Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File:                     aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier:          7KXB2V1vj9yJTLMZGgcKTiDtTN4g7FAn6iDA7mpcZmY=
Subject key identifier:   93:57:A4:D5:79:94:DB:94:B9:A0:DF:A6:E2:AF:8B:7C:36:34:EF:F7
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer:       /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number:          025F
Signing time:             Mon 02 Mar 2026 01:13:29 +0000
Manifest this update:     Mon 02 Mar 2026 01:13:28 +0000
Manifest next update:     Mon 09 Mar 2026 01:13:28 +0000
Files and hashes:         1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: /vRCeP3Z58yH1ufpSoBVecU4PUUciP70TNHc6uQGSaA=)
                          2: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: JMpkHDzDVK/usfbHjSL6Kqnw95uZaR659+4yGn0oEJc=)
                          3: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: ALR7tiUN9OO7R8fFOreHtqwUwWbttRypaQgzgT65w2M=)
                          4: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: 4okKosxS6IEGC1+htR6SIJMkssQ9kfQRZTp5TOGcyNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
                          rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
        Validity
            Not Before: Mar  2 01:13:28 2026 GMT
            Not After : Mar  9 01:13:28 2026 GMT
        Subject: CN=69a4e439-f0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:80:f6:67:ce:50:e9:07:3f:6d:dd:cf:7c:
                    1c:65:97:31:08:f8:90:7f:4b:53:58:6d:fb:8a:d9:
                    c0:e1:d8:f0:d3:ae:ed:5d:7c:97:7d:4d:47:00:87:
                    c4:aa:ab:d8:38:1d:c5:de:dd:e5:10:c7:4d:9e:01:
                    fa:7d:9a:26:af:6e:84:26:0f:09:9d:73:be:38:8a:
                    fc:af:70:a4:a7:5b:c4:ec:27:00:15:05:64:d0:42:
                    d7:29:01:0e:aa:5d:35:f7:dc:76:33:ef:56:61:e5:
                    5a:17:d9:8c:3d:fe:bb:92:ec:36:07:3e:cc:c3:e9:
                    f0:e7:2c:91:da:60:8d:98:c9:32:63:1e:9c:a4:73:
                    b8:e2:9c:f8:61:b3:fc:b7:ec:6e:31:dd:4e:a6:1c:
                    57:eb:6a:9f:2f:cd:39:b3:da:01:86:ad:c0:e0:47:
                    3a:85:7d:60:0c:bd:51:10:35:43:e8:ac:c4:5f:36:
                    a5:b6:af:29:42:7d:3f:b4:2a:2a:6f:bc:67:2a:44:
                    0c:6b:e0:3b:bb:76:f8:b3:0e:7c:11:c4:63:bc:99:
                    d2:68:83:0a:26:8a:c6:69:a6:dd:a9:12:b1:52:61:
                    cc:d1:5c:7b:6d:af:0d:b2:ea:31:2e:d8:7e:6f:0d:
                    b7:80:df:d0:63:35:6a:ba:a9:98:da:13:e4:d9:29:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:A4:D5:79:94:DB:94:B9:A0:DF:A6:E2:AF:8B:7C:36:34:EF:F7
            X509v3 Authority Key Identifier:
                keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c6:a5:c6:9c:1a:13:00:9d:46:6a:94:2a:dd:bb:65:21:c8:
         9f:a0:5d:ac:55:78:f2:47:8c:c5:4c:cb:f7:b9:7e:6a:66:43:
         8b:ff:12:d5:42:d3:2e:f3:fc:a8:8e:0b:b0:c5:5b:2d:01:64:
         73:3c:4d:95:0e:e0:13:4a:45:ad:a7:cc:1d:48:4e:fb:0e:b4:
         8b:82:92:d3:b5:8a:56:b7:57:62:7a:86:2d:4c:78:fb:ae:ed:
         ce:a7:e0:67:98:ed:12:30:ae:47:ef:d2:21:23:28:76:9e:4f:
         a4:e4:b8:e4:8f:84:9a:b9:1e:4e:01:99:1e:ee:9f:5a:88:8b:
         42:eb:f1:fb:3c:89:2b:5b:6a:66:81:83:2f:9c:eb:e4:64:94:
         2e:a3:85:10:cf:c5:82:f2:69:16:60:6a:4f:20:de:c5:96:78:
         ea:e6:cc:3f:41:e2:02:c0:ee:e6:3d:fa:f5:e3:5b:2c:23:05:
         28:1c:99:02:d2:55:78:39:d7:92:10:b7:6e:34:ff:b2:58:60:
         5f:2d:f6:df:57:ee:43:c9:5f:eb:52:80:4b:d8:bb:f9:80:0f:
         b8:8c:d4:dd:9a:ab:7d:4d:10:0d:2c:98:46:5f:87:64:e1:1a:
         4e:39:fd:da:3e:8f:51:96:fc:f1:10:67:69:d2:3a:be:ed:59:
         fc:ec:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:49:53 2026 by rpki-client