Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
File:                     xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json)
Hash identifier:          E51+ZOI0k8a5d1GbwfLodzjWbXMCzJUEMH+Jq7kLeb4=
Subject key identifier:   4C:4F:9E:6C:79:04:77:71:2A:4B:15:2D:CB:4A:95:2C:D8:55:8C:F0
Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
Certificate issuer:       /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
Manifest number:          024E
Signing time:             Sun 01 Mar 2026 03:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 03:00:42 +0000
Manifest next update:     Sun 08 Mar 2026 03:00:42 +0000
Files and hashes:         1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: EhX6Q5BRQ9mzQqBIv+65xdPnYvRGr8gaCnQHbJD8azk=)
                          2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: 6ycYKWDDxLZpmHm26socaQ/TH7tL5JbNIeov2Qvj4+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
                          rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
        Validity
            Not Before: Mar  1 03:00:42 2026 GMT
            Not After : Mar  8 03:00:42 2026 GMT
        Subject: CN=69a3abda-b857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:3f:c9:06:46:4e:f2:3e:b0:29:8f:f9:79:
                    1a:60:67:e1:73:c9:77:18:83:c3:db:29:b3:8e:73:
                    87:58:9c:33:64:c0:dc:51:da:a7:55:3f:29:75:08:
                    7b:94:bc:da:9e:86:4c:84:a3:78:b3:a0:87:95:c8:
                    0a:f5:53:b4:6e:76:35:c8:89:d4:f8:2b:19:14:31:
                    af:e7:16:51:b9:cb:f3:a4:7c:a5:f7:1c:69:3e:7a:
                    00:3d:dd:c8:3c:69:41:2b:bc:45:d2:84:5d:d1:04:
                    0b:08:22:7b:4a:c4:f0:fc:1e:48:dc:f3:af:e5:c3:
                    e4:32:d4:6c:67:95:f8:94:86:ad:9d:91:f2:d4:77:
                    81:0f:3b:c1:d9:c0:75:d9:13:6a:84:e5:b3:16:74:
                    c2:59:c5:43:1d:d8:9e:62:db:33:6b:fb:05:75:67:
                    3e:66:bb:28:28:4a:50:5d:11:2f:96:b8:1a:41:cb:
                    c7:a9:6d:7f:d8:74:43:0f:eb:c0:d6:19:25:28:c7:
                    a5:ec:c1:e8:11:d2:64:e4:02:56:7f:3f:88:15:d0:
                    e3:b5:95:a4:af:75:42:4c:94:a3:90:c0:a7:b7:01:
                    48:9a:d7:6a:79:3c:e6:27:0f:4e:1c:df:37:08:e6:
                    59:5b:54:39:d7:0c:e3:68:ce:1e:5c:5e:80:ea:0e:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4F:9E:6C:79:04:77:71:2A:4B:15:2D:CB:4A:95:2C:D8:55:8C:F0
            X509v3 Authority Key Identifier:
                keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:62:55:13:11:99:fa:01:1f:64:c8:58:a8:fe:b0:d3:f2:a5:
         50:24:dc:2f:27:d0:cf:64:41:26:4a:06:1a:98:5c:e4:42:66:
         00:b4:1e:ce:ea:ba:d0:37:f5:40:2b:fa:a7:17:68:b5:ca:0e:
         74:26:4b:4e:96:f3:ba:4b:b3:2d:3e:77:b0:db:f7:39:4f:10:
         89:cd:0f:76:51:9a:0f:77:62:e8:d8:ba:04:3e:fd:c6:57:b7:
         24:fb:c3:77:41:25:7b:4e:b1:55:5c:0b:8f:19:56:68:c7:d5:
         27:e2:a1:65:ae:fe:22:24:41:dd:0e:22:c7:da:c8:ef:b9:d4:
         88:f0:6b:0f:22:76:0b:b2:8a:61:88:77:87:27:d2:b8:83:73:
         5b:ae:fc:7a:fd:42:69:59:e5:f1:6c:ec:fe:84:7e:fc:4e:c3:
         8a:44:d2:fe:07:e2:90:f4:06:d9:58:c6:8d:fa:4c:41:80:1a:
         bc:47:ab:d7:a7:f3:9d:96:e0:06:61:1f:f8:46:30:cf:e7:68:
         6b:bf:bb:9f:95:63:94:e7:85:53:72:30:bf:bb:58:0a:29:d4:
         b8:3a:0f:64:e5:d3:f7:23:38:1a:fd:cf:86:7c:d4:a6:0d:67:
         94:74:b7:58:4c:77:73:0b:7a:f6:fe:14:68:32:2c:89:ff:5d:
         0b:88:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:31 2026 by rpki-client