Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File:                     _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier:          OIenywjcBclCWtHXT4Y4BvWYHJMzUHSkX+zHflQZFik=
Subject key identifier:   4E:68:7B:CC:F0:CE:95:A7:9E:AB:EB:A0:31:72:D9:63:BB:85:06:20
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer:       /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial:       06C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number:          06AE
Signing time:             Mon 02 Mar 2026 11:03:39 +0000
Manifest this update:     Mon 02 Mar 2026 11:03:39 +0000
Manifest next update:     Mon 09 Mar 2026 11:03:39 +0000
Files and hashes:         1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: FbSKcYZkv0iFOP4Yg09DASa0x31ZBP1oUsJhBbLFpKE=)
                          2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=)
                          3: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: X78yiDFZ0fXzQyDjcs0YvWLWmr93tmYzmKmek1pTunw=)
                          4: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=)
                          5: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=)
                          6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=)
                          7: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
                          rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734 (0x6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
        Validity
            Not Before: Mar  2 11:03:39 2026 GMT
            Not After : Mar  9 11:03:39 2026 GMT
        Subject: CN=69a56e8b-293d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:74:8b:21:6a:0f:5c:b6:28:86:20:6a:51:
                    31:37:40:e5:48:fd:57:e5:bd:5f:57:09:12:39:2c:
                    49:80:9b:a2:53:c9:de:c2:f8:0f:69:54:46:83:b5:
                    8a:17:86:8a:70:7d:9c:75:fe:42:f8:99:e3:e3:e6:
                    dd:c1:24:21:d7:05:29:3a:7a:74:52:c8:35:39:dc:
                    cc:a5:c6:20:8f:d5:5e:1b:e0:0d:70:c8:d6:07:2c:
                    b4:77:32:a3:75:83:87:ef:9b:bb:ef:30:b2:db:a1:
                    c3:7e:98:c3:48:c1:d7:94:d1:e5:63:81:94:35:34:
                    7b:37:bb:ea:91:56:4f:d3:6e:0a:b4:69:77:13:2b:
                    15:7e:21:6e:a4:d6:ed:82:6c:2a:38:f1:1d:a4:ea:
                    eb:40:2c:50:74:f1:8d:31:fe:da:b6:28:f4:66:03:
                    75:50:42:01:c2:db:df:cb:11:81:ea:53:2f:bb:cd:
                    41:95:70:4e:35:19:2f:f5:38:66:61:c7:7f:d9:48:
                    42:0a:e3:ec:36:cd:f1:be:a4:53:1e:90:dc:f3:4f:
                    d7:0c:1b:bd:ad:0d:5c:e2:8f:9d:7b:ae:5c:89:dc:
                    49:e5:fd:9d:72:cb:27:6d:da:f8:10:14:05:1c:d2:
                    26:a4:7e:fd:33:23:b7:9a:d8:c5:87:14:7d:44:50:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:68:7B:CC:F0:CE:95:A7:9E:AB:EB:A0:31:72:D9:63:BB:85:06:20
            X509v3 Authority Key Identifier:
                keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:c6:79:23:0a:87:a5:1b:4b:12:39:68:25:75:5a:be:ff:
         94:c8:53:7e:36:db:a3:c1:74:3c:b3:25:2d:c1:a0:f1:b3:66:
         42:b8:84:6d:6d:ae:2b:93:82:7e:d5:cd:b8:69:35:ae:d2:4c:
         64:c1:62:10:1a:87:15:6a:c7:3c:2c:3c:83:75:e6:0a:86:33:
         0c:f1:18:1c:c7:9c:82:fa:bf:c7:5f:86:05:77:36:ff:53:7d:
         fe:ef:e3:bd:68:70:1f:9f:dc:ad:ce:ca:a4:67:cf:19:02:98:
         f1:93:87:ba:3c:b3:f9:94:89:a6:9e:a8:ab:65:aa:2e:3e:94:
         a2:be:fe:4e:cf:b7:2a:31:de:93:c5:95:f1:07:73:ad:09:82:
         9c:a5:0c:b9:7a:b6:f7:72:cb:8c:ff:67:e1:8b:40:52:5f:0e:
         cb:cc:62:42:58:13:2d:4e:0b:80:50:6d:14:6c:56:65:14:2c:
         98:ff:85:86:b8:78:5b:04:5a:1e:f3:76:d0:4b:ba:07:8d:34:
         bd:22:11:24:95:74:1a:81:3b:2b:5e:d3:49:de:0a:04:e6:04:
         c5:9f:ee:58:f6:3f:c9:86:ee:a4:ea:5b:22:5d:aa:7a:4d:6e:
         6c:ff:ca:16:50:15:db:c6:62:5d:64:45:1f:db:4f:ef:76:45:
         72:88:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:01 2026 by rpki-client