Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File:                     f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier:          t5nXSEESVZq4VLq+0JdN2omT9QyV5fA2fKRNwYSRn8g=
Subject key identifier:   62:A0:88:CA:7C:B5:53:7D:C4:5C:B3:B7:50:7E:67:60:F1:74:D2:9E
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer:       /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number:          0678
Signing time:             Sat 28 Feb 2026 23:05:09 +0000
Manifest this update:     Sat 28 Feb 2026 23:05:09 +0000
Manifest next update:     Sat 07 Mar 2026 23:05:09 +0000
Files and hashes:         1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: ISVqgkxnIzRZTaP9RxQ9LBIe+WMaUBxw3aA1g138VGM=)
                          2: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: yctT4YUUP20tQCvJN7CWg3MrC6O8Tuq96ZLx+s4UkRo=)
                          3: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: ufcIsYDdxZ7JHQere7GH/LJcOYs+a2XI1MSL+ZvwbhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
                          rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
        Validity
            Not Before: Feb 28 23:05:09 2026 GMT
            Not After : Mar  7 23:05:09 2026 GMT
        Subject: CN=69a374a5-a60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:69:dd:b1:24:e3:3f:41:29:5c:3d:37:57:
                    ab:4a:e8:02:d1:e0:7c:ac:77:26:c9:64:54:fc:56:
                    f9:0f:69:3b:94:03:96:08:c4:af:96:f3:ee:d1:12:
                    32:a2:fc:1d:85:02:48:17:e1:43:4a:ba:55:89:3f:
                    95:85:96:58:a1:3a:e7:2e:7a:bd:52:d4:76:26:0a:
                    47:cb:51:67:b6:b2:0d:ec:52:87:60:3d:9f:74:5c:
                    c0:41:bb:58:6e:40:03:f3:e7:a5:7c:d1:61:f2:78:
                    25:60:61:33:01:9e:c2:51:7d:1d:d8:49:ef:7e:28:
                    5b:40:3a:0a:31:13:d4:98:fc:27:68:e1:a2:2f:4d:
                    bb:33:ca:c3:90:8c:31:f4:2b:c3:6e:62:f6:da:01:
                    26:29:6d:0f:59:ee:a4:17:e1:4b:18:77:0a:a4:ee:
                    7e:70:47:66:08:26:a4:ac:d4:bf:5a:a3:6b:cb:15:
                    db:61:8a:aa:e3:80:1c:90:c3:21:b3:d3:d1:84:2f:
                    2e:6f:89:2c:41:04:fa:9f:fb:6b:1d:7c:bd:eb:1b:
                    95:f4:4f:bc:6d:d1:ec:fa:0e:59:b1:81:10:7d:97:
                    98:2e:86:2e:3a:cb:b3:fa:a9:bc:32:10:35:76:b1:
                    4e:31:db:18:f2:51:17:c4:d2:b6:5f:83:84:2f:8d:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:88:CA:7C:B5:53:7D:C4:5C:B3:B7:50:7E:67:60:F1:74:D2:9E
            X509v3 Authority Key Identifier:
                keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fe:9e:20:c7:5c:79:90:b5:e8:5b:12:98:b9:e0:0e:17:26:
         02:0f:1d:8f:f5:56:5f:7f:27:a8:a0:8c:75:57:b7:75:7e:80:
         d1:3a:fe:e9:a0:f9:de:d4:7a:d0:90:d5:06:ff:93:7d:c5:31:
         d5:54:c6:7d:dc:29:45:29:4d:35:35:15:7d:c6:a6:c3:48:2b:
         93:2d:4b:30:8a:f6:93:23:af:e5:a6:9f:51:c4:60:2f:7e:af:
         ef:f0:52:60:a7:41:32:5c:7f:fc:18:5b:3f:4c:2c:c3:df:a2:
         39:b9:e6:2b:54:c9:49:8b:e4:ab:c2:c3:b6:5d:b3:c5:7b:9c:
         37:b7:77:bb:27:b6:42:af:cb:0e:41:16:11:fa:cd:5a:b7:c9:
         a6:c5:3a:5b:62:72:39:ac:cf:a7:45:14:9c:47:fd:31:c1:a1:
         66:6f:74:33:18:a8:9d:cd:91:86:06:dc:a3:b4:fb:c6:2e:fc:
         78:33:40:8c:ef:ff:5e:33:29:2f:1a:2f:06:0a:6f:ba:bc:a6:
         b5:95:72:f7:91:b2:5f:f8:b8:77:79:07:8b:b7:39:ee:4c:88:
         f0:a2:79:f1:aa:30:0a:be:50:41:6a:b3:1c:9e:12:14:15:7e:
         d9:2e:3c:c5:14:c0:fa:3b:d2:9c:ff:85:98:18:66:b2:d5:f9:
         13:06:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:26 2026 by rpki-client