:d0:7e:40:e6:93:ce:80:a0:cb:58:86:
                    d8:83:ea:a9:1d:c7:9a:6e:c3:6c:d3:68:ea:f2:0f:
                    16:23:47:80:c3:7b:f1:11:30:f9:11:c7:fe:fd:3b:
                    34:a2:b8:b2:14:e5:76:b7:61:ee:c7:fb:53:52:b4:
                    00:01:72:6d:e2:b4:a6:17:e8:3d:fa:e3:3c:e7:6a:
                    10:7e:52:5a:4a:b4:c1:36:d5:b5:69:88:2a:4f:77:
                    b2:bc:48:8d:f3:0e:93:ef:f7:3f:49:78:45:4a:4b:
                    21:11:05:be:2d:70:f9:bd:da:4a:b2:e8:56:dd:18:
                    c3:cc:4a:87:c3:47:4e:4d:1a:0c:af:1f:86:15:e8:
                    e3:3d:5e:6e:9f:f5:a1:01:97:87:d7:42:40:6b:fc:
                    7e:81:db:50:67:78:68:fa:55:26:3c:88:52:ff:37:
                    9a:d3:bb:79:a8:38:2f:ba:26:1a:fa:62:0d:e0:b7:
                    de:53:f1:b9:ac:d7:41:28:99:25:8c:e7:77:55:98:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:78:78:61:14:92:51:B8:AF:1A:50:10:F8:7E:23:F9:DA:B4:BA
            X509v3 Authority Key Identifier:
                keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:68:b3:9c:df:c3:f0:48:16:17:48:53:95:f8:ac:18:52:32:
         1d:37:d6:b9:8e:17:96:69:6e:30:aa:4c:49:d7:bc:f9:16:a1:
         66:c2:d6:c4:06:6b:d0:a2:2e:b0:b1:de:e8:6e:4d:3c:42:e3:
         44:d5:b2:26:6e:f4:c8:a0:07:43:f1:46:5e:50:58:99:18:ee:
         14:a4:6d:50:95:0b:12:01:b0:cb:c2:da:1e:5b:07:ba:bc:67:
         0a:73:8b:77:6a:9d:dd:36:01:48:d8:8d:8a:44:57:b7:ec:30:
         29:dd:2b:e8:ea:9e:f0:85:ad:43:03:73:db:ce:1f:e6:f9:87:
         cd:aa:40:45:cf:96:d3:c1:81:9f:7c:63:70:fb:b3:87:97:7c:
         3e:ae:f9:da:50:45:d7:98:e6:23:cf:36:79:df:8a:b9:04:08:
         4c:85:e1:74:42:ed:a8:00:cc:ab:67:9d:6e:59:40:2a:eb:7d:
         ff:e2:92:77:33:20:79:1c:7f:0f:5b:d5:84:21:b3:70:60:b6:
         9b:b7:fa:63:d3:cc:0d:f4:7a:ea:9a:63:75:93:48:f5:ee:22:
         42:40:cc:37:65:2e:79:f5:3b:74:16:24:11:02:f4:ec:6c:d8:
         5d:8a:dc:30:a2:0f:fb:0e:54:1a:37:c2:e9:15:27:03:4b:0c:
         0b:13:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:16 2026 by rpki-client