Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
File:                     sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json)
Hash identifier:          ZZeiyIaO+WPePJJdgYM8khW2aTBfnNE3EjREDC80Ixs=
Subject key identifier:   58:54:85:8F:AC:9A:89:D8:20:82:DC:F1:14:D4:76:65:EC:E8:03:4E
Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
Certificate issuer:       /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Certificate serial:       10DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
Manifest number:          10C1
Signing time:             Mon 02 Mar 2026 00:37:40 +0000
Manifest this update:     Mon 02 Mar 2026 00:37:38 +0000
Manifest next update:     Mon 09 Mar 2026 00:37:38 +0000
Files and hashes:         1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: 50FaP84WvTFM4K0e+UrxKVsiXBpo/ObcFMkilokb8ec=)
                          2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: TwYATUTcZOqT2PE79Ayni601C0ew8QPNyjOGtV30Eds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
                          rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4314 (0x10da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
        Validity
            Not Before: Mar  2 00:37:38 2026 GMT
            Not After : Mar  9 00:37:38 2026 GMT
        Subject: CN=69a4dbd3-823d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:19:ae:f2:2a:b2:e5:76:96:e0:4c:ee:ea:
                    f2:09:8c:96:d7:b2:7f:5f:58:23:a7:92:1a:26:23:
                    1b:8d:e9:74:42:3a:20:7e:82:4f:be:6b:88:0e:04:
                    96:23:0b:14:2d:89:bd:0c:cf:0c:bf:15:28:12:6e:
                    a0:e1:00:d2:91:f6:f2:c1:bb:cc:7e:2f:2b:c6:7a:
                    1a:5c:c3:27:1b:80:f6:1e:4d:bf:7f:e7:6d:14:2a:
                    96:b5:9a:9a:67:80:04:bb:40:f2:71:e9:18:6d:51:
                    ae:69:10:6b:85:fa:6d:a8:a6:4f:df:09:26:f1:2f:
                    30:65:21:1e:b1:a4:49:b4:65:eb:14:46:de:cf:63:
                    8a:1b:3a:1b:37:1b:1c:1a:74:7c:bd:35:e8:4c:ea:
                    38:ae:cf:f3:2f:f0:c0:f6:ee:f0:d3:91:05:de:e7:
                    a3:96:c0:05:54:59:96:94:92:28:5e:60:12:fb:df:
                    0d:1d:d0:e0:80:5f:be:5f:5e:43:61:86:10:8f:72:
                    8d:5f:00:00:88:c2:9e:ab:79:e3:ad:1b:13:ec:3c:
                    6e:59:00:26:fd:31:6a:5b:28:c8:cd:7a:03:84:89:
                    23:e7:d3:7b:91:ee:17:ab:25:6f:76:4a:96:c0:9f:
                    bd:58:9c:d1:1c:b2:22:8d:58:f8:b0:72:6e:53:f2:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:54:85:8F:AC:9A:89:D8:20:82:DC:F1:14:D4:76:65:EC:E8:03:4E
            X509v3 Authority Key Identifier:
                keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:53:f7:06:88:c1:11:09:d2:bd:d7:15:a0:de:30:f9:bb:01:
         02:f2:02:60:80:2d:98:eb:9a:c9:75:26:ae:d4:87:05:4f:0a:
         15:99:2a:be:c9:45:03:b0:77:13:bf:49:a7:31:a1:dd:16:db:
         8e:c7:cd:b9:34:b9:79:96:52:0d:86:cc:93:1c:0d:68:b9:4d:
         35:c2:8d:39:54:77:68:0e:24:0d:57:18:7c:0f:ba:1d:ca:c2:
         da:19:f6:6c:23:91:b0:dd:94:db:e3:26:50:6f:1c:fb:82:b5:
         eb:66:3b:c2:32:d7:cc:42:6a:fd:32:1d:8b:d6:75:bb:6d:f5:
         d0:67:7f:f4:eb:fe:a4:c5:35:87:bd:03:f5:7a:13:13:78:7e:
         4e:94:e2:19:15:87:20:3a:72:cf:c9:12:d9:83:1d:40:a9:55:
         c0:76:61:97:3b:5b:2d:f2:1b:9a:83:d7:1e:7f:66:2e:13:18:
         c5:4a:ad:7a:7a:ed:45:2d:1d:ca:00:bd:08:b6:86:7a:58:e1:
         a2:a6:c8:cb:ca:29:19:1c:50:25:91:84:49:b4:89:78:f0:e3:
         ac:8b:1c:5a:fc:49:70:18:2e:41:17:48:42:79:bc:28:09:12:
         b1:c9:f0:e3:1f:c1:14:0d:5a:48:cb:8a:a0:3b:f1:e4:f0:cc:
         66:6e:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:30 2026 by rpki-client