Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File:                     70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier:          SC69bD4OQjoq8Bn552OP5i+ykoi4clqxxzmryAfaeiI=
Subject key identifier:   DA:8E:4A:CA:10:3B:AA:51:93:1A:F5:FE:EA:2B:FC:7F:5A:2C:DF:4A
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       0780
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number:          074A
Signing time:             Sun 01 Mar 2026 23:27:52 +0000
Manifest this update:     Sun 01 Mar 2026 23:27:50 +0000
Manifest next update:     Sun 08 Mar 2026 23:27:50 +0000
Files and hashes:         1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: WoNw6yCnKwqBOgZ9Q8ibOcO+q2T900eaGaHbVorlEkY=)
                          2: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: mr8KwOkVa8RAea/BYVd3YUG6na4L4IGVAN/w6VWKUIw=)
                          3: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: 4thkndOJT3+vXRn8C465Fs6jq2L+GeTYNEVafFWoUXs=)
                          4: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: phlxZambGxwdatRQWNb2Yjt/alGa6e8xzyqiiNU2+mQ=)
                          5: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: GtRv2G1MeWMHZlw+kEpfpaWB79CdGXzgFC1k73nj5d0=)
                          6: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: JyT9d9OOCJrRzpFBrxSBmC+CtEx3ZAy2eSQHymf45+s=)
                          7: 34956990D75511EF80E68A39C4F9AE02.roa (hash: t2VblrPsPkg3OLGXiwM69R4XdRcwB3mySF4/73qDgbo=)
                          8: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: hn072ZUt0QkiLvSmGaoI0bZ5eHexJ3APJASDMCiyA2M=)
                          9: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: vtp4YKFz/A5Vi0zg64GLZs1k3ocvwIIzZCuiJxmejGs=)
                          10: 05F05106586011EE9399A92EC4F9AE02.roa (hash: d5Czd9F+MkzuB9PBir/JbWAghXpmJN+auVy0L4FfZfQ=)
                          11: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: aSxgIlw8nZiN+6lgLNU5XvZ1FdnFtkSevs0pTTJMvJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Mar  1 23:27:50 2026 GMT
            Not After : Mar  8 23:27:50 2026 GMT
        Subject: CN=69a4cb77-d190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:d3:49:03:f0:c8:7b:37:f6:ec:a9:33:d2:
                    9a:bc:cf:a8:f9:fa:9f:e5:5e:70:94:53:17:2e:ea:
                    e0:3c:5c:dc:f2:72:27:d6:b0:75:59:42:ce:e7:da:
                    45:e5:90:3a:26:cb:a5:bd:80:35:c7:2a:36:c6:4c:
                    e9:a3:a9:c2:27:42:4c:fe:16:d6:81:ae:7a:e6:9d:
                    f9:41:52:cd:98:c6:5c:67:5e:82:21:75:f9:b4:a8:
                    28:da:e1:29:a1:04:4d:ae:71:2d:2e:44:9b:50:fe:
                    42:4b:e2:87:81:c4:e4:17:33:d2:13:07:a8:06:00:
                    df:a5:5a:07:c5:5c:c6:bf:5e:8e:0c:14:fe:f5:a4:
                    27:93:98:0f:09:3b:20:41:06:bc:1e:dc:39:89:16:
                    06:94:3a:ed:a6:9c:4f:07:a2:2c:57:a8:89:36:6e:
                    84:8c:cd:c1:2b:d7:a7:7a:2b:12:8e:97:74:a8:b3:
                    d4:19:25:75:cb:22:cf:a7:12:52:8d:65:40:52:5f:
                    68:31:e9:75:c8:ae:c9:8b:5d:fa:01:b0:10:34:b7:
                    da:e4:dc:a3:45:1b:fc:7b:86:73:e3:17:41:1d:87:
                    95:c2:f7:28:15:32:50:ab:58:21:5f:6d:24:63:08:
                    73:8f:6d:78:0c:8b:84:ab:e7:54:b6:4b:35:8d:12:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8E:4A:CA:10:3B:AA:51:93:1A:F5:FE:EA:2B:FC:7F:5A:2C:DF:4A
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:55:6b:3d:76:f7:06:a0:64:06:ea:31:a1:bc:4d:20:71:
         61:a8:bc:89:7b:e5:a0:dc:d6:a1:e3:5e:49:6c:04:2a:73:be:
         5c:1e:e0:50:5d:73:17:89:9d:91:de:76:83:ee:43:22:bd:07:
         04:ec:82:f9:4c:6c:b8:14:25:32:ed:94:cf:03:85:90:96:27:
         82:ff:cd:94:2d:78:c5:4c:77:80:f6:e1:59:a3:a2:97:51:66:
         62:9a:30:83:07:9e:c9:77:55:db:91:1d:29:a4:a3:a4:79:29:
         83:a7:55:e6:17:6e:de:28:cd:ba:bd:98:97:6c:93:0a:7f:49:
         4c:d0:35:b4:e4:c4:5c:f8:c9:f2:c2:e7:2a:9b:32:2e:fa:35:
         ff:32:e9:a7:af:5f:59:da:67:f1:86:bc:da:ff:9b:94:bf:10:
         a7:e7:0b:6a:7e:48:8f:50:7f:76:6c:c8:8e:17:91:9b:aa:06:
         8c:b9:97:37:e8:c4:0d:ad:61:5b:9a:09:66:46:2e:f7:f8:73:
         37:02:b7:11:79:bc:19:5b:02:a8:cf:40:6d:18:08:12:47:41:
         97:8b:09:49:98:d3:9e:98:d8:fa:10:ed:55:a9:43:c8:33:c1:
         9a:91:1a:2e:20:95:db:6a:b4:c7:77:69:6c:37:00:f8:bf:0b:
         7d:22:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:56 2026 by rpki-client