Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
File:                     64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json)
Hash identifier:          2ceCSwpVX6ZbJxgAsMochGBBCYElBfLqPFYKDuOiAoo=
Subject key identifier:   2D:0D:FB:F7:FB:17:01:67:CF:5D:48:93:19:BC:76:C6:3B:BA:3A:F0
Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Certificate issuer:       /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
Manifest number:          D6
Signing time:             Sun 01 Mar 2026 07:50:46 +0000
Manifest this update:     Sun 01 Mar 2026 07:50:46 +0000
Manifest next update:     Sun 08 Mar 2026 07:50:46 +0000
Files and hashes:         1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: LVpqxEFmcOxbMEKgjNukh4WtNbJ86BYGuxFezE4f/ME=)
                          2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: axjVULUTFb8CYDTXrhOhJLplCPWbX9PQc6qvgFAiIyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
                          rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
        Validity
            Not Before: Mar  1 07:50:46 2026 GMT
            Not After : Mar  8 07:50:46 2026 GMT
        Subject: CN=69a3efd6-6160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:c7:22:21:f3:9f:09:8b:77:3f:c9:67:93:
                    66:05:08:1c:a3:e8:20:c6:12:40:7f:2d:3d:b1:30:
                    4b:a3:11:73:42:69:3e:c9:62:d4:1f:ad:d2:c3:d7:
                    e0:5c:97:c5:2b:65:e6:7f:87:76:67:ba:47:b0:9b:
                    b3:8f:db:67:b5:f1:0b:2e:aa:a3:c9:fb:67:53:5c:
                    89:49:2a:c2:6b:f3:f1:2a:73:96:27:ef:3e:54:35:
                    c8:4a:95:7b:3c:59:f5:8a:66:2d:5d:39:e0:d9:b4:
                    e5:eb:37:39:60:65:98:de:78:04:9e:44:1e:12:11:
                    a0:73:d5:07:dc:e5:df:d3:46:c9:a5:f3:2e:b8:83:
                    e0:49:3c:09:fa:aa:75:55:b6:47:f1:64:1c:31:cf:
                    44:cd:d6:48:7b:00:90:11:1c:5c:4c:b6:b9:fb:25:
                    34:da:e3:e4:d2:83:af:7d:f3:35:b2:90:96:cc:a1:
                    52:1f:f8:71:99:48:77:23:0e:6a:c5:5e:a7:21:b3:
                    c2:54:10:53:b1:2f:84:e9:d7:84:1a:9f:d0:f8:e7:
                    13:4b:11:72:06:26:62:1e:5e:57:ae:ec:6d:8a:93:
                    4f:ca:51:99:ab:19:5b:7b:eb:c4:7e:6f:db:cf:ac:
                    e0:f3:83:3f:d2:fe:be:ee:a1:fd:d9:d0:bc:73:e4:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:FB:F7:FB:17:01:67:CF:5D:48:93:19:BC:76:C6:3B:BA:3A:F0
            X509v3 Authority Key Identifier:
                keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:31:61:08:2e:22:d5:84:53:a1:ef:6d:1c:bb:44:be:7e:
         d7:d4:85:e9:f1:91:6b:9b:81:c4:ea:23:96:db:b0:92:6f:92:
         f7:05:03:18:5e:e2:50:79:cb:99:42:4d:ab:b8:2f:80:0c:32:
         2c:67:2e:4a:8e:20:cb:78:22:79:26:25:31:73:97:91:87:94:
         50:58:d7:92:82:1a:d2:58:c6:32:65:95:88:e3:fa:4c:b3:1f:
         04:f0:f3:d4:e6:3a:9a:fc:e1:57:fa:2e:ee:44:a1:3d:a2:2c:
         40:03:d5:2c:95:6f:7a:e6:56:fa:16:4b:77:c4:3f:17:0a:f6:
         38:2b:39:00:1b:24:12:73:c3:37:c9:42:d3:56:8e:7e:6f:be:
         86:67:72:e6:f9:6c:7f:8d:36:89:af:0b:e1:ed:d1:b7:9e:0c:
         80:71:8b:67:c3:35:ec:56:29:2d:f4:84:04:9e:e4:4c:fd:eb:
         a9:b5:31:c9:8c:ba:6d:c7:16:55:34:1c:71:fa:12:17:10:13:
         7a:bb:0b:35:7c:a1:4f:89:4e:ec:15:06:b6:01:e2:37:2b:b7:
         ab:27:0a:e3:af:13:da:cb:8e:14:87:65:7a:f4:63:0d:af:aa:
         08:31:25:cc:9a:ad:38:18:02:f6:57:c7:ec:3d:06:08:61:b8:
         9d:f9:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:44 2026 by rpki-client