Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
File:                     Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json)
Hash identifier:          K37EtMORnPkJEA7iWWvMMlEocB2zc36+d8uhI6oR7Ho=
Subject key identifier:   5A:61:53:63:C4:58:1C:DE:AF:E4:4B:0D:3E:73:00:B4:BC:A3:15:52
Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F
Certificate issuer:       /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
Manifest number:          01D3
Signing time:             Mon 02 Mar 2026 01:33:28 +0000
Manifest this update:     Mon 02 Mar 2026 01:33:26 +0000
Manifest next update:     Mon 09 Mar 2026 01:33:26 +0000
Files and hashes:         1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: ++EdwNO7EkcPvgVjcA7nEeYhg7gbZH5yVRoJvC1fWoQ=)
                          2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: YDLbN8v7zbUOEz8X9F3TWfy+hLaIJ0PZjsoS9CXQV5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl
                          rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E343, serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
        Validity
            Not Before: Mar  2 01:33:26 2026 GMT
            Not After : Mar  9 01:33:26 2026 GMT
        Subject: CN=69a4e8e8-196b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:03:fc:62:6f:7d:56:0e:8e:d7:88:76:df:
                    a3:2f:f5:6f:51:10:c8:9b:7c:c5:7d:87:d8:77:12:
                    00:ed:2b:e1:a2:a8:3c:04:5e:1c:86:6a:5b:b7:04:
                    94:83:cf:34:dd:54:a1:b7:5e:42:ed:df:d2:ca:5f:
                    1c:ce:5a:44:ae:7f:b6:46:bc:ef:fd:31:5e:99:18:
                    91:df:23:e2:4e:b7:be:d3:49:77:e4:5d:f2:72:d7:
                    65:a8:e2:53:6d:70:2e:22:47:1b:a1:42:1a:64:6a:
                    2b:12:d8:85:d4:96:e9:0f:f2:82:d7:9b:81:dd:8f:
                    e6:1f:12:d6:c5:0b:33:2e:b0:83:6a:a0:95:fc:df:
                    75:b1:74:0d:59:bd:e2:6a:e7:1f:1c:d1:57:09:4a:
                    8a:76:1c:71:b8:bf:dc:ba:32:6c:de:ed:17:2c:e5:
                    f4:5b:1b:0f:f7:cf:2c:1c:e4:39:76:cc:e6:4e:60:
                    6c:3f:26:4e:53:c5:7c:3f:59:67:9e:f5:01:16:14:
                    85:0c:4a:f0:21:83:29:3c:af:6d:ff:22:3a:0c:72:
                    2a:f0:21:a0:3f:8c:ff:65:59:a2:9b:15:91:a2:20:
                    30:33:2b:05:de:94:9a:bd:f2:63:2a:8b:69:cb:7c:
                    5d:b6:fd:0f:3f:86:a7:e5:18:d1:e4:91:32:2d:9f:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:53:63:C4:58:1C:DE:AF:E4:4B:0D:3E:73:00:B4:BC:A3:15:52
            X509v3 Authority Key Identifier:
                keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:56:44:58:97:7e:97:b7:5e:6d:63:8b:96:8f:1c:2d:bb:09:
         ce:6c:65:95:c0:be:48:fa:c7:3a:12:d8:9b:24:cc:4e:80:19:
         12:03:03:85:b1:b2:54:15:88:0a:86:34:d3:f1:89:26:00:8e:
         9e:0e:87:e1:3b:3c:73:3e:79:40:7d:d4:c2:eb:3d:b3:bb:13:
         08:bc:72:68:c6:b0:af:26:e2:d1:bd:f7:37:74:a8:a2:7c:50:
         77:69:f1:80:97:27:17:e5:ed:d1:3c:67:cf:99:99:60:a5:e3:
         49:87:e0:1a:6b:51:d8:74:0d:c7:fe:6e:e7:45:48:55:ad:d6:
         d5:1b:24:d8:01:9b:02:cb:5b:c1:91:2f:05:2f:9c:22:e3:74:
         f2:2c:0a:d6:0d:d3:3b:4b:ec:f9:db:0a:d6:ea:28:ac:a0:43:
         1b:72:6b:e0:21:5c:88:e0:53:5e:c7:68:b0:78:3d:bb:c9:97:
         57:92:be:70:b4:ba:f0:0d:ac:0a:b9:ec:eb:ae:47:3b:36:26:
         6b:a1:6e:75:8c:0b:6e:54:58:0a:33:00:68:f3:ac:87:92:2a:
         12:b6:77:74:1a:86:c9:3e:3f:bf:f2:e5:87:ba:b1:95:3f:92:
         bc:89:14:98:55:ba:b1:dd:21:15:16:f2:b4:a2:9f:34:cc:9e:
         7e:7e:f4:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUzNDMxMTAvBgNVBAUTKDQ1RkE2RUVCRTFERUE1MjJDMDQ0NDNDRjI1MjlFOTc3
OUE5OEQ4OEYwHhcNMjYwMzAyMDEzMzI2WhcNMjYwMzA5MDEzMzI2WjAYMRYwFAYD
VQQDEw02OWE0ZThlOC0xOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuecD/GJvfVYOjteIdt+jL/VvURDIm3zFfYfYdxIA7Svhoqg8BF4chmpbtwSU
g8803VSht15C7d/Syl8czlpErn+2Rrzv/TFemRiR3yPiTre+00l35F3yctdlqOJT
bXAuIkcboUIaZGorEtiF1JbpD/KC15uB3Y/mHxLWxQszLrCDaqCV/N91sXQNWb3i
aucfHNFXCUqKdhxxuL/cujJs3u0XLOX0WxsP988sHOQ5dszmTmBsPyZOU8V8P1ln
nvUBFhSFDErwIYMpPK9t/yI6DHIq8CGgP4z/ZVmimxWRoiAwMysF3pSavfJjKotp
y3xdtv0PP4an5RjR5JEyLZ/hXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFphU2PE
WBzer+RLDT5zALS8oxVSMB8GA1UdIwQYMBaAFEX6buvh3qUiwERDzyUp6XeamNiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8wRDEwRjdCMjRC
QzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBTTEFSRVBQSlNucGQ1cVky
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JmcHU2LUhlcFNMQVJFUFBKU25wZDVxWTJJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTM0My8wRDEwRjdCMjRCQzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBT
TEFSRVBQSlNucGQ1cVkySTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABVZEWJd+l7debWOLlo8cLbsJzmxllcC+SPrHOhLYmyTMToAZEgMDhbGyVBWI
CoY00/GJJgCOng6H4Ts8cz55QH3Uwus9s7sTCLxyaMawrybi0b33N3SoonxQd2nx
gJcnF+Xt0Txnz5mZYKXjSYfgGmtR2HQNx/5u50VIVa3W1Rsk2AGbAstbwZEvBS+c
IuN08iwK1g3TO0vs+dsK1uoorKBDG3Jr4CFciOBTXsdosHg9u8mXV5K+cLS68A2s
Crns665HOzYma6FudYwLblRYCjMAaPOsh5IqErZ3dBqGyT4/v/Llh7qxlT+SvIkU
mFW6sd0hFRbytKKfNMyefn70AA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:18 2026 by rpki-client