Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File:                     T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier:          +796wQM2H7TTuu6IBowXGCJo3LprGRXs8sM+4CPv2Kk=
Subject key identifier:   92:E0:30:BC:21:CB:02:AC:CD:0E:77:71:4B:5C:1D:97:D7:E1:90:54
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer:       /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial:       0D17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number:          0D0F
Signing time:             Sat 28 Feb 2026 18:14:31 +0000
Manifest this update:     Sat 28 Feb 2026 18:14:31 +0000
Manifest next update:     Sat 07 Mar 2026 18:14:31 +0000
Files and hashes:         1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 0MNWvy+JiK4Y3GsiDGGovvSH0qIjvx4zjIYf4gIblJg=)
                          2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: TQudNrBg1tAuuiY/zVaf2qIyDj5AjTY8tAQkyrZyuYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
                          rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
        Validity
            Not Before: Feb 28 18:14:31 2026 GMT
            Not After : Mar  7 18:14:31 2026 GMT
        Subject: CN=69a33087-0a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:47:4c:bc:6e:78:0d:97:0c:aa:40:2c:25:
                    db:ec:76:41:47:d7:09:23:41:54:3a:2c:f7:a7:8e:
                    51:2e:bd:8f:0b:bc:87:93:42:4b:ed:83:af:f0:08:
                    a4:cc:15:1d:3a:cd:2d:d6:44:16:84:79:54:6c:6f:
                    0b:bd:25:ba:40:e0:7c:4e:bd:3d:ff:11:8e:84:98:
                    42:f5:49:1b:61:37:61:d1:7c:83:29:d1:fb:d8:75:
                    b4:f3:f7:18:91:4d:7e:a5:25:5a:49:06:85:a7:83:
                    b7:1b:c0:c1:05:d6:0b:e8:b5:69:0e:35:5e:0a:e7:
                    7b:38:a3:b7:3b:75:c4:14:7d:a3:5c:d4:0b:5b:d4:
                    d0:f0:36:30:c6:88:81:c4:b3:9c:ea:7e:44:1e:ae:
                    40:8f:69:2d:fa:b9:58:2f:69:89:6a:9e:5b:af:bb:
                    8c:30:38:38:33:e9:29:28:64:23:5f:c3:10:16:f6:
                    8c:8d:d2:70:c0:ef:43:2f:12:0d:b7:cd:08:2f:a6:
                    08:80:c5:bc:2d:a7:e7:2b:66:b9:88:20:db:7f:29:
                    ab:f1:f0:b2:b1:01:75:d1:69:fa:86:2f:8d:fb:6a:
                    23:b7:3e:b5:3e:80:94:d6:d9:52:cc:22:a6:07:3e:
                    a8:bc:41:dc:99:60:57:63:90:35:75:89:7f:12:ad:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:30:BC:21:CB:02:AC:CD:0E:77:71:4B:5C:1D:97:D7:E1:90:54
            X509v3 Authority Key Identifier:
                keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:af:9d:19:31:da:f4:8c:ba:21:4d:2f:ba:d4:6d:ad:38:9b:
         8b:2b:92:8e:d8:b4:be:06:69:09:95:43:66:95:ee:b6:f8:f8:
         f8:3d:bf:e3:7e:bd:a9:2e:b7:89:05:9d:79:2e:01:dc:a2:d8:
         27:55:49:32:45:87:7e:a0:4f:b1:69:0a:db:8c:3d:c0:51:51:
         09:cf:75:ea:ff:56:b5:78:2c:26:30:b8:39:dc:ff:1c:91:9b:
         08:33:b7:31:ba:66:40:f8:a3:45:65:c0:64:58:58:d7:96:f5:
         96:9f:c7:15:43:b8:0d:a1:af:7f:01:3c:ac:5a:21:8c:2a:d4:
         a5:67:47:63:70:f9:da:a7:67:c1:c1:25:a5:2b:0d:3d:d4:38:
         20:2c:0f:41:d9:9c:c4:06:88:1d:97:c8:3e:f1:2d:85:de:f0:
         db:a3:3d:41:39:49:e9:8d:cc:8b:46:1a:4f:c0:23:b9:cb:6d:
         8b:5a:c6:10:64:da:c4:9e:d3:06:e6:6c:bc:ce:90:a1:d0:03:
         82:12:22:fd:c1:32:9f:95:3c:44:c4:dc:0d:4c:99:a5:a1:93:
         77:cd:2a:ed:ec:0a:0c:e6:1e:8b:89:56:00:8c:db:6f:e2:7a:
         19:39:23:1e:e0:0a:84:1f:e8:b2:1a:1d:d4:39:25:3f:ff:53:
         64:a1:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:28 2026 by rpki-client