Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
File:                     cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json)
Hash identifier:          JZt29Z/pC1RPSYGDRCZYeiKztiSbn/YCFvr5vTfyRrU=
Subject key identifier:   F3:E6:AD:46:B0:57:E6:67:16:08:34:E2:DD:76:19:08:50:6C:26:38
Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Certificate issuer:       /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
Manifest number:          0118
Signing time:             Sun 01 Mar 2026 06:51:51 +0000
Manifest this update:     Sun 01 Mar 2026 06:51:51 +0000
Manifest next update:     Sun 08 Mar 2026 06:51:51 +0000
Files and hashes:         1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: lgPpFwqOjlnyNWsGy1A4+kRiG3dlLy2yk2uRCVjmzLg=)
                          2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: CaDrsHhMr2SW3agEhOrGpPTbVn2zv/JRiQ35B1c4T/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
        Validity
            Not Before: Mar  1 06:51:51 2026 GMT
            Not After : Mar  8 06:51:51 2026 GMT
        Subject: CN=69a3e207-8d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:b9:ac:22:de:2e:33:35:74:70:47:50:f7:
                    17:a7:f0:c4:be:31:7c:11:b4:34:45:0f:4d:98:a0:
                    14:f8:9a:94:b5:f7:08:d1:1f:69:c0:a2:0f:b6:2c:
                    3e:fd:09:2f:8d:4b:cf:0e:f2:ca:9a:81:b1:05:99:
                    73:78:86:47:e3:8b:fc:76:0d:8f:a7:25:90:52:e7:
                    87:05:f6:44:be:24:f9:90:d4:9e:c4:df:14:2d:9f:
                    1c:71:d4:80:45:95:23:da:c2:d9:ed:59:fd:c1:d7:
                    97:a7:df:71:fc:8d:ad:77:d3:5e:05:64:31:eb:cc:
                    af:22:d4:9e:08:17:55:ae:65:05:88:62:ee:cb:bb:
                    20:2d:05:f7:d2:ea:cd:04:2b:e4:50:4c:1b:bd:3d:
                    11:76:1d:cb:07:86:5e:61:9e:30:d9:5e:1c:ba:5b:
                    54:19:0c:3b:38:12:dd:91:1a:1f:c9:e0:8f:93:8e:
                    f9:c8:0b:7e:7b:15:39:e9:58:4e:c7:4f:ce:2b:1d:
                    73:48:b7:bf:37:4b:a3:d0:9f:92:48:af:99:09:79:
                    11:45:de:72:61:41:f8:fc:7b:33:72:78:4a:c4:b1:
                    4d:5a:c6:7f:b1:0b:66:4c:a2:e1:17:a4:ca:5f:c1:
                    0b:e7:34:fb:be:11:6e:67:f7:1c:f5:7c:39:d2:fc:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E6:AD:46:B0:57:E6:67:16:08:34:E2:DD:76:19:08:50:6C:26:38
            X509v3 Authority Key Identifier:
                keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:84:bd:8d:1f:bc:c3:a3:a5:91:ec:50:40:4b:17:4b:9f:
         8a:b1:d1:75:c3:ee:f4:31:5e:23:56:2a:7c:d1:85:18:9a:ad:
         40:a7:93:f1:31:bc:0c:77:08:42:cb:c3:42:8a:f5:00:ed:50:
         6e:b5:3e:85:0f:80:57:38:03:34:46:d8:5d:00:9a:17:70:9c:
         22:e7:bb:fd:71:1f:45:ad:3e:5c:0e:2a:f7:bd:84:f1:a1:dc:
         e2:05:9a:61:c0:40:fe:94:cc:08:a4:3f:ff:d4:03:00:bc:d3:
         20:c1:af:17:31:4c:1d:8a:9f:81:ce:40:14:5c:c7:78:80:8a:
         59:53:02:43:d6:04:b5:0a:71:8c:cd:6c:d6:2b:ee:86:0d:48:
         30:eb:79:1c:87:e0:ae:04:67:6b:ea:d0:3c:be:b5:cf:b9:c6:
         81:90:bf:06:50:d6:a6:51:0a:95:b4:6a:33:a1:56:88:24:fb:
         09:00:c9:d6:21:77:a6:59:8c:74:7c:7c:c0:ef:32:fb:96:9c:
         74:09:08:8e:d9:d7:0e:54:a1:3a:7e:ad:86:17:04:d4:12:8c:
         b9:9e:f5:fd:3b:36:b5:04:11:b7:0b:ae:2d:87:c0:99:e0:82:
         aa:27:21:b4:f5:59:cb:5f:b1:20:36:77:e6:f4:84:9e:e8:91:
         84:52:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:41 2026 by rpki-client