Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          JANP2bhMuiwftgFX3+bnYmh2b2qE3Oz+SFdHH9ZTBzA=
Subject key identifier:   D2:DE:3A:3D:D9:BF:4A:C1:5A:77:A6:23:27:62:E4:70:06:11:D0:27
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       30DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          30AD
Signing time:             Sat 28 Feb 2026 15:28:40 +0000
Manifest this update:     Sat 28 Feb 2026 15:28:39 +0000
Manifest next update:     Sat 07 Mar 2026 15:28:39 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: aqf57zt0y1Hz1JrVBW0QPspOIWWjH9CV/cOEYlpNfgg=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12510 (0x30de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: Feb 28 15:28:39 2026 GMT
            Not After : Mar  7 15:28:39 2026 GMT
        Subject: CN=69a309a7-f91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:03:98:94:d6:63:23:02:c9:48:6f:57:aa:68:
                    73:e9:1e:86:b4:ad:ef:c6:fb:ea:06:5e:15:d4:b6:
                    4e:db:c1:3e:3d:cf:b5:55:f1:c2:e2:4b:84:fc:fd:
                    96:e8:90:35:7b:ae:8c:c3:37:da:2e:83:d5:9d:41:
                    2e:fa:7e:9c:1b:a1:a9:51:d2:17:e0:47:78:16:f3:
                    c9:dd:df:bd:78:d1:e6:7b:c1:7a:3b:ce:63:cf:df:
                    2d:68:43:f6:cb:f5:a0:ad:b2:c1:f0:67:f6:a7:81:
                    5f:2e:b5:14:f4:50:4c:a7:4f:cc:00:94:f4:78:c5:
                    e6:df:94:6f:40:f3:97:f0:57:e6:f3:63:1f:16:e7:
                    a5:2c:09:96:b1:67:af:a9:35:26:ff:50:6c:93:89:
                    98:f1:3c:1e:8d:31:2b:de:8d:50:73:8f:66:48:e1:
                    e3:a4:8f:04:ed:4d:a3:1c:fe:bb:75:6e:32:d2:7f:
                    a7:a8:64:34:7f:ca:3a:1f:91:fe:da:76:f1:50:25:
                    4d:12:4d:77:d1:d2:c0:e7:87:c3:0a:56:1b:76:86:
                    f8:d0:97:57:9e:47:fc:bc:13:96:16:f7:9e:c0:15:
                    76:e7:4a:90:2f:df:ef:59:17:86:ea:60:c3:73:4b:
                    d1:3e:5b:b6:05:c4:de:46:f7:e7:33:52:eb:59:91:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DE:3A:3D:D9:BF:4A:C1:5A:77:A6:23:27:62:E4:70:06:11:D0:27
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:f6:ad:89:ca:af:72:9b:58:ff:83:93:0c:05:6a:39:58:
         4e:85:9f:4a:c5:c8:b1:4a:21:36:28:77:84:05:f7:0c:36:8b:
         da:6a:92:f8:72:fc:23:01:c6:d5:1a:6f:aa:dc:bd:d0:f5:b0:
         b1:8b:52:7e:17:1a:98:10:c1:b9:cc:e7:1e:b9:ea:5c:b2:f0:
         8b:65:66:1e:04:f7:b9:ba:bc:84:52:37:8c:fe:e7:56:bc:c8:
         5a:f4:8a:b5:76:a8:92:85:c7:81:ae:3e:58:d7:b5:7c:61:ea:
         64:16:32:4b:9e:55:de:42:bd:1e:e9:5a:15:bc:db:c6:39:9e:
         76:fc:30:54:8f:d7:72:51:5f:42:6d:0b:9e:1f:4b:2b:df:1b:
         45:55:fb:42:be:58:c0:1e:3e:87:01:01:a9:07:48:79:3c:da:
         48:d4:38:0f:28:e1:c2:10:7b:59:1b:68:ca:fa:64:7d:3e:1d:
         02:7b:1c:2b:90:ec:4e:54:87:92:e0:d8:86:3f:75:29:69:4e:
         dd:db:01:77:a2:61:d9:ba:23:37:5a:75:8b:d1:f2:81:ff:29:
         70:3a:e8:0a:4a:a6:4d:2d:09:fc:73:5b:c2:b7:ba:9e:a7:e2:
         5f:e0:7c:88:f3:af:28:2c:c5:31:69:e3:08:ec:b0:97:c2:02:
         8d:58:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:27 2026 by rpki-client