Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          XDWVAcvk0oOMEUnRllPATNImGCr4PTACFNULT9ttyQg=
Subject key identifier:   01:70:04:66:71:DF:40:45:84:05:45:3E:95:E2:0E:1E:24:34:AF:D7
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          01B8
Signing time:             Sun 01 Mar 2026 04:42:19 +0000
Manifest this update:     Sun 01 Mar 2026 04:42:18 +0000
Manifest next update:     Sun 08 Mar 2026 04:42:18 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: XEPujSC+whodjJ+G3agJIQC0Tqm3o4ewGEWz4NsfrSY=)
                          2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=)
                          3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=)
                          4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Mar  1 04:42:18 2026 GMT
            Not After : Mar  8 04:42:18 2026 GMT
        Subject: CN=69a3c3ab-be12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:2a:75:87:de:0a:e7:a0:3d:9f:93:54:c9:
                    03:48:bd:dd:ea:02:5c:c1:f2:8b:df:43:06:0e:9a:
                    d6:3a:f1:aa:90:df:38:87:e6:01:ae:08:b1:df:a6:
                    e8:a6:16:4c:6c:6d:82:a1:4b:be:eb:51:c5:3e:8f:
                    5c:5c:b5:8e:6f:ad:cc:68:18:bb:72:c9:64:42:fc:
                    52:03:5c:d3:d6:3c:65:1f:85:d5:42:83:54:ad:7d:
                    db:6c:5d:02:4a:c5:2f:9e:76:a5:90:89:3e:78:15:
                    98:a7:5c:e6:d5:8a:85:bb:71:71:96:19:5a:ad:22:
                    08:c0:14:53:e4:2a:e3:d7:15:8d:5b:c1:75:c1:85:
                    ed:f3:2f:2c:42:6a:e2:fc:7c:b7:9a:96:e4:37:47:
                    ac:67:ae:f3:95:a3:94:fa:ac:10:9c:94:51:3f:51:
                    b9:93:ec:8a:d3:59:54:f2:f1:96:6f:d4:5c:39:fb:
                    d8:de:eb:a7:71:17:83:9e:c3:9e:75:6e:08:53:00:
                    33:e2:b5:c8:89:c5:18:71:a5:4e:e4:3f:d1:46:14:
                    55:55:c7:f1:26:dc:bb:97:ef:c5:c2:7a:99:e5:db:
                    17:a2:73:c7:96:c2:29:f0:31:86:9b:fb:44:72:a3:
                    0e:69:34:39:8e:7f:ba:a1:cc:f3:05:3d:18:96:6e:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:70:04:66:71:DF:40:45:84:05:45:3E:95:E2:0E:1E:24:34:AF:D7
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:4b:b5:84:56:c4:38:ec:1f:a7:3b:8b:f3:4d:79:21:15:
         5b:a8:33:e7:0c:d0:71:a6:ac:37:aa:1a:45:73:a1:97:b8:2c:
         34:9f:71:e5:b9:a5:5d:55:1f:ee:93:64:a8:e4:38:9c:59:41:
         63:cd:00:71:20:d7:5e:cd:3e:25:cf:dc:98:72:45:b2:57:88:
         cb:9a:c9:44:eb:0d:6f:f3:23:1b:80:7e:b5:5a:c6:e7:e4:22:
         d6:1f:e8:09:f2:0f:bd:53:d6:44:60:83:64:6e:ee:1c:04:c8:
         9c:3c:46:4f:3f:98:70:ba:0e:bd:18:3b:e4:97:ed:c7:57:30:
         02:d5:7a:97:7b:c5:54:95:60:38:23:c0:d8:4c:82:ca:b1:4f:
         1b:76:37:e7:34:86:97:0c:cf:88:cb:96:56:42:be:18:ce:f6:
         5b:61:cc:fc:c8:93:bd:af:d6:ac:b6:b8:a3:b0:90:1a:d2:86:
         2e:a5:3d:10:84:7b:6b:f4:94:a1:4f:71:4c:a6:c4:32:c7:79:
         0c:a2:0a:a0:20:af:ee:e4:be:f8:c3:13:af:79:0a:a9:d7:cb:
         6e:96:6c:83:df:2f:2d:43:bd:d2:49:57:85:3c:86:64:2a:20:
         75:66:60:5a:09:4b:3e:1e:8f:34:d0:8f:d2:55:bf:9c:3c:d7:
         84:5b:8c:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC
QjZGMUVCRjEwHhcNMjYwMzAxMDQ0MjE4WhcNMjYwMzA4MDQ0MjE4WjAYMRYwFAYD
VQQDDA02OWEzYzNhYi1iZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwsqdYfeCuegPZ+TVMkDSL3d6gJcwfKL30MGDprWOvGqkN84h+YBrgix36bo
phZMbG2CoUu+61HFPo9cXLWOb63MaBi7cslkQvxSA1zT1jxlH4XVQoNUrX3bbF0C
SsUvnnalkIk+eBWYp1zm1YqFu3FxlhlarSIIwBRT5Crj1xWNW8F1wYXt8y8sQmri
/Hy3mpbkN0esZ67zlaOU+qwQnJRRP1G5k+yK01lU8vGWb9RcOfvY3uuncReDnsOe
dW4IUwAz4rXIicUYcaVO5D/RRhRVVcfxJty7l+/FwnqZ5dsXonPHlsIp8DGGm/tE
cqMOaTQ5jn+6oczzBT0Ylm7/5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFwBGZx
30BFhAVFPpXiDh4kNK/XMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3
MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m
UzltRG1oVEk0X3U3Yng2X0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAefNLtYRWxDjsH6c7i/NNeSEVW6gz5wzQcaasN6oaRXOhl7gsNJ9x5bmlXVUf
7pNkqOQ4nFlBY80AcSDXXs0+Jc/cmHJFsleIy5rJROsNb/MjG4B+tVrG5+Qi1h/o
CfIPvVPWRGCDZG7uHATInDxGTz+YcLoOvRg75Jftx1cwAtV6l3vFVJVgOCPA2EyC
yrFPG3Y35zSGlwzPiMuWVkK+GM72W2HM/MiTva/WrLa4o7CQGtKGLqU9EIR7a/SU
oU9xTKbEMsd5DKIKoCCv7uS++MMTr3kKqdfLbpZsg98vLUO90klXhTyGZCogdWZg
WglLPh6PNNCP0lW/nDzXhFuMPQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:02 2026 by rpki-client