Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
File:                     RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json)
Hash identifier:          GAu5cKwN2Vep/me3w8eR3j79gSukc4v0VuLSzZATi7Q=
Subject key identifier:   D8:12:4C:BB:1E:E0:80:7F:A3:A6:97:90:64:CA:88:4F:85:38:BB:FF
Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
Certificate issuer:       /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
Manifest number:          30
Signing time:             Sun 01 Mar 2026 10:06:43 +0000
Manifest this update:     Sun 01 Mar 2026 10:06:43 +0000
Manifest next update:     Sun 08 Mar 2026 10:06:43 +0000
Files and hashes:         1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: eQj23SdyhdFAp2inEu18ehwwVVzl8St4lypaJ7Q1TvI=)
                          2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: iWJLrvzKgxNbc1JW1lDrYQAh5nQktcAJb+hfOL0uYqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
                          rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
        Validity
            Not Before: Mar  1 10:06:43 2026 GMT
            Not After : Mar  8 10:06:43 2026 GMT
        Subject: CN=69a40fb3-7102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:51:fa:67:8d:84:f8:cf:53:24:dc:b9:7d:
                    83:1c:e7:a7:a3:db:a4:c9:68:46:b7:61:19:fc:82:
                    b2:94:bd:d3:2b:25:d6:92:43:70:90:a4:07:79:db:
                    5c:d3:21:27:99:9b:a6:9e:35:ab:8b:e8:8a:e1:74:
                    ff:2a:c2:8b:61:c3:cd:24:b4:fe:22:35:67:53:34:
                    26:6e:27:4a:31:51:8b:d6:e8:af:d0:1e:5c:1d:10:
                    f1:37:ec:df:c7:3f:17:10:be:a9:75:7a:f2:52:82:
                    db:63:c7:b5:e9:13:40:2a:f4:41:a8:f0:14:06:8c:
                    81:ef:a8:80:b4:09:a6:f6:f2:ed:28:d2:0b:a9:c9:
                    7a:c4:a9:c7:a1:a2:9a:fc:00:0d:7f:d7:18:3b:b7:
                    39:34:84:1c:04:7d:55:90:f3:f9:ee:af:ac:8b:15:
                    50:ca:45:5a:bd:23:cc:4d:87:0a:e6:d8:05:76:b8:
                    eb:7b:5e:53:d1:34:0a:c7:c9:5e:3f:95:cb:53:29:
                    6a:95:2f:6d:44:ad:6e:29:11:5a:44:23:62:25:a8:
                    37:79:79:14:e3:cc:00:a4:d8:ca:4e:fe:a0:a9:59:
                    e2:0e:a9:02:96:3b:38:b8:be:fe:55:93:91:ee:72:
                    af:96:4c:49:db:b0:db:fa:8e:1b:80:2a:17:85:21:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:12:4C:BB:1E:E0:80:7F:A3:A6:97:90:64:CA:88:4F:85:38:BB:FF
            X509v3 Authority Key Identifier:
                keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:46:6a:99:1a:cf:47:c8:c1:9a:bf:38:d3:44:54:01:c4:17:
         b7:66:a4:10:6a:95:4b:e1:90:41:5b:36:c2:bb:88:36:37:ec:
         07:b1:36:bb:a9:d7:4b:f8:6f:9b:b5:e4:c8:7b:ae:05:2d:8c:
         7b:07:ea:c0:0d:47:75:f5:f7:d2:5b:06:1b:d5:95:93:7c:39:
         3b:59:fe:e1:a0:1b:20:63:39:0e:7c:f2:d0:e7:53:e6:49:c8:
         fc:99:85:2c:ff:39:04:5e:5d:57:98:4d:42:68:53:f6:e2:e9:
         c7:f1:58:91:c0:a7:f3:06:f9:7f:df:d6:d8:dd:6e:b1:ef:5f:
         73:e6:46:16:a8:b9:86:c8:d4:4d:46:66:02:07:56:c2:8f:c1:
         73:e9:2e:2e:1e:f7:ba:01:cb:14:cc:db:41:0a:1e:b6:15:c4:
         a8:4a:47:35:2a:ed:96:9d:15:9e:c9:ea:3e:44:b4:5d:aa:da:
         8d:75:27:48:3c:71:73:27:1b:6a:e8:78:ca:d3:8b:d1:44:55:
         a5:80:6e:8d:a2:c1:80:22:41:77:7f:da:e8:77:73:4a:bc:74:
         4f:7d:ce:ae:16:e9:e9:b9:78:de:51:06:9c:0b:89:2b:4f:3c:
         1d:f0:3c:42:af:18:58:3f:c2:ed:65:e6:a2:c3:7a:f0:43:c4:
         05:f5:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:35 2026 by rpki-client