Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
File:                     1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json)
Hash identifier:          UiDJF/aneOnw5fREXoTHeBqPXSrK4uF6Yolfd6bFURk=
Subject key identifier:   E3:CA:AF:F4:BB:E9:A4:47:2B:89:91:33:9B:7A:A1:BD:DA:18:EE:E3
Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
Certificate issuer:       /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Certificate serial:       02AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
Manifest number:          02A6
Signing time:             Sun 01 Mar 2026 02:22:15 +0000
Manifest this update:     Sun 01 Mar 2026 02:22:15 +0000
Manifest next update:     Sun 08 Mar 2026 02:22:15 +0000
Files and hashes:         1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: aD/y0DmKNAxauM46dSZOqEUtLRb3Ltdy6Kqu+Q1Fu2Y=)
                          2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: tcpEfQimbgGgCKxs43ap0j00HaFFUo0cjpbDGWWFteI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
                          rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
        Validity
            Not Before: Mar  1 02:22:15 2026 GMT
            Not After : Mar  8 02:22:15 2026 GMT
        Subject: CN=69a3a2d7-2611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:da:91:ea:77:bb:cb:68:21:94:54:70:c6:
                    f6:b4:48:5a:11:49:64:b6:cb:02:18:ce:d9:10:23:
                    1c:4d:55:ca:43:75:93:88:4f:df:b0:3c:a3:ff:a2:
                    02:af:1f:00:b7:16:b4:43:fc:a2:63:ad:1a:60:25:
                    a5:2a:43:42:d0:c5:6e:55:d5:a0:ef:e7:fc:1b:8d:
                    76:88:e6:7a:b9:8e:d2:fa:84:c6:ba:74:a1:07:b3:
                    cd:92:5b:b0:1e:2c:c6:8a:60:02:74:72:74:1e:d6:
                    50:28:25:32:bf:b8:15:16:49:ab:88:88:a9:86:67:
                    ac:a3:ee:11:b5:c9:8b:4a:a8:95:30:2e:5b:29:3d:
                    95:e3:43:9f:66:af:40:61:3a:49:a1:99:8e:75:b2:
                    ab:93:79:3e:7f:9a:15:2e:f6:7e:20:28:35:19:d6:
                    24:bc:a6:d0:b7:c0:f1:11:9b:81:30:92:c8:15:da:
                    f6:24:2b:28:ed:ae:7a:fd:f6:5d:63:94:de:4d:98:
                    22:36:bd:16:fb:fd:06:6f:14:e5:66:05:5d:17:b0:
                    02:7d:a2:7b:4e:4f:a0:2f:72:aa:58:ff:a3:c5:3a:
                    41:cd:65:17:c3:78:d6:ac:14:3d:7e:40:0a:97:6f:
                    ad:12:6b:1b:3c:ce:19:23:48:99:4a:d8:01:27:e3:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CA:AF:F4:BB:E9:A4:47:2B:89:91:33:9B:7A:A1:BD:DA:18:EE:E3
            X509v3 Authority Key Identifier:
                keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6e:e2:18:76:7e:8e:90:95:4b:67:47:76:b4:e7:d5:b7:84:
         3a:56:ac:3c:d4:a0:c0:11:1a:0c:4c:75:20:73:2f:20:27:69:
         3a:5e:9f:60:51:9c:4b:df:91:68:cd:fd:71:2b:50:e3:c7:d3:
         a9:a6:63:3f:48:5b:c6:1d:1d:64:c4:24:ac:ca:fa:8e:83:d7:
         42:4c:82:f3:1d:60:bd:21:f1:eb:28:cf:8e:6a:7e:d9:af:f5:
         a7:04:e8:dd:7b:f7:0d:40:49:60:c1:c8:7f:e7:26:c5:fb:6c:
         02:7f:96:7e:07:f6:4e:0d:1f:c3:41:c6:f2:ec:7f:90:01:c4:
         25:bd:97:cf:c8:9b:11:9f:b4:cb:a1:d8:a6:74:50:0c:21:b9:
         85:b8:97:37:d3:12:ca:c4:b9:a9:0b:c1:0b:dc:0e:b6:e0:03:
         9a:8e:a5:8b:3e:03:de:12:ba:6e:58:97:cd:50:ec:b0:c3:e9:
         92:65:28:5f:d4:b5:72:de:52:15:31:83:71:10:0d:31:52:6f:
         19:eb:f9:e3:ff:b9:63:e3:fa:6b:54:5d:ac:27:4d:03:88:4a:
         2c:96:32:df:b7:29:27:c1:21:ae:e9:e7:89:d7:b6:6e:24:c8:
         67:1c:7f:71:2c:40:1c:3f:e7:d6:16:63:ad:24:27:c2:86:20:
         c7:ca:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:31 2026 by rpki-client