Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          vOJFzx7vd95FbcVld3k2ky3Q87mwN7NAS7qjU01cenA=
Subject key identifier:   C5:89:8C:8F:B4:3B:DA:BC:F6:C4:AF:D5:8C:62:76:74:0A:FC:CC:95
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          0710
Signing time:             Mon 02 Mar 2026 02:36:14 +0000
Manifest this update:     Mon 02 Mar 2026 02:36:12 +0000
Manifest next update:     Mon 09 Mar 2026 02:36:12 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: N4NrtP6w/c+eGH/4poAtZbvVhJNEwJObiL8E9zRhcMA=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: +C2epm2cuJ3GR0nAkShPOcsEF6oYoWgKxDRuq2dxIhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: Mar  2 02:36:12 2026 GMT
            Not After : Mar  9 02:36:12 2026 GMT
        Subject: CN=69a4f79e-d9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:00:e2:a7:10:aa:54:b8:a6:06:1e:ea:9d:
                    6b:fd:ca:9d:9d:bd:97:fb:c0:a2:da:d5:d2:f0:f2:
                    4e:d0:df:2f:f9:b1:90:93:1a:cd:5d:15:e1:f3:0b:
                    6e:79:6d:89:b1:69:0c:c4:1b:0b:f7:6d:1f:e2:8e:
                    3e:84:a8:56:25:ba:83:55:d8:ac:9a:27:e5:8c:70:
                    8c:80:40:86:29:ab:57:80:54:bf:bd:39:97:d9:f1:
                    95:ca:a2:b1:31:2e:fe:b6:42:fb:c6:1b:79:a1:2b:
                    83:54:92:81:a6:d4:8b:c5:18:1f:b4:96:ed:1a:73:
                    bd:29:a0:93:0b:08:0a:2c:ae:ba:51:1f:5a:16:bf:
                    e1:b7:5d:de:26:9c:ca:ab:68:6b:1e:d5:e2:cc:f1:
                    66:c5:ab:fb:b4:04:1a:12:5a:52:5e:15:d2:9e:9e:
                    ad:a9:b6:0a:a8:0d:9d:61:95:fa:68:b0:94:a0:dc:
                    e5:c3:77:97:8b:ee:7f:0a:3f:45:61:bd:0d:54:74:
                    12:e4:fb:9a:4e:f0:02:e3:e1:12:ae:19:a6:5e:ab:
                    1e:85:1f:9b:ec:db:4e:2c:eb:01:b7:3e:3a:98:ad:
                    10:39:31:0c:8d:76:62:e6:fc:51:3b:d7:62:ec:c4:
                    b9:2d:ae:ef:23:c0:b9:cf:f1:cb:dc:64:a8:62:2b:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:89:8C:8F:B4:3B:DA:BC:F6:C4:AF:D5:8C:62:76:74:0A:FC:CC:95
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9f:8d:46:fd:8e:75:16:c1:22:e6:9c:2d:28:d9:36:8f:c8:
         b3:5c:0b:6f:34:51:7f:49:e7:63:a9:30:fb:d4:ee:e5:47:c9:
         16:0d:f6:a6:50:90:24:63:fe:d2:29:bb:a5:60:b1:ca:13:9f:
         58:62:e5:62:a7:08:cd:0d:d8:d0:35:20:d6:3b:95:2b:b4:d6:
         a2:32:71:89:44:58:0b:ce:e9:9b:99:72:69:e5:8c:da:11:b8:
         db:28:16:34:82:39:42:4f:78:46:64:73:33:55:64:c4:4c:b2:
         4e:4e:ae:69:49:a5:09:aa:81:02:09:84:37:30:cd:66:64:b5:
         66:32:77:b0:ca:0a:ec:13:9f:9c:03:5a:a9:08:88:ad:05:1a:
         e8:5a:1d:a9:aa:c9:db:b3:53:de:ff:9e:f5:df:62:59:94:13:
         64:0f:1f:73:28:2c:5c:3a:71:70:5f:23:32:cd:6b:1c:3d:de:
         b7:9a:c2:ba:ba:3f:db:89:e9:7e:e6:92:ce:3e:4f:52:0b:e2:
         a3:09:29:5c:1d:aa:52:4c:3b:34:a7:02:0c:6c:cb:a8:80:ac:
         ad:50:6a:f4:cc:48:b8:82:af:06:2f:86:f3:30:c7:b2:f8:80:
         a5:cc:5d:bb:b7:cb:5d:69:b2:c3:9a:5b:f7:eb:1d:0a:69:ad:
         38:0c:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:18 2026 by rpki-client