Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
File:                     fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json)
Hash identifier:          8FajUd840FqIViy42OyIvMWkaxhYA5a3yEViSJS3aEc=
Subject key identifier:   43:60:F8:B2:E4:48:D3:CD:AE:96:5E:C6:27:98:54:15:F1:FC:CE:27
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Certificate issuer:       /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial:       0AA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
Manifest number:          0A9B
Signing time:             Mon 02 Mar 2026 01:23:06 +0000
Manifest this update:     Mon 02 Mar 2026 01:23:03 +0000
Manifest next update:     Mon 09 Mar 2026 01:23:03 +0000
Files and hashes:         1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: uZSXNn5kpihHvRsBuIma9+77SIn3UHQlEH/Y+dAOPdE=)
                          2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: Lox+fNflpPkX4tNzaz8YEGyKg5jzBD1WOhemdRAMiC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
                          rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2727 (0xaa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
        Validity
            Not Before: Mar  2 01:23:03 2026 GMT
            Not After : Mar  9 01:23:03 2026 GMT
        Subject: CN=69a4e679-a39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:03:5d:de:66:e2:c1:45:12:1f:05:e1:7a:
                    34:82:55:1c:5e:50:d7:1f:2c:0a:f3:5b:19:f4:c4:
                    fa:f0:0e:41:ac:a7:0f:cf:b0:4c:37:3b:43:d0:83:
                    d9:ba:25:33:81:43:cb:48:ff:17:97:6f:1d:90:ce:
                    76:82:fc:f7:48:ed:cd:c0:3e:a5:e0:6a:28:da:3f:
                    df:ec:d4:37:a7:ea:8d:6d:c7:14:eb:10:68:f0:b0:
                    94:56:41:6b:c8:8c:de:95:b3:b7:e8:95:9a:47:58:
                    71:3d:cb:c3:27:91:47:c7:1d:61:59:52:7f:fc:50:
                    53:36:71:f1:26:64:5d:29:03:82:f3:e0:0f:9a:e1:
                    fa:55:0b:1f:38:9d:b9:84:a3:7b:6b:37:3b:8a:47:
                    0f:ce:43:3d:e3:37:74:67:c8:89:4a:97:20:1f:fc:
                    79:4d:3e:ad:33:5b:6f:9d:9c:d4:d5:11:6d:7d:37:
                    9c:12:14:cf:22:ae:29:93:96:3d:84:9d:99:2a:49:
                    86:89:dd:49:6d:26:9d:3d:7f:b0:8b:b8:9b:8e:e6:
                    eb:f8:e2:ce:36:3b:1e:01:50:3e:2d:30:4f:cf:b9:
                    c2:58:40:b8:ef:bf:5a:81:83:10:23:7e:10:66:61:
                    13:bd:b6:fb:7b:46:09:5a:47:39:13:f2:72:26:0a:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:60:F8:B2:E4:48:D3:CD:AE:96:5E:C6:27:98:54:15:F1:FC:CE:27
            X509v3 Authority Key Identifier:
                keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:8b:5a:53:29:0a:09:a4:0d:65:cd:59:7a:e9:ad:8a:c9:e2:
         f8:81:76:d3:85:d5:5b:4d:22:d2:ce:1b:c3:4a:9d:ee:4a:8f:
         5d:28:d6:d9:ec:e0:90:c0:af:1e:b6:a7:d2:2c:be:97:71:31:
         23:e0:fa:d6:53:33:28:cd:95:59:c8:4e:c9:21:00:32:47:03:
         dc:e2:03:fa:6f:2b:56:9a:2d:6c:79:1a:50:f4:ae:1c:46:6d:
         58:60:0b:de:91:f2:29:8d:03:75:b2:d9:e6:b4:d7:56:e7:27:
         e0:a2:ce:35:19:fd:0b:ba:e7:08:5e:da:33:32:ae:ad:d3:b1:
         60:ff:ee:23:8a:ee:ab:c1:31:71:b2:ed:74:c1:7a:ca:f5:a8:
         77:51:67:7e:97:1b:a0:7e:eb:2c:06:44:50:ca:c6:05:df:2d:
         ea:dc:d7:00:97:1f:86:13:1f:0e:cb:4e:2d:e2:94:34:eb:56:
         59:c5:00:10:ec:ca:63:dd:f4:a8:db:28:8c:7f:91:c9:2b:b3:
         5c:ec:e2:f7:1d:81:4e:b5:b7:68:3a:d4:f5:61:f4:58:17:bd:
         07:b9:5e:ed:08:31:5b:ea:40:46:0b:fa:bd:34:53:26:08:5b:
         24:87:2f:8f:ea:fd:7d:a2:9b:c5:71:d3:52:d9:94:e7:95:9c:
         c0:e3:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:23 2026 by rpki-client