Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          SamcVXzoaMga/roB2RwwXpqSsX5cHqwBX32DiYVJ9Cg=
Subject key identifier:   BB:1E:04:74:60:DA:35:DA:B9:D7:AA:C1:2D:63:92:E4:7B:A3:55:E3
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0BA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0B9B
Signing time:             Sat 28 Feb 2026 19:16:18 +0000
Manifest this update:     Sat 28 Feb 2026 19:16:17 +0000
Manifest next update:     Sat 07 Mar 2026 19:16:17 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: 5eFArJhxoj6E4rpisU42CLXoxhD31u2sEsTYI1QA2l4=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: o16pooFHIEBYiC/U+8swfJroVM1JsQPPQfuyHDWfNA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Feb 28 19:16:17 2026 GMT
            Not After : Mar  7 19:16:17 2026 GMT
        Subject: CN=69a33f02-8b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:06:f8:74:0a:f5:15:87:70:0f:a0:ec:96:
                    3c:c3:21:11:37:22:60:5e:f0:80:b6:1f:c8:1a:c6:
                    67:4e:30:d7:45:a5:25:f0:8f:ff:20:bd:a3:b9:5c:
                    d3:46:54:9e:55:ea:48:f1:73:40:c0:ee:2b:94:10:
                    b5:eb:94:71:dd:a5:06:06:e9:2a:c9:7e:af:10:27:
                    1b:11:dc:ed:f3:ae:a7:b6:73:8b:54:a3:96:0a:44:
                    55:77:19:90:59:bc:eb:7b:24:dd:33:80:34:d5:31:
                    d7:ac:2b:53:fb:8e:5c:51:b1:82:29:a1:86:48:6c:
                    7a:9d:bc:bc:30:21:ce:c6:d6:b4:49:0d:27:cf:81:
                    02:29:ff:98:0d:25:d2:61:4b:bd:64:33:fd:af:59:
                    18:88:c5:1d:a0:22:38:77:9f:df:6d:32:75:a0:13:
                    4e:0e:9c:f5:1d:04:15:8e:e3:06:22:b7:f5:39:2f:
                    20:f2:6b:52:bf:07:ad:22:c1:b8:81:76:73:1c:0c:
                    32:ec:50:f9:be:5f:f4:73:e9:97:f3:03:ac:86:47:
                    fe:63:c5:bb:67:58:62:ee:58:09:96:5a:90:f2:0f:
                    df:91:41:89:21:d1:c6:60:b8:5b:84:de:55:f7:6b:
                    c5:c6:7d:7d:a8:ea:85:8b:4f:26:89:21:3a:b2:e3:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:04:74:60:DA:35:DA:B9:D7:AA:C1:2D:63:92:E4:7B:A3:55:E3
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:64:57:fb:25:f7:64:34:44:6d:2f:74:db:8b:38:30:05:
         d3:4a:09:86:2f:35:c1:21:d1:6a:40:cf:d7:44:60:46:ed:29:
         37:d0:bf:0b:a1:37:bb:05:1d:38:96:e0:96:d8:b0:fa:86:3c:
         3a:ce:f1:b8:0e:76:7e:a2:0f:36:ea:9d:13:09:1b:34:51:51:
         52:a7:14:ba:2f:0f:c1:74:41:2b:6b:dd:c4:66:d9:fc:91:bb:
         c3:cb:99:ff:75:79:78:3d:15:e5:4f:e5:1f:e2:84:0c:24:a6:
         83:18:38:19:9d:00:e6:d1:02:09:f3:76:de:16:2b:8a:fa:ca:
         4c:14:3a:b5:54:b7:27:8d:fd:99:86:54:fa:54:8c:3d:c6:db:
         62:f1:30:a9:74:8f:d1:e5:78:a6:8c:a0:d5:97:49:1e:32:6d:
         88:f8:b1:1d:6c:b8:c6:42:34:f8:57:02:73:90:2a:65:9a:b5:
         3f:f5:0d:64:a1:38:4e:99:e5:b7:ab:97:b2:ba:a3:d0:9a:38:
         e3:e3:05:02:30:ca:92:d3:fa:aa:c8:b4:22:a0:51:ad:97:b8:
         e4:26:65:af:5f:ea:8b:9a:48:3c:86:1f:2f:7b:7b:21:35:78:
         07:14:67:e7:60:08:e8:ff:ed:a8:8d:51:02:e3:62:9e:5e:40:
         7e:15:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:37 2026 by rpki-client