Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File:                     aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier:          ShAprXb5bwhcQCAUl2gOGK0nX4UB9ROdxASbdrYPqSE=
Subject key identifier:   33:42:1E:B4:39:A3:44:43:49:88:09:C6:82:9E:16:D7:E3:81:C3:17
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer:       /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial:       082D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number:          0826
Signing time:             Sat 28 Feb 2026 21:20:28 +0000
Manifest this update:     Sat 28 Feb 2026 21:20:27 +0000
Manifest next update:     Sat 07 Mar 2026 21:20:27 +0000
Files and hashes:         1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: A3xh6cHuFswtet2O42e0lodvWJ4YVU7TPioC6s20xxM=)
                          2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: OzhrEAQM423OnNsjFX/pRulyswUafC9dzCD/mgitV0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
                          rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
        Validity
            Not Before: Feb 28 21:20:27 2026 GMT
            Not After : Mar  7 21:20:27 2026 GMT
        Subject: CN=69a35c1b-8000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:46:3c:7b:24:a0:45:08:f2:e5:d7:45:16:
                    88:2f:18:f4:59:1b:73:cd:9f:ed:04:6f:a1:cb:1f:
                    69:0f:68:f1:5d:5f:28:f8:ca:77:45:fc:c9:9c:1d:
                    d9:8f:59:c2:0e:54:39:89:15:4e:04:90:b5:df:b4:
                    26:66:11:63:6d:ee:3d:bb:86:a3:e1:bf:df:9b:74:
                    46:91:54:6d:dd:6c:4a:1a:c0:86:65:aa:5e:df:c9:
                    fb:00:da:5f:79:da:ee:59:a1:0e:bd:10:0c:46:04:
                    d2:b0:62:9c:fc:6a:61:24:5e:03:88:11:58:7a:9a:
                    f4:cd:4c:51:d6:c8:23:04:61:98:2b:4e:d5:23:fb:
                    b1:82:30:5b:f2:b1:b9:fc:34:bb:b4:1e:a8:8d:24:
                    9d:3b:ef:a7:e6:70:d7:2b:29:a9:43:4d:93:a2:fe:
                    96:1e:fe:27:85:f6:58:55:fe:bf:59:d4:56:f9:d7:
                    e5:2f:51:2a:71:a0:55:a5:d7:54:28:81:2d:ad:e8:
                    de:d8:87:2c:00:7e:02:33:39:1e:28:f1:b8:84:ce:
                    1b:18:c0:af:3d:01:56:83:a9:f6:ba:81:0c:9e:df:
                    48:d4:af:10:44:0c:21:fb:cb:78:02:86:bc:60:c9:
                    8a:eb:65:c5:fc:09:a7:bd:d8:f2:ec:d7:e0:6f:47:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:1E:B4:39:A3:44:43:49:88:09:C6:82:9E:16:D7:E3:81:C3:17
            X509v3 Authority Key Identifier:
                keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:71:2b:57:dd:28:fb:2f:1a:b1:8b:82:ce:b4:c1:73:53:46:
         08:c2:a4:b6:49:fd:d6:60:a0:f1:b4:60:24:1d:e1:63:bd:01:
         ba:0a:47:65:46:fc:45:75:f7:61:a5:c7:c4:84:f0:eb:79:5e:
         d6:fa:16:eb:bf:6d:47:42:b2:41:d2:3d:41:31:8a:40:2c:89:
         b5:aa:e0:b9:7d:28:7d:30:dd:84:31:af:56:25:25:b5:0b:86:
         b4:cf:22:7d:1e:1b:05:3c:50:ca:7e:6d:01:7d:8f:7a:1b:80:
         6e:07:ab:36:f3:86:a5:8d:28:88:85:13:94:5b:2f:0c:8e:f2:
         79:72:e5:a5:5d:6c:83:86:7b:36:66:da:5e:f4:42:f5:61:e6:
         93:2d:9b:e7:83:90:66:7d:b4:43:84:27:55:ed:68:24:88:4f:
         b1:ac:dd:8f:e7:c0:db:2b:51:74:b1:47:91:63:09:3b:a7:f6:
         b4:7c:2e:4d:03:83:36:c0:64:c5:e2:a4:cf:8e:2f:a1:b3:cc:
         f0:07:0f:05:9a:24:c7:c1:f5:fb:e8:7e:c2:de:9d:c1:5d:90:
         95:3f:a5:4f:bc:26:c6:7d:0d:38:a6:07:26:3c:4f:89:b4:4c:
         de:a4:e4:20:8e:1d:46:57:15:93:ea:cf:c4:5f:f0:7c:4e:82:
         44:6e:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:15 2026 by rpki-client