Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
File:                     X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json)
Hash identifier:          8hz95OzJRq/Opv5CnrLyh2Nb3jO+602EACeVH2Wx9w0=
Subject key identifier:   41:F6:F0:07:41:3E:A4:3E:2B:B3:86:29:63:58:D1:11:27:13:0C:82
Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
Certificate issuer:       /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
Manifest number:          BF
Signing time:             Sun 01 Mar 2026 08:11:59 +0000
Manifest this update:     Sun 01 Mar 2026 08:11:58 +0000
Manifest next update:     Sun 08 Mar 2026 08:11:58 +0000
Files and hashes:         1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: fnbFTIvtQbWgj489gFWIV2sARmM9IVyEwCTI3zpL8Jc=)
                          2: AA456842107211F09A9E631FC4F9AE02.roa (hash: 6DJYRNtdCQtPDVdh/suSAFKdKgawzgUz82oOnswPp6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
                          rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
        Validity
            Not Before: Mar  1 08:11:58 2026 GMT
            Not After : Mar  8 08:11:58 2026 GMT
        Subject: CN=69a3f4cf-dabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:fc:35:e7:df:a2:51:91:ae:ed:9c:2c:fb:
                    e9:0c:93:e6:5e:a2:40:ab:09:43:5b:09:9b:19:85:
                    3b:d8:d9:cc:cd:2f:27:75:44:96:e3:14:2e:0a:c1:
                    8c:b4:55:19:f7:d8:02:1c:c1:82:1c:8d:95:c8:51:
                    92:f8:be:9d:8f:7e:54:70:19:10:a2:7f:7d:c8:ac:
                    9d:57:fc:97:b2:86:d8:a5:42:b5:95:04:f9:5d:9e:
                    ca:10:9c:20:19:03:69:b9:b1:b7:14:d7:d3:90:a9:
                    52:ac:5a:66:ee:63:29:4f:e0:cc:bd:28:78:d8:5f:
                    fc:62:36:b5:0b:fb:8b:81:0e:70:d0:62:95:36:88:
                    d5:17:e6:0e:fb:79:4a:5c:0a:fe:63:fe:51:1f:e4:
                    e1:3f:9b:a7:fe:8e:56:be:25:30:ef:cc:3b:a8:33:
                    d0:8c:c1:67:f9:e7:61:5d:b1:35:87:9a:8f:72:19:
                    77:6c:29:d6:89:47:3b:9f:62:ae:71:fe:fc:47:e6:
                    2d:9e:cb:ad:da:b1:f6:84:51:ea:6f:9a:78:54:35:
                    fe:8e:24:e8:38:0a:8e:bd:d1:40:a6:81:84:a3:8d:
                    68:cb:45:bb:b9:d5:94:22:24:09:66:fe:ef:e3:50:
                    5a:76:60:ab:54:a6:62:4e:99:d4:9b:3b:aa:4d:70:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:F0:07:41:3E:A4:3E:2B:B3:86:29:63:58:D1:11:27:13:0C:82
            X509v3 Authority Key Identifier:
                keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:04:a0:a3:be:7d:7a:e8:f4:80:29:66:e4:d2:55:4c:07:a8:
         e7:7b:8e:af:f3:5c:5c:29:3f:0f:df:eb:da:0d:32:fa:5a:57:
         97:d9:de:fa:29:d6:f6:11:81:4c:4e:6f:2f:57:e7:67:9b:5c:
         cf:9f:12:ed:3b:c3:2a:4d:77:a5:30:e3:30:5f:04:81:9c:bc:
         d1:81:42:29:fd:92:bb:c7:1d:59:9d:16:45:78:35:77:8d:6c:
         b5:d7:d5:42:dc:1d:58:d9:36:5e:6c:d7:3e:2c:51:c3:2a:72:
         11:53:d0:ac:fa:62:98:a9:f1:7f:1f:e2:17:ab:f0:d5:b2:6e:
         b9:48:3e:d7:46:fa:3d:01:54:6e:23:be:5f:9d:85:1a:91:a0:
         7b:8d:1b:1f:e6:f5:fb:52:e2:54:22:e0:ed:fa:71:67:a6:74:
         20:b3:5e:45:d1:e3:0e:74:6b:f6:5b:4b:75:72:b8:13:16:1e:
         4e:e0:0d:3a:f8:66:6f:d0:8b:3e:f0:30:f5:9f:93:49:63:b9:
         c0:0b:eb:4f:d4:a4:3e:c5:af:f0:7c:6d:3a:f3:42:f2:92:3e:
         2b:86:bb:9f:82:64:16:7e:f0:fc:fb:b6:f1:ed:7b:5d:67:7d:
         05:01:b7:fb:2b:4e:3e:66:08:67:26:57:bf:13:03:08:b7:27:
         fe:08:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:42 2026 by rpki-client