Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
File:                     fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json)
Hash identifier:          j2YfvFEP/D7vFMlwWHF4Hp35aWrBg8n3xJwxV8XsXes=
Subject key identifier:   E0:52:01:30:29:70:F8:C6:B7:48:B9:8C:B1:25:20:70:91:6F:1D:88
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Certificate issuer:       /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial:       0359
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
Manifest number:          0336
Signing time:             Sun 01 Mar 2026 02:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 02:00:50 +0000
Manifest next update:     Sun 08 Mar 2026 02:00:50 +0000
Files and hashes:         1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: WZeStNaHTxZqI5lAPUUhPrPjnjF2EqKQq2JdZuueaCA=)
                          2: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (hash: sh0P7r2XibS/gx2Xt0Uiy2ulD+jkzyj/uW0sx5+8aeU=)
                          3: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: i91dJKVTb6GLG1R30/IzaT1OTBlo0JQsHaeOVz47T3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
                          rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
        Validity
            Not Before: Mar  1 02:00:50 2026 GMT
            Not After : Mar  8 02:00:50 2026 GMT
        Subject: CN=69a39dd2-ea8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:7c:95:3c:c0:98:c4:c4:d3:43:89:f9:25:
                    a1:f2:05:8f:af:4e:e3:31:50:5c:c4:16:2a:85:a9:
                    c4:04:47:cb:56:37:58:e5:7f:c2:3c:06:31:82:52:
                    97:00:3b:77:f6:c9:f0:98:09:ea:e8:70:26:2d:4b:
                    06:17:06:f1:ee:14:31:f3:24:c3:60:a6:11:5b:90:
                    c9:7f:b3:86:51:66:c5:1c:b5:48:ce:1d:07:71:df:
                    06:cc:d6:d3:14:d2:ef:33:b0:bb:b7:61:0b:47:03:
                    f6:d9:7b:2f:43:7c:87:22:77:23:8a:e6:dc:1b:77:
                    54:3b:ce:60:6e:12:76:e6:6a:7c:8d:71:ae:8d:29:
                    71:7e:d8:a6:74:51:82:a6:d6:29:85:ca:45:34:fb:
                    78:35:ac:62:94:a2:65:7b:2a:fb:ac:3d:5a:8d:b3:
                    00:77:74:96:64:77:d9:be:a1:e1:33:67:ba:83:b7:
                    8e:3b:6e:3e:9c:51:8c:a0:da:b6:4a:9e:91:12:2c:
                    30:87:32:b0:c7:02:65:ee:a8:60:a5:f1:69:7a:b8:
                    ec:44:96:25:e5:80:71:7b:55:73:ff:66:e5:10:34:
                    9e:8b:93:70:7e:18:b8:33:e4:9b:b1:f1:e9:22:06:
                    f9:e0:7b:4e:0c:2b:98:b2:77:3f:e0:bf:f3:84:b2:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:52:01:30:29:70:F8:C6:B7:48:B9:8C:B1:25:20:70:91:6F:1D:88
            X509v3 Authority Key Identifier:
                keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:4f:4d:d4:8b:9c:63:8e:2b:7a:32:cc:80:e2:16:a4:c4:
         1e:41:5a:09:64:8d:11:99:d0:06:7c:9e:3f:3d:af:fd:46:2c:
         cd:6f:c9:76:eb:5a:7e:d5:92:5d:c6:96:4e:e4:8f:24:eb:c3:
         37:20:31:13:c8:11:da:01:23:f3:d8:70:e3:cc:67:a6:5d:fe:
         84:6e:22:88:b1:85:ec:8f:1e:4d:e1:cb:58:03:0c:e4:a9:00:
         41:e8:81:c2:de:3f:28:ac:df:8c:78:a8:ee:2f:21:7d:b9:58:
         11:4f:39:8e:de:d9:7d:d8:fc:9e:26:c8:4b:64:ad:94:59:c1:
         d5:62:cd:37:5d:e4:20:61:82:e8:44:bc:76:f9:6b:23:b3:58:
         fb:19:c7:e4:a7:7e:a4:b6:01:d6:10:3d:60:9b:05:66:9c:64:
         9c:05:9a:00:68:db:4e:e6:2e:28:9f:0c:66:cb:4c:9d:50:13:
         3a:ad:62:9e:22:c3:fc:ba:a7:a2:0b:76:71:8a:64:1c:bd:cf:
         4b:0e:48:f2:9f:14:d6:20:1a:a9:b5:e5:26:f4:c3:47:c9:84:
         4b:9f:99:59:b3:60:fa:3a:ef:36:3a:46:34:a2:be:86:79:5f:
         3d:fd:6c:43:75:8d:ed:42:30:55:62:d7:1f:07:09:53:64:bd:
         b0:ae:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:58 2026 by rpki-client