Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
File:                     r1E53KFl4oTVSmzvYft6CRaJGw8.mft (raw, json)
Hash identifier:          qcCA930G3/RzFep+NpKYaixRgpyEYQ31PoIK88sr9Xg=
Subject key identifier:   55:AD:6B:97:DE:6F:D0:E9:DF:24:CD:12:00:13:45:44:D1:60:1C:13
Authority key identifier: AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F
Certificate issuer:       /CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
Manifest number:          0282
Signing time:             Sun 01 Mar 2026 02:25:44 +0000
Manifest this update:     Sun 01 Mar 2026 02:25:44 +0000
Manifest next update:     Sun 08 Mar 2026 02:25:44 +0000
Files and hashes:         1: r1E53KFl4oTVSmzvYft6CRaJGw8.crl (hash: mTu13Z2ZJwwf+MUYFHQbymxAX8k5apnY+TB58EPsao4=)
                          2: 0B237586453311ED9A3F7844C4F9AE02.roa (hash: ozd7QEWzqSc/ZjTprGcRjOYRAvGoQk7Mxlkn94aKvpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl
                          rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918379F, serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
        Validity
            Not Before: Mar  1 02:25:44 2026 GMT
            Not After : Mar  8 02:25:44 2026 GMT
        Subject: CN=69a3a3a8-c74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:9f:70:1c:91:f0:73:8f:97:a6:bb:bf:8f:
                    d9:de:00:6d:72:9b:fa:53:52:90:f1:2b:49:53:92:
                    f3:8e:bf:d6:74:a3:f4:94:bf:50:a9:6e:19:45:39:
                    bb:1c:6b:02:f7:52:46:4d:54:1e:db:74:6d:83:1f:
                    b1:f7:44:f5:5c:9e:2c:58:60:df:af:33:cc:61:e1:
                    65:2c:09:fb:1d:d1:10:76:8d:ef:84:8c:de:db:20:
                    da:92:70:a1:49:2b:4a:9b:b2:f4:07:8a:9e:e2:2e:
                    ff:60:3c:f2:6b:6d:8d:02:58:b1:dc:7a:f7:a1:d0:
                    53:62:96:91:20:1c:df:fa:aa:87:b6:ec:ac:e7:dc:
                    8b:ee:e6:d5:83:38:c2:ad:33:de:b8:a8:39:07:bf:
                    6b:58:12:93:92:c8:1f:a5:a6:97:20:97:2f:a3:3e:
                    06:c2:d4:54:bc:6a:e3:18:fc:d5:f2:c1:14:e2:ed:
                    fa:df:1b:28:cf:b2:e4:9c:2e:5d:db:3d:00:49:a4:
                    35:b9:5d:8a:10:ea:42:22:fe:1f:ec:41:a6:c8:00:
                    f6:c7:fa:cf:a0:7b:04:12:57:88:24:59:63:ac:01:
                    7f:98:7d:40:4c:34:7a:92:cf:6e:cf:5a:c7:84:ee:
                    26:dc:ad:39:bc:e5:a8:75:46:4e:61:d1:8f:ad:ae:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AD:6B:97:DE:6F:D0:E9:DF:24:CD:12:00:13:45:44:D1:60:1C:13
            X509v3 Authority Key Identifier:
                keyid:AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e2:69:34:15:19:ad:4b:b2:a7:69:c3:ce:aa:ff:55:f2:da:
         de:a5:c5:5d:8c:cc:47:b5:f2:41:ce:5b:b8:ed:09:d4:2b:28:
         1c:a5:ca:9c:4f:89:cd:1e:e6:9d:c1:a8:0e:85:36:3a:18:3b:
         16:84:3b:24:d6:4a:69:1f:27:c8:ad:e1:3a:d4:46:a7:35:c2:
         b4:fc:5c:4b:42:4d:81:d4:f6:b9:a4:c0:18:24:2e:a9:d4:20:
         1e:d2:3a:65:00:f1:0c:d9:8e:82:31:b7:e6:8d:fc:7c:df:5e:
         85:46:ca:2e:c9:0e:72:65:da:c2:cf:05:8d:df:1b:c1:f3:58:
         75:41:76:32:6a:f1:09:11:08:bd:ae:0a:87:48:28:6f:ce:a9:
         85:2e:ea:ad:43:74:22:b1:01:bf:62:52:bf:6e:b6:a5:d5:36:
         de:e6:88:3c:ce:03:8e:f5:fe:23:14:2e:3d:d3:97:03:c8:51:
         9e:a3:68:c1:2e:84:e3:fc:aa:59:02:96:e7:55:9e:b6:f4:b8:
         e1:58:f0:76:c0:d4:6e:46:f0:92:88:b8:94:8a:ef:70:e3:30:
         bb:45:04:7c:ed:4a:61:1a:21:2c:49:b7:36:be:d0:1c:fb:c5:
         25:93:f6:aa:1c:bf:9f:7a:4e:73:29:8b:e7:89:da:d6:f1:b3:
         32:78:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:02 2026 by rpki-client