Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File:                     cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier:          mv0QsQvl9K6EUpegkjMPvboQVbkSPzuaRnVYewteTvM=
Subject key identifier:   CE:8E:D7:EA:9D:26:24:84:71:77:02:A4:D6:AC:D8:01:A5:71:7D:F7
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer:       /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial:       0820
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number:          0818
Signing time:             Sat 28 Feb 2026 21:25:57 +0000
Manifest this update:     Sat 28 Feb 2026 21:25:56 +0000
Manifest next update:     Sat 07 Mar 2026 21:25:56 +0000
Files and hashes:         1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: kbtfgaehZRfyTZtXGMRN2o609ccZ5E1afliwx15CMFw=)
                          2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: GZbNr4hWJMQHmwZjxnOSE/qUptolcknoCfCUMmvTKYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
                          rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
        Validity
            Not Before: Feb 28 21:25:56 2026 GMT
            Not After : Mar  7 21:25:56 2026 GMT
        Subject: CN=69a35d65-85f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:da:02:bb:46:17:03:b3:9a:c1:5d:a9:00:
                    a2:7e:08:fd:f2:a5:35:ff:61:64:b1:00:13:45:a8:
                    a6:eb:95:8c:67:5c:bb:7a:47:9f:c5:36:3f:8b:fd:
                    23:33:40:ae:d7:c3:fa:3c:8b:18:20:5f:f7:05:10:
                    dc:bc:5d:a1:28:85:16:ab:c7:6f:81:d9:8e:0b:f1:
                    96:b5:68:64:1b:a8:0f:6d:7e:ac:1c:32:8e:4a:24:
                    a0:b6:af:9f:50:77:69:ab:9a:4a:d2:9d:fd:c3:bb:
                    89:c3:3a:52:9a:11:ed:17:0c:7d:f5:9b:f1:7d:71:
                    21:df:b8:f2:1d:e1:ca:32:cd:1a:c8:47:a0:df:d2:
                    6b:05:7d:3e:4f:c8:6d:3b:44:ac:4f:c5:e9:8e:58:
                    c7:1f:58:bb:8b:68:3c:16:ee:33:0e:ac:b6:56:01:
                    f2:94:de:e5:8e:69:53:a2:aa:44:c4:bc:1d:67:4b:
                    c1:27:04:84:a3:06:79:38:50:4d:f2:76:ed:22:ac:
                    41:e9:6a:62:12:1a:47:22:ce:19:16:d3:cb:08:06:
                    b5:97:c4:23:2c:17:47:9b:95:4f:70:fb:cf:c1:0a:
                    29:46:cb:2d:24:73:37:34:24:c1:e2:1a:84:1e:08:
                    42:f4:aa:07:55:50:f3:44:e8:dc:87:62:de:ac:da:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:D7:EA:9D:26:24:84:71:77:02:A4:D6:AC:D8:01:A5:71:7D:F7
            X509v3 Authority Key Identifier:
                keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:46:bf:fd:20:1a:1e:37:53:ec:7f:55:58:e5:8f:b1:86:a0:
         6f:29:2a:7f:77:d9:ce:38:b6:84:23:e6:f4:4a:9c:a1:88:0e:
         87:c7:3d:b1:b7:2c:ce:b2:74:3e:af:dc:da:cd:c1:2b:5d:f4:
         4a:3d:f5:95:18:5b:83:c0:5f:fe:6b:6c:c6:75:0b:b9:c9:ea:
         0e:c1:67:05:ae:8d:51:26:8e:9e:79:c6:f8:3b:9a:71:9a:5e:
         e7:ef:b7:37:3f:e7:37:12:85:de:c1:2f:26:22:1b:bd:57:c2:
         79:3d:b3:16:0e:51:f0:10:3d:70:44:e9:b2:bb:af:75:98:9f:
         09:a9:c2:42:2a:80:35:be:34:2e:a9:08:5d:3d:f4:0d:a1:e0:
         53:b6:65:15:94:39:cf:53:05:b7:c5:0d:13:a8:76:34:63:21:
         83:33:11:04:4d:c4:48:26:03:c7:b6:51:e3:64:14:b9:e4:30:
         e6:55:b8:5f:61:76:0d:f6:44:bf:f3:3e:94:d7:32:53:53:c2:
         2e:7c:50:16:a2:2e:9d:ed:32:e5:47:71:15:4c:0e:30:27:2e:
         3d:55:95:0b:95:70:53:6e:5a:83:47:a5:f4:0a:89:3b:c4:f0:
         62:ee:62:a7:db:a8:ce:2c:a6:5e:73:38:74:88:4b:e6:c9:c7:
         3c:b6:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:10 2026 by rpki-client