Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
File:                     aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json)
Hash identifier:          jvLWU5FliyR9yCk2jPL3IZQFV7vhFMgSvTEn8SjQrJY=
Subject key identifier:   18:5D:02:3D:3C:25:E4:69:22:8D:D4:B3:34:33:5B:E8:8B:3F:B7:FB
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Certificate issuer:       /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial:       3544
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
Manifest number:          3526
Signing time:             Sat 28 Feb 2026 14:46:18 +0000
Manifest this update:     Sat 28 Feb 2026 14:46:17 +0000
Manifest next update:     Sat 07 Mar 2026 14:46:17 +0000
Files and hashes:         1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: LvNw9G8G5/Z3Okt8ejtexj38Sa5epr9HJNK0ww0XCLo=)
                          2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: Z9gsewhzEhlUHszkRSNsuOY1JzZl8Vjgyk5xiyq8V24=)
                          3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: iWI19VTOrnz2nGN4modDRd0Vbot3Y2khTy6hDIMLekE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
                          rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13636 (0x3544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
        Validity
            Not Before: Feb 28 14:46:17 2026 GMT
            Not After : Mar  7 14:46:17 2026 GMT
        Subject: CN=69a2ffb9-6015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b6:b1:56:98:69:08:f8:00:d1:ed:e5:7a:7e:
                    be:8b:c4:25:bd:df:31:38:b0:20:9a:f1:70:cc:25:
                    28:6a:c2:1e:3c:8a:12:9c:60:5a:d5:43:1b:6f:8f:
                    66:a6:d3:7d:1d:25:50:2e:31:a9:3d:6c:ce:d1:fc:
                    f7:28:9a:0b:60:03:c0:23:28:c2:1f:82:51:e4:06:
                    95:08:a1:af:6b:c4:aa:dd:02:d2:d9:54:11:da:60:
                    98:a7:05:82:f2:74:c8:aa:31:5b:a1:cf:9c:25:4f:
                    a7:8a:e1:00:dc:78:ea:02:02:1e:bd:a1:b7:8a:63:
                    a4:48:9d:a2:85:68:a3:06:fe:a9:fc:14:b9:b5:54:
                    86:fe:8e:28:af:04:c2:9e:da:82:e9:e4:6c:f6:23:
                    17:70:71:10:0b:bf:97:fe:c2:f3:df:fb:8a:b9:ee:
                    39:46:fc:a1:16:fa:0e:d1:1d:47:61:af:f7:35:b4:
                    9c:1b:6a:a3:6f:80:54:54:f2:2f:36:e0:a3:3a:0e:
                    ec:05:f8:73:a8:18:54:98:f2:12:02:ac:3a:1b:d3:
                    17:d4:6d:a7:2f:4f:45:21:46:e2:13:9f:97:00:da:
                    4d:47:9c:6c:a5:c3:7d:e3:a9:7c:cd:36:9f:c8:fc:
                    ea:95:ae:0c:cf:96:79:36:0c:b6:93:42:2f:11:6e:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5D:02:3D:3C:25:E4:69:22:8D:D4:B3:34:33:5B:E8:8B:3F:B7:FB
            X509v3 Authority Key Identifier:
                keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:46:26:ec:48:3e:ff:d0:55:27:46:df:3e:e5:75:00:b4:91:
         85:d0:d0:a6:e8:05:91:37:fa:73:12:bf:0a:61:59:fb:be:61:
         03:b8:cb:82:d4:b4:7e:f0:59:cc:73:23:72:98:dc:dc:1b:44:
         71:c6:c6:99:ce:68:1f:03:fc:ae:b8:0e:ba:46:29:84:0a:66:
         c1:75:21:a0:ed:30:52:dd:71:5d:7d:c3:15:11:77:c3:97:45:
         2c:2a:93:44:46:2c:a5:db:bb:14:24:ef:ba:a1:5e:8d:0c:27:
         89:e6:60:7d:09:03:dc:2c:01:56:6c:96:a4:b0:82:2e:c7:f3:
         d0:e9:e8:c5:16:c2:b5:33:3c:28:24:14:56:ce:ce:85:ae:d9:
         8d:d3:43:0a:26:fc:7a:86:01:f4:ab:b2:a6:fa:d6:c0:f8:02:
         73:02:6b:7d:84:5d:6f:9b:4c:45:7a:40:f3:01:d4:82:2d:1f:
         0d:aa:71:94:20:92:54:0b:5b:67:e1:53:4c:6f:eb:a2:31:fe:
         5f:38:96:9b:e5:b3:07:e3:c3:f4:48:54:5b:fc:a2:77:86:15:
         27:c2:08:71:2a:28:f0:45:37:55:1a:66:d8:67:54:51:da:22:
         73:24:22:a3:a3:c9:72:dc:ac:2c:05:a8:0a:fc:38:92:0c:5c:
         b6:94:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:51 2026 by rpki-client