Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
File:                     RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json)
Hash identifier:          xY9afNb6ZSZ5r0UERrsY3GFR2BZOuSCb05TAewos+FA=
Subject key identifier:   52:7C:BB:EA:C4:6E:08:BE:BE:A9:15:65:45:D2:39:DE:54:FC:D7:34
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Certificate issuer:       /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
Manifest number:          F4
Signing time:             Sun 01 Mar 2026 07:29:03 +0000
Manifest this update:     Sun 01 Mar 2026 07:29:03 +0000
Manifest next update:     Sun 08 Mar 2026 07:29:03 +0000
Files and hashes:         1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: cW6yQFbx4P6ecVFbbeG/ut7ZDZ0kwGPhHMYVzmycRT4=)
                          2: 2EA5BC6EE71811F0B23E26476E6F56BC.roa (hash: GE8oEOwRGzTm0bPnnJMgKhwDLA8B5OVvdk+Gs9j6Cg4=)
                          3: ECB98052057511F1AF941BA6343D8C67.roa (hash: BhWp6Gp20ESYJmlCsx6pBHB0Y//h97prbxzd0+L2/q8=)
                          4: D2D1A4B45BD711F089C6844AC4F9AE02.roa (hash: joxu/iZl6wh7AZroV31YozzvLk07ceZzMxMmhwP+p08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
        Validity
            Not Before: Mar  1 07:29:03 2026 GMT
            Not After : Mar  8 07:29:03 2026 GMT
        Subject: CN=69a3eabf-cce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:50:df:12:e9:dc:15:ef:53:6c:39:cb:6b:
                    24:36:5d:6d:1a:ea:cc:6d:d7:bc:57:b4:d7:69:bd:
                    ff:fd:53:2b:9b:91:a2:34:32:09:db:60:e6:47:66:
                    83:3b:46:72:ae:ae:b4:8e:30:2d:e3:ce:88:cc:42:
                    92:9c:88:01:bd:1e:d4:5a:9c:54:04:5f:4c:e4:4a:
                    1a:05:17:b9:b9:ab:02:23:7e:59:39:f1:8c:dc:f7:
                    15:09:f2:ab:26:2e:a5:14:89:65:14:5e:ac:a6:6a:
                    01:bc:54:40:04:d9:05:a1:e6:49:b0:da:34:37:69:
                    2a:08:0c:4a:ff:e5:0b:9d:2f:86:70:9d:92:b5:30:
                    d7:e0:59:8a:d3:27:a3:73:32:98:23:72:00:ba:e3:
                    d0:28:25:fd:cd:a0:18:c4:f8:5e:ea:a1:b9:68:b7:
                    ea:b3:7d:81:27:b0:57:3a:2d:8c:17:54:c8:06:9a:
                    89:16:97:22:61:22:ec:e3:f0:04:71:b9:a4:d2:0d:
                    90:ea:a1:2f:3c:a0:c2:30:e9:37:86:24:b7:1d:ff:
                    9e:89:6f:cc:6b:c4:57:43:f0:31:86:63:66:e0:e0:
                    1b:e4:c8:8b:43:42:90:48:82:cf:6c:d0:7b:1f:a7:
                    6d:07:45:d0:06:91:ca:6e:3c:5a:c3:14:4a:b3:9f:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:BB:EA:C4:6E:08:BE:BE:A9:15:65:45:D2:39:DE:54:FC:D7:34
            X509v3 Authority Key Identifier:
                keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:83:24:0c:d7:8c:82:da:b6:12:8d:c8:07:46:ca:07:a5:
         23:f1:73:50:75:19:e1:86:b0:d8:c9:2b:f0:6b:b3:85:8a:f9:
         c4:e1:90:14:ed:32:f5:2d:49:61:49:1e:8f:4e:80:0e:31:3c:
         c0:26:e8:6c:4f:33:46:5d:eb:b0:63:07:d3:8c:c3:68:d9:4a:
         b2:27:2d:90:85:ce:60:2a:f0:0d:d9:98:f9:ac:0e:ab:2c:63:
         5d:ef:38:63:d7:d9:9a:51:bd:f5:49:88:d5:1d:9b:a5:68:e6:
         51:0b:d0:ee:cc:35:5c:d9:74:18:ab:ed:8a:8a:22:72:bb:c8:
         70:56:74:47:07:3f:38:09:3c:29:65:37:67:44:d1:0f:4d:f1:
         43:24:b1:84:af:1f:8e:9c:cd:88:7d:62:e5:0a:f0:46:67:cc:
         a8:2c:64:8b:79:f2:9c:34:c1:7b:65:2d:c4:d3:75:14:f9:2e:
         aa:c3:7d:71:6b:b3:02:ce:6f:cd:8f:2e:e0:9e:ca:6c:c2:9b:
         c9:aa:68:69:c7:4a:85:ed:ec:c7:d8:77:c3:11:0f:93:ab:a6:
         d6:f5:1e:9c:28:dc:20:3a:61:37:aa:18:00:df:27:23:ec:03:
         6d:af:6a:4d:40:19:30:34:e9:47:84:95:ce:74:35:7b:26:bc:
         2e:53:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:04 2026 by rpki-client