Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File:                     cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier:          NO4RupZzHuwZ2Xe4zfiuFfan20zxC9AMetjRFuS936M=
Subject key identifier:   7B:32:12:FF:61:CF:0B:6B:BD:0C:8A:07:E8:5D:5D:41:94:04:86:88
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer:       /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial:       0696
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number:          0691
Signing time:             Sat 28 Feb 2026 22:58:37 +0000
Manifest this update:     Sat 28 Feb 2026 22:58:36 +0000
Manifest next update:     Sat 07 Mar 2026 22:58:36 +0000
Files and hashes:         1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: A4FKNUJbuwdmwVWIs799LKnSLPy5M6QwVyFjAaQWjsM=)
                          2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
                          rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
        Validity
            Not Before: Feb 28 22:58:36 2026 GMT
            Not After : Mar  7 22:58:36 2026 GMT
        Subject: CN=69a3731c-2ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:09:ad:be:4c:23:30:f4:c7:4a:0b:32:72:
                    e9:8b:45:05:b2:c1:43:4e:73:c3:22:48:a4:71:39:
                    8c:5a:24:ef:07:71:e4:00:66:06:10:b2:d3:12:fc:
                    f7:bd:4e:2e:d8:79:39:56:6e:72:51:73:c1:b7:60:
                    7f:be:1c:64:ba:54:6c:7e:5c:72:9a:f2:36:c4:21:
                    06:6e:59:76:e4:99:42:67:1f:6e:22:e7:9a:01:f2:
                    52:fb:aa:5b:58:34:4a:ee:99:f1:61:98:43:9e:66:
                    09:35:93:6e:f1:d7:11:a8:66:48:c0:19:00:08:d3:
                    37:c1:64:5b:a9:8a:49:90:b6:74:f7:65:c4:13:91:
                    9a:e1:19:cb:85:92:9f:ef:d2:b5:1b:e0:bb:1d:0e:
                    98:0b:f6:dd:a0:3d:7f:23:0f:12:45:63:48:5b:45:
                    43:5d:0f:d1:bf:cf:01:fa:92:09:19:0f:a2:52:91:
                    78:e6:32:1d:6a:74:6f:be:dd:f0:87:32:b7:f5:02:
                    e3:e4:54:51:69:ee:15:06:8f:86:63:da:8c:29:33:
                    93:77:38:5a:08:03:f4:c4:83:02:a5:ec:97:e9:a7:
                    38:21:59:a9:d0:4b:df:c1:da:fa:d8:11:ab:0d:45:
                    12:d7:73:be:24:16:55:ca:f8:58:9c:4e:5c:ae:ca:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:32:12:FF:61:CF:0B:6B:BD:0C:8A:07:E8:5D:5D:41:94:04:86:88
            X509v3 Authority Key Identifier:
                keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:98:fd:dd:bf:8c:44:bc:77:43:6b:c2:14:0a:8c:18:80:5e:
         96:fe:57:74:d2:9e:88:f3:96:52:86:b3:ce:37:32:60:03:55:
         32:4e:37:5e:15:4f:c7:c5:b5:72:70:90:8f:d1:21:e9:91:31:
         0c:72:34:ef:13:eb:e5:35:70:0e:6d:44:5c:c9:1b:bf:d7:f9:
         a3:f4:50:32:58:0c:1b:b8:e1:aa:85:73:e6:e5:c7:b5:53:08:
         aa:85:da:34:0e:e7:a1:ef:4e:9f:b0:16:9a:f6:60:9a:63:34:
         dd:6b:34:2a:75:cd:e2:7e:ee:49:7b:48:b8:9c:2a:5c:ab:18:
         18:88:25:47:2d:1a:45:64:5c:df:a2:97:7d:aa:55:46:ee:5f:
         4e:80:8a:e6:fb:e0:51:c5:cc:c6:9d:29:00:27:90:d5:c9:18:
         61:0b:be:0c:51:a2:64:85:c4:1a:e2:93:b3:a9:ee:4f:53:82:
         a7:55:7a:86:dc:74:94:f5:bc:64:c7:cc:62:a3:7e:b9:16:55:
         9e:f1:ac:9a:f4:ea:af:00:46:cb:15:9e:2b:28:6e:f2:e5:70:
         48:a2:ff:af:af:81:42:c8:38:a8:f1:c7:c0:db:85:6f:da:d1:
         10:5d:fe:a0:db:e2:f2:6e:d2:45:48:fe:43:82:ee:91:1b:98:
         32:1e:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:55 2026 by rpki-client