Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
File:                     8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json)
Hash identifier:          t3RawdxjZvQ6CgIECWC2vT1wYQmL2SPx3F1CGyS8758=
Subject key identifier:   79:3F:E2:76:72:EF:3B:EC:C6:E3:1C:49:38:E0:F0:A6:D7:B3:FB:45
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Certificate issuer:       /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
Manifest number:          72
Signing time:             Sun 01 Mar 2026 09:14:50 +0000
Manifest this update:     Sun 01 Mar 2026 09:14:50 +0000
Manifest next update:     Sun 08 Mar 2026 09:14:50 +0000
Files and hashes:         1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: 3lwesPP13OxEyvhsIUwnrGnHvLqDvy7uornms5EvYcM=)
                          2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: YMyjkmwa0s+oHgNiPzl1vp1hM96x9H0bWCndFHgXHHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
                          rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
        Validity
            Not Before: Mar  1 09:14:50 2026 GMT
            Not After : Mar  8 09:14:50 2026 GMT
        Subject: CN=69a4038a-46de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:54:3a:e1:48:47:ab:63:2c:5c:21:c1:51:
                    15:3e:b5:82:77:f5:04:48:e3:e3:49:a9:07:7d:a4:
                    8e:e3:b1:05:55:b6:73:78:40:1d:15:e4:85:89:d7:
                    55:18:d2:c8:a2:57:4f:fb:39:0b:19:01:8a:1c:a0:
                    1f:9d:6c:69:0c:52:8a:35:c0:f6:f9:40:d1:5c:e9:
                    e7:0f:6f:cb:1d:4c:d5:5f:67:ca:54:28:e7:a4:3e:
                    62:18:3f:be:95:cb:49:88:8c:c0:c8:5e:0b:9b:fc:
                    c9:63:c1:39:a2:79:93:03:36:3d:98:c4:03:9c:cb:
                    8e:eb:01:a9:ce:81:67:90:6e:86:67:a4:1e:e7:96:
                    c6:0c:20:98:c2:b2:28:13:38:3e:7c:77:78:77:bf:
                    e4:97:08:ad:aa:3f:43:a1:b3:8c:38:e6:b3:c6:50:
                    ca:0d:09:35:82:27:d1:5c:6d:13:33:b4:8d:c3:19:
                    3f:82:5b:52:76:b4:52:6c:74:7a:1a:53:7a:74:8b:
                    18:ce:2a:43:59:47:8c:b4:67:21:ce:c3:28:fc:96:
                    23:3c:05:5b:cc:60:87:fc:69:e5:06:38:82:6d:dc:
                    ac:1a:5f:fe:d6:89:c4:65:d0:fd:de:65:ac:63:da:
                    39:bd:a1:0c:54:d6:e3:15:ef:fc:df:3e:97:36:dd:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:E2:76:72:EF:3B:EC:C6:E3:1C:49:38:E0:F0:A6:D7:B3:FB:45
            X509v3 Authority Key Identifier:
                keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:76:c2:21:95:fd:ea:b7:44:db:69:50:d4:00:3e:03:ce:
         69:1a:51:90:72:9a:8d:89:c1:f8:f2:ba:56:78:ef:c9:78:2d:
         e1:96:bd:4f:c3:34:6a:87:24:50:59:84:b8:a8:31:40:e4:8f:
         88:86:f2:f0:0f:61:1d:29:5e:db:94:70:43:9b:0e:5e:7c:88:
         12:02:ea:6d:70:bf:a8:a7:32:dd:6d:21:88:17:9a:55:ef:3f:
         b9:52:64:b2:a5:a6:0d:ec:5f:1e:05:9b:d4:7d:b3:3d:b4:45:
         5f:12:a4:7e:89:28:7c:b6:3b:ad:79:18:31:c9:a3:3f:c5:69:
         63:64:25:ec:dc:8f:4f:27:04:26:e7:06:ef:1b:35:db:de:7f:
         0f:2c:cf:0b:8b:f1:91:a8:95:df:71:34:64:1f:69:d1:67:14:
         6f:cb:6b:79:88:37:8d:ca:84:40:68:ca:6b:7e:52:ee:79:11:
         e3:2c:e8:48:83:70:99:4e:80:1c:1c:bf:97:7f:66:51:e1:06:
         90:7a:8c:ec:e4:81:bf:cb:0c:50:68:f2:86:9a:6a:07:b7:16:
         98:4f:91:ee:f2:99:57:df:77:b4:ae:d6:d5:74:51:a5:22:ef:
         8d:35:1b:12:d5:48:8f:fd:5a:69:c0:3d:14:a1:04:2e:27:9d:
         78:9f:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:08 2026 by rpki-client