Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
File:                     4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json)
Hash identifier:          x0Hp7SuQcIgPAe1U8KNLEGGosHCBliWYUAtQIipvV9g=
Subject key identifier:   87:10:DC:D2:B4:49:2A:E6:EA:4B:DD:64:24:CC:69:FA:62:F0:F4:EE
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Certificate issuer:       /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
Manifest number:          06E3
Signing time:             Mon 02 Mar 2026 01:29:53 +0000
Manifest this update:     Mon 02 Mar 2026 01:29:51 +0000
Manifest next update:     Mon 09 Mar 2026 01:29:51 +0000
Files and hashes:         1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: ecwJAVYcRzJLlXfptAGyKN9C7KnGVqpJEAkRBzfq/EQ=)
                          2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: ogPWdmaPIB4wyLKZTqUhVViwgDf8c1wk4GPlPRwnU7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
        Validity
            Not Before: Mar  2 01:29:51 2026 GMT
            Not After : Mar  9 01:29:51 2026 GMT
        Subject: CN=69a4e810-d9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:ba:7d:e5:57:2f:26:b0:83:b1:e9:e9:6b:
                    df:68:56:b7:cc:51:0e:9a:9b:0b:4c:f8:e7:ab:3c:
                    b0:1a:f7:e3:4c:9c:f5:c7:32:f6:c3:56:21:2a:7c:
                    8f:89:d6:45:54:d9:df:b7:da:48:16:d3:72:75:e2:
                    58:a8:68:fc:da:ff:3c:06:39:f7:5a:98:89:39:1e:
                    59:44:6c:8e:4d:e2:32:d2:2d:69:90:ba:31:8f:fb:
                    cd:0a:69:f9:41:4a:39:fc:a8:66:6c:59:a2:a7:05:
                    6c:73:43:d9:79:47:49:f4:22:fa:0c:ca:a6:07:8e:
                    b4:14:97:9c:71:38:16:d8:84:41:ff:31:eb:19:c1:
                    0c:4b:dc:b1:f7:ed:65:70:01:2c:d0:3d:a4:b4:a9:
                    d8:a4:bc:28:20:80:36:8a:90:59:7f:29:76:f2:16:
                    ca:7c:2e:64:5e:cc:3d:d4:45:95:3c:15:a3:8b:3d:
                    bf:78:7e:d1:82:be:b3:c3:30:ad:77:6b:3d:85:55:
                    af:c9:0e:63:95:22:89:87:2a:ec:85:d0:70:2d:87:
                    d3:5a:41:d6:c2:e8:e6:a0:5c:36:a4:95:33:c1:05:
                    0d:eb:ce:d7:ea:ac:6b:af:14:f1:dc:43:f4:e4:01:
                    c9:ee:ea:7e:31:07:c7:45:8e:f9:a9:d9:d4:b7:e2:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:10:DC:D2:B4:49:2A:E6:EA:4B:DD:64:24:CC:69:FA:62:F0:F4:EE
            X509v3 Authority Key Identifier:
                keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:63:42:ee:19:eb:50:fc:d2:27:bb:b7:9c:e8:a0:a2:38:5b:
         93:b8:08:c6:85:b5:16:5e:dc:74:ed:f8:37:cd:18:39:e1:bc:
         f2:70:3f:be:2f:30:02:4a:63:bc:57:0c:d2:66:33:52:62:5f:
         74:9f:87:4c:44:a7:0c:4d:8a:e3:51:a3:1f:0d:61:4f:a4:c6:
         48:f1:63:9a:e4:db:e4:82:da:c2:b6:1a:45:9e:5b:7c:db:4d:
         79:04:a0:ab:cf:0a:3b:5d:b5:f2:3a:ba:be:20:93:76:72:6d:
         76:62:d3:30:44:99:e6:ee:db:81:2e:c6:65:84:20:14:a3:ba:
         1b:86:b5:63:7c:e8:fb:69:9c:4f:c5:8d:8a:8f:01:82:0c:ef:
         fc:94:7c:da:28:f8:58:ba:c7:80:49:58:23:0e:18:d5:c1:a0:
         c1:b5:9c:d0:4d:35:86:34:12:89:d4:b3:53:20:67:9a:ea:82:
         e5:e8:9f:e8:fa:a6:d3:32:39:1b:12:8e:99:51:dc:8c:74:b4:
         87:44:cb:51:bd:46:d6:83:1c:38:15:ca:3e:ac:5f:c2:ce:d1:
         29:6f:32:61:22:e4:55:40:a9:7c:46:33:fc:0e:ea:01:55:2d:
         f8:e5:de:04:ad:58:ac:48:2a:62:40:ea:42:d2:14:11:67:0c:
         e2:84:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:12 2026 by rpki-client