Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
File:                     CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json)
Hash identifier:          8MPcQq3WdFgZo6ugaf2kVUH69a8Xp+5uPT9sq0u3fiQ=
Subject key identifier:   6D:AA:42:5A:D2:01:8B:53:ED:68:1A:A9:80:8D:BA:6A:FE:16:CF:C2
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Certificate issuer:       /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial:       16C2
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
Manifest number:          16B2
Signing time:             Mon 02 Mar 2026 00:13:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:12:59 +0000
Manifest next update:     Mon 09 Mar 2026 00:12:59 +0000
Files and hashes:         1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: eKnFE0GvSsNuEyMmMi6McPUdagnWOCNtKXWqVI/uYQg=)
                          2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: vvZS0ECU2CMPi9BX1RvoJ53ycBpah2sWmUSMu5XAMO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
                          rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5826 (0x16c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
        Validity
            Not Before: Mar  2 00:12:59 2026 GMT
            Not After : Mar  9 00:12:59 2026 GMT
        Subject: CN=69a4d60c-4d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:eb:0f:7d:a3:c0:c7:f3:ef:ba:fc:6e:d4:
                    f8:7f:aa:25:f2:30:61:45:0d:3b:ce:80:9c:7e:de:
                    19:bf:da:59:6d:5e:94:96:0c:32:7e:cc:a8:15:d9:
                    47:34:57:be:04:56:6c:d5:0f:2a:32:ea:ca:46:51:
                    8b:1c:54:1c:2e:c8:a2:03:44:6e:32:6c:36:28:c0:
                    79:0a:5f:55:5f:4d:05:ca:9c:46:a5:4e:8e:07:3d:
                    00:5c:02:b4:f2:c5:89:38:a8:ff:59:8f:ec:f7:76:
                    3f:31:ce:d2:77:94:05:75:1f:d9:99:0f:3d:0d:67:
                    11:44:6c:58:f0:a9:85:91:92:2e:b2:fc:b0:52:8a:
                    9a:38:a7:be:55:b2:29:a8:6e:c3:39:7a:b6:11:c9:
                    a2:8b:11:2f:9d:30:cc:3a:8f:77:39:58:34:33:58:
                    db:9c:3b:25:3e:d5:69:0f:20:0f:b8:b2:83:33:2d:
                    c0:bd:2a:a4:cd:01:36:30:0e:f6:f3:a1:b9:b2:75:
                    69:0f:56:aa:3a:a8:df:3c:42:ce:d1:b0:49:f6:a3:
                    0d:b5:01:fd:c4:1c:09:e8:fe:f0:9d:ee:1e:ae:e0:
                    88:c5:df:e8:5e:48:d6:68:fc:7a:b0:f0:aa:bd:02:
                    eb:7c:55:6e:f9:4e:db:ab:03:10:44:a2:48:6c:84:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AA:42:5A:D2:01:8B:53:ED:68:1A:A9:80:8D:BA:6A:FE:16:CF:C2
            X509v3 Authority Key Identifier:
                keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:31:74:ab:c2:5f:4a:60:ab:0b:41:76:f4:80:64:d5:30:7d:
         9e:04:d3:95:b0:47:1a:a9:81:93:92:32:8e:e6:04:3e:b2:08:
         8f:fb:ef:25:c6:ef:d0:3b:f5:23:5b:e6:4e:b0:ff:28:a3:c2:
         d4:a7:94:b1:be:2a:ae:af:a8:a4:56:44:f5:58:06:82:32:53:
         88:6f:3a:8c:4b:de:3a:e7:6d:a9:71:0c:5b:e2:c0:eb:d7:75:
         d0:bb:39:b0:65:35:2f:34:14:7a:d6:ee:c7:1d:14:bb:e4:43:
         2a:64:5f:67:e7:bc:6a:e4:ee:dc:c2:d4:87:22:4c:fb:bd:6b:
         6f:f8:99:5f:f3:e8:c5:8a:2a:1f:82:cb:e3:14:35:82:88:b8:
         3e:52:a5:7c:b8:37:ac:c0:de:c5:5c:9d:74:93:ef:60:c6:27:
         97:d8:39:47:ca:29:cd:a2:af:3b:40:bb:c7:eb:a1:29:59:4b:
         a4:8a:f1:7d:55:75:0b:db:88:44:d0:7b:2b:fb:53:62:1a:1d:
         96:2f:99:0b:a0:79:0a:ed:b1:da:34:5d:49:77:89:b3:38:1d:
         43:4a:1b:f6:93:ac:c9:51:c2:d2:28:c4:b5:6b:82:bd:cc:71:
         26:a6:96:82:81:22:f1:dc:b0:94:1d:c6:6d:d2:c6:9e:d9:2b:
         9f:07:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:34 2026 by rpki-client