Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File:                     zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier:          fmSZ73ojH4AcRE9uWfqxSuimD7cvu9b/uBHuaqbw6LU=
Subject key identifier:   C5:28:62:BB:87:62:F3:D1:71:05:0B:F4:6F:9B:B2:0F:37:51:79:51
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer:       /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number:          0177
Signing time:             Sun 01 Mar 2026 05:39:38 +0000
Manifest this update:     Sun 01 Mar 2026 05:39:37 +0000
Manifest next update:     Sun 08 Mar 2026 05:39:37 +0000
Files and hashes:         1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: 5cv7y0oWmnQv2nH6bWnT5cumBUsn8bA1NyFvb8/5rt4=)
                          2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: hY+WBxth/lAZALcZKOl0NdDTBPt+g1JRrMamT62Ug8Y=)
                          3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: ZMzt6+sDURZRj9SORwz4xyVEywoycXbQFfz3gvK4NSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
                          rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
        Validity
            Not Before: Mar  1 05:39:37 2026 GMT
            Not After : Mar  8 05:39:37 2026 GMT
        Subject: CN=69a3d11a-f926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:0b:c3:a2:23:23:5a:00:22:a8:3e:83:81:
                    15:ba:d0:84:52:4a:b3:0d:f3:85:ca:19:54:d8:79:
                    d1:c9:0f:ec:d8:53:cc:c5:7e:81:48:4e:44:74:43:
                    41:ac:74:81:c0:f6:4f:53:57:e1:9b:d9:98:aa:f4:
                    df:23:54:f4:c0:84:ff:d5:b4:98:f9:7b:07:1b:17:
                    bb:7a:90:74:75:1f:81:29:ec:23:a3:0b:78:86:c0:
                    c7:b7:65:37:cf:15:08:22:1b:a6:19:58:7c:4f:d7:
                    65:8e:45:cd:a7:a0:20:6c:2c:20:67:7a:a1:a7:93:
                    d1:63:53:b0:d9:96:f4:bf:3e:78:61:05:82:99:45:
                    ad:f8:f6:7e:14:9b:e3:db:5e:4b:94:d5:71:1f:35:
                    93:73:2f:78:db:b9:74:45:ba:b4:c2:4e:3a:62:1a:
                    30:33:38:00:37:68:b3:36:5f:ac:67:a6:6f:61:79:
                    19:28:19:b4:e1:52:f6:b8:aa:ff:b8:18:81:71:37:
                    fb:c6:6c:77:ab:0c:b9:99:18:83:43:61:af:2f:27:
                    3d:bf:48:0d:99:3b:ad:bc:ed:f5:7a:6a:0d:64:ec:
                    cc:2e:a2:11:fe:51:d2:2b:0f:40:e6:f5:21:60:08:
                    5c:e4:ab:3f:49:9a:64:57:45:55:74:c8:8d:e2:ff:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:62:BB:87:62:F3:D1:71:05:0B:F4:6F:9B:B2:0F:37:51:79:51
            X509v3 Authority Key Identifier:
                keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:9a:87:66:ef:71:d2:cf:d6:31:7d:00:16:6f:b1:d6:21:
         bb:4d:67:8e:cc:d0:c7:ad:bb:7d:7e:37:84:b5:0d:6f:08:1d:
         1f:40:57:43:e1:24:f9:53:33:40:6c:95:05:d8:a4:0d:41:dd:
         07:82:7d:28:43:ba:3d:d2:6a:ee:da:e9:78:ad:3f:66:11:88:
         fe:fe:38:61:2d:4e:2f:aa:ae:39:31:b6:7f:c8:99:eb:60:ab:
         09:47:b3:5f:36:1c:b4:8f:26:75:1e:30:f3:c7:7c:aa:66:11:
         d9:23:c1:a5:b1:ce:a6:66:ce:d5:50:42:d1:2a:52:75:fb:a1:
         43:58:3b:ad:41:83:fe:9f:fa:d4:85:af:ad:24:70:d4:5a:18:
         5e:7d:dd:fc:c8:b8:9c:ee:cb:84:7f:a6:f3:1f:da:9d:81:d0:
         19:d6:9c:1f:96:2d:85:50:71:3a:bb:fd:38:94:0f:98:29:50:
         3d:e2:9c:03:ec:09:31:76:22:49:b3:3d:d9:63:a6:28:df:ba:
         b6:d6:75:fa:e1:0e:22:19:76:99:85:42:90:9d:49:8d:64:1d:
         27:1d:c6:d9:24:0e:c2:2d:5d:7c:6b:33:60:b9:c4:6e:51:db:
         33:5f:43:a0:79:88:4c:89:d3:bb:83:37:f3:d5:1c:43:7f:2c:
         25:19:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:18 2026 by rpki-client