Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File:                     cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier:          WFIG74E6weNw2h5mLo2eylWXLAULpxzbqoHCQX0TxAE=
Subject key identifier:   F2:B7:43:A3:A6:E2:B7:F7:14:12:6F:3C:78:42:3B:48:65:8C:C7:93
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       2535
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number:          24EB
Signing time:             Mon 02 Mar 2026 00:10:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:10:48 +0000
Manifest next update:     Mon 09 Mar 2026 00:10:48 +0000
Files and hashes:         1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: Qx1+IBHF6kVMUIf6xxzMWiXj1COTtW5ilPve8ZdQ7DY=)
                          2: 027532E6385F11EAA879692AC4F9AE02.roa (hash: zmQ9A/lcBUnjJnBlCqaFgeAg9dsA076fd2DTYjhD0KY=)
                          3: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: ywt3dHYNiuHbaJVB62YniE7qoiCCSqHfA23fnnqywh8=)
                          4: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: N9yj3pAAVs5m7SimFwaSce/DJ3a2aOwWL6WwhlLDDfs=)
                          5: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: N/cJUWhUEKkKWK0CKRJr7DF4dmuct4+FW2hs6wmCMag=)
                          6: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: +IkwJLutymOe9v3tylysd9fl5AOsxnKrdRtvPHuXuAw=)
                          7: 83684F548DF411E7A230506DC4F9AE02.roa (hash: MUxckfSz9Vm7iQtZJ6qwGlxpqt//E4KlehICs43rvhI=)
                          8: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: xPiIQYGhCGnM669LTO7uPzCNucP7Qj7zT3MtzGxRzjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9525 (0x2535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: Mar  2 00:10:48 2026 GMT
            Not After : Mar  9 00:10:48 2026 GMT
        Subject: CN=69a4d589-ce34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:a2:30:18:9e:68:c7:a5:0d:00:d6:9e:ba:
                    4c:af:b5:9c:ac:43:d1:f0:5f:fc:ed:53:97:1d:29:
                    1a:92:77:74:5b:47:01:9d:cb:34:0a:b8:b9:21:92:
                    9e:21:b3:e1:1f:a0:6b:78:9d:08:ec:91:2a:ef:9e:
                    fc:57:81:6e:bc:2d:78:4e:b1:a7:4f:7e:b5:9d:fc:
                    03:56:14:d6:cf:2e:ce:9a:19:06:93:3c:b9:49:93:
                    d1:42:d3:67:e4:3e:ea:56:59:e3:f7:46:96:eb:de:
                    f8:81:77:44:73:f2:09:eb:5c:5b:4f:d9:e1:d2:8e:
                    30:ef:5f:2b:4a:ba:9e:0d:f2:e1:03:6a:9b:ef:fd:
                    e4:40:4e:c6:38:09:41:e9:e6:9e:73:f7:5a:9a:50:
                    4f:75:0f:27:3f:8f:a9:74:c6:52:db:7b:42:13:14:
                    f4:2c:ed:82:53:7a:63:66:c6:0a:ed:44:9f:d6:62:
                    c7:f5:0e:76:1c:4b:00:ba:4b:70:2b:5c:2e:19:5f:
                    d5:71:00:f3:a4:f6:eb:0a:7c:f0:ee:e0:ab:07:b5:
                    ce:94:fb:58:c6:6d:b6:b3:3d:25:98:89:40:bb:2d:
                    27:c1:2a:6f:a8:38:4f:a2:6d:d3:e4:ca:fa:a5:08:
                    a3:57:4e:87:74:fb:79:28:90:30:cb:78:2d:30:c8:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B7:43:A3:A6:E2:B7:F7:14:12:6F:3C:78:42:3B:48:65:8C:C7:93
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:32:0e:6d:2a:12:b6:6e:65:c1:f3:65:19:e8:b4:ec:d6:
         d9:08:43:24:2d:74:e5:3b:62:17:dd:5a:d8:eb:98:71:e0:1d:
         14:de:73:ec:9b:c6:15:3e:4e:2e:ab:c1:b8:63:9f:89:11:77:
         1e:93:69:15:a6:8a:c6:69:9c:8b:41:44:90:74:86:9d:c8:4f:
         0c:b6:45:58:b1:42:2b:9a:1f:41:82:7e:1c:1b:bd:4a:b4:aa:
         20:b8:f0:84:ca:8b:34:db:a7:3a:80:27:05:0a:fc:14:c3:8b:
         7b:d0:39:0b:b9:d9:88:db:1f:fd:5f:01:dc:8b:e5:e2:53:5e:
         04:12:78:c3:df:0b:31:3d:a1:ea:44:32:9b:fa:04:e0:23:90:
         5a:9a:4f:a5:ea:ea:2e:01:71:79:62:3c:c7:84:6f:a0:00:1d:
         3f:f1:c9:9a:bd:29:cc:72:bb:da:0a:3a:ec:9f:77:cd:d5:53:
         8b:fb:16:13:fa:1d:73:71:35:fb:3c:28:e4:71:fb:d4:b5:7a:
         c5:1e:52:07:8a:c0:a9:3c:59:b4:63:9a:36:d2:8a:5e:ee:1b:
         80:2d:b6:08:ce:86:ea:61:03:8f:d2:3e:37:66:da:bf:b5:03:
         af:e3:c3:05:c4:4d:df:0d:f6:f7:89:71:cf:96:0f:4a:a4:ca:
         3f:e2:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:13 2026 by rpki-client