Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File:                     nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier:          tDSlCeotaAnaMxuLeaYaTRv4QECmxC+ak85+lhapruY=
Subject key identifier:   A9:D1:B7:69:C6:FF:E3:71:D8:51:B1:D9:46:A5:BB:AE:79:DB:44:74
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer:       /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number:          D5
Signing time:             Sun 01 Mar 2026 07:53:06 +0000
Manifest this update:     Sun 01 Mar 2026 07:53:06 +0000
Manifest next update:     Sun 08 Mar 2026 07:53:06 +0000
Files and hashes:         1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: TBeek7RG/4XiCH19AM1DePaa0O8IHOeti28tblmpbok=)
                          2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: 759eVfeplnxkWNaLr3cFwL2y/eV2CJBpdnC5ec+BIG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
                          rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
        Validity
            Not Before: Mar  1 07:53:06 2026 GMT
            Not After : Mar  8 07:53:06 2026 GMT
        Subject: CN=69a3f062-c563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:36:69:33:86:ab:a8:75:c6:ad:df:15:ce:
                    d9:7a:30:13:43:b2:25:8e:35:01:94:ee:e6:3e:83:
                    90:31:54:0d:03:d3:56:1f:40:1c:bd:b6:85:03:31:
                    48:fb:32:a8:bc:44:f0:f7:d2:57:d3:ce:28:4b:46:
                    bb:90:50:3e:39:44:20:fd:c1:a4:97:70:07:9c:54:
                    cb:27:3b:22:cf:20:74:52:c6:85:d1:4a:ba:a3:a3:
                    f0:a0:b1:9a:05:76:f7:a8:db:ec:88:cf:15:b2:3b:
                    72:4e:f5:a7:79:a3:42:91:b0:29:4b:8d:bd:27:e9:
                    62:da:af:0c:e4:d5:cb:c9:ac:87:80:b0:f0:d4:cf:
                    44:d2:f9:a9:ff:fb:55:30:cf:29:01:10:3a:ea:a1:
                    3a:95:0b:26:60:0b:5c:70:9c:a6:f0:6c:d8:a1:7e:
                    16:10:cf:37:4f:12:53:ef:b6:e6:ba:cd:f2:41:9a:
                    cb:ad:7c:9a:88:88:03:3c:df:81:9f:d0:ae:3c:ff:
                    cd:ba:07:87:c9:7c:b7:dd:15:41:d9:73:cd:df:bb:
                    91:3a:ac:65:11:ce:b9:cf:d5:e0:69:80:9f:91:16:
                    a0:43:30:ef:43:ca:38:31:8a:1d:99:7e:5c:51:8c:
                    0b:7e:20:3b:ed:6e:51:78:f9:cf:34:5e:62:37:20:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D1:B7:69:C6:FF:E3:71:D8:51:B1:D9:46:A5:BB:AE:79:DB:44:74
            X509v3 Authority Key Identifier:
                keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:41:6d:f0:de:8c:da:ad:04:42:1b:55:34:8a:35:c3:67:49:
         a2:41:8c:f4:d8:86:de:05:2a:fb:fc:95:55:bd:00:13:6d:9a:
         23:00:a5:75:5d:5a:a0:cd:d1:f3:68:1a:15:99:16:14:42:4f:
         34:e6:2a:72:38:be:ed:05:33:00:53:2b:2b:d7:4f:90:db:b8:
         5e:91:35:9c:23:e8:c1:37:1e:bf:6a:4f:55:d0:3c:32:78:5b:
         1b:53:50:6b:b7:68:f4:5f:3c:13:0b:cf:fa:cb:27:02:81:c7:
         72:42:b2:cc:01:a8:dd:cf:91:dd:b9:0f:c1:6f:72:9e:43:a1:
         07:bd:02:11:4a:91:b9:f0:d4:46:55:26:34:6d:04:3a:52:22:
         a8:6b:05:0c:df:20:71:83:a3:2f:de:a8:20:cb:cf:81:2c:81:
         86:87:f2:5e:a1:4e:e9:e6:23:4e:70:23:15:ef:b8:2d:32:12:
         bd:b2:94:1f:a9:c8:61:ae:df:68:f2:67:52:21:58:51:98:6e:
         15:60:ed:32:57:35:d3:dd:13:52:ce:d8:52:37:5c:bc:70:ba:
         78:09:cd:36:25:c2:10:06:46:d4:10:41:52:96:76:0f:b9:89:
         76:34:e9:ce:3b:89:5c:81:03:8f:f9:1b:b4:c6:05:d8:92:5c:
         d0:bb:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:18 2026 by rpki-client