Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File:                     -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier:          ApRecOwkubSo/ubGJf5BRm85dSYSd4yV3AxxP6+uC5c=
Subject key identifier:   A2:15:5C:5B:EC:20:32:2A:3D:AE:4B:EB:6C:BF:37:E9:AC:9C:4F:AC
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer:       /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number:          01FA
Signing time:             Sun 01 Mar 2026 03:54:04 +0000
Manifest this update:     Sun 01 Mar 2026 03:54:04 +0000
Manifest next update:     Sun 08 Mar 2026 03:54:04 +0000
Files and hashes:         1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: ibgxb0mZ4DkcPGGPEdN8+ngsqeM0uXj0Vxvbii3mEFY=)
                          2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
                          rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
        Validity
            Not Before: Mar  1 03:54:04 2026 GMT
            Not After : Mar  8 03:54:04 2026 GMT
        Subject: CN=69a3b85c-b23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:62:04:ff:3e:fa:0d:bc:4b:35:d3:76:09:
                    44:96:ff:db:85:74:f2:4c:bf:97:80:60:eb:bd:15:
                    6b:9d:01:3d:5e:e2:0a:cc:de:db:07:4c:41:39:5a:
                    43:08:cf:5e:45:f6:c8:7f:bb:23:f1:5a:d1:9b:df:
                    15:6f:fa:aa:33:d6:a9:ac:8f:c2:fe:bd:ce:57:24:
                    af:3f:d0:ec:d8:2e:83:b6:a4:c0:b8:dc:53:7a:e1:
                    d4:0a:12:36:a3:8d:65:c3:e7:b8:ef:cc:03:7f:4d:
                    59:34:0c:11:8f:0c:40:29:4c:ba:17:44:f8:2c:42:
                    92:9b:fe:15:d8:c0:98:dc:f0:1d:58:69:56:28:bf:
                    bf:04:5e:10:f8:d3:03:31:0a:0c:df:08:e4:68:63:
                    7e:80:d9:01:b2:38:87:33:02:89:b3:99:6b:78:c3:
                    e2:39:77:16:c9:5a:fb:9b:99:e8:47:66:df:36:ef:
                    09:6b:86:52:62:e3:46:6d:51:14:c7:dc:36:40:1a:
                    09:32:b8:3b:95:48:5d:18:a8:fd:ac:d9:15:4a:d1:
                    7a:b6:b2:83:13:19:5a:fa:a7:6a:43:63:de:97:bf:
                    a4:12:db:b5:91:7a:fd:3a:e1:ce:73:f9:c7:0d:83:
                    dc:64:ff:48:64:47:78:8f:e3:28:5a:c2:86:ab:6d:
                    15:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:5C:5B:EC:20:32:2A:3D:AE:4B:EB:6C:BF:37:E9:AC:9C:4F:AC
            X509v3 Authority Key Identifier:
                keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9f:ce:17:eb:a9:c2:4d:c3:81:e0:08:73:92:ca:6f:0a:87:
         51:26:d2:51:3b:f1:bd:0e:36:2a:a7:4b:1b:e4:7c:f4:45:ce:
         fc:ee:c9:26:bf:c8:38:68:6d:55:44:14:10:29:f1:cd:a0:e5:
         cf:95:db:2d:63:03:95:d8:e2:91:e1:49:74:99:4e:ac:b8:9e:
         d6:86:ca:cc:fa:8a:9f:a9:1e:c8:4d:d9:5a:0a:ee:fa:b5:2e:
         e3:8c:1b:b8:6a:7d:d1:ef:ae:11:d7:ad:8a:db:cb:37:88:79:
         4e:e2:3a:a8:1c:af:2f:e1:c8:04:ee:c4:1b:f4:24:ad:8e:22:
         15:66:6c:80:1d:54:c6:a2:22:ae:7a:94:2d:06:5b:5f:33:89:
         62:76:99:f6:be:b7:4e:eb:c9:f5:20:11:75:0d:8b:f1:b8:e7:
         f3:e7:41:03:c3:b7:9d:9a:07:b0:bc:1a:a7:01:0b:f1:63:58:
         28:ca:48:30:db:50:e1:e7:53:f9:b1:a9:13:6f:22:da:6b:c7:
         a7:18:e5:1d:6a:be:63:1f:53:37:f5:ba:05:74:45:be:a2:c1:
         57:f6:f7:3c:4f:61:36:db:78:41:cd:b9:ec:0e:d7:e7:00:36:
         11:f9:87:a0:6b:23:bb:37:58:e9:91:13:05:7b:eb:59:e3:ea:
         62:bb:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:48 2026 by rpki-client