Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File:                     tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier:          xDgU8+R2pcdaVHmYA28nLT3JKt8uGMD4FI0IlXbcjkI=
Subject key identifier:   5E:60:70:EF:C4:9E:E4:8C:15:E6:3B:54:00:37:A9:E9:73:A5:71:15
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer:       /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number:          01F3
Signing time:             Sun 01 Mar 2026 03:58:28 +0000
Manifest this update:     Sun 01 Mar 2026 03:58:28 +0000
Manifest next update:     Sun 08 Mar 2026 03:58:28 +0000
Files and hashes:         1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: 8Nmau+ZWR4v55UazKL7RDuJjDplPb2vx9uiPuURfzX0=)
                          2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: Lb0hJu9MZe6wLWtHrKtqcwpP08rypBWIlAZybLR4Lp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
                          rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
        Validity
            Not Before: Mar  1 03:58:28 2026 GMT
            Not After : Mar  8 03:58:28 2026 GMT
        Subject: CN=69a3b964-9997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:a5:b0:39:d2:97:50:ec:00:e4:e6:fb:95:
                    28:95:2c:57:89:05:06:26:01:c1:f5:dd:e3:71:69:
                    bd:db:dc:45:c0:24:60:cd:48:30:a2:44:d3:39:2c:
                    c0:9c:04:c5:d8:ad:16:22:80:fa:57:45:7a:68:2a:
                    b9:37:96:27:1e:1e:1b:09:75:47:b2:39:8d:ef:3f:
                    61:c9:b9:94:d0:3c:13:5b:50:75:19:9d:c8:40:a0:
                    4b:95:fb:95:bd:fb:a6:01:c6:bd:5b:1d:aa:32:1c:
                    f8:a1:43:3f:fd:3f:f2:4d:47:d3:2b:2f:ab:89:52:
                    45:50:f3:22:4e:91:d1:ea:2b:b1:c1:7c:6a:59:1f:
                    c7:47:8b:f8:56:12:2e:a1:06:95:85:d6:5a:b3:c4:
                    8c:ae:9c:35:20:20:32:16:5f:df:c1:aa:5c:e3:bb:
                    aa:81:19:67:19:ed:51:06:9b:01:46:85:3f:0b:1b:
                    58:b7:aa:dc:69:f6:4b:d9:89:fe:05:be:ab:b7:24:
                    7a:5f:d5:da:4c:bb:d0:13:30:8e:cc:a6:a4:ed:04:
                    65:84:6c:5f:65:fb:21:0c:53:15:4a:d4:03:d5:3e:
                    4c:19:19:87:61:f9:71:cb:cb:aa:ad:6e:36:40:fb:
                    be:4b:d9:9b:4b:fe:c5:bc:24:ff:1f:73:04:80:8a:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:60:70:EF:C4:9E:E4:8C:15:E6:3B:54:00:37:A9:E9:73:A5:71:15
            X509v3 Authority Key Identifier:
                keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:35:63:1b:70:3d:02:c8:e0:cd:28:bb:80:ce:9f:68:9e:
         51:8c:c5:16:09:98:44:2b:03:f8:55:85:04:e9:0b:ca:58:d8:
         5a:20:e2:07:77:d2:b0:7f:8c:c6:e2:8e:f5:4a:9a:f7:6c:32:
         65:ff:da:2b:03:1b:18:e5:b5:64:bd:46:89:66:f0:26:98:7d:
         79:f9:f6:a6:b0:92:c0:5a:d6:ba:3a:fc:d7:58:cc:04:c2:42:
         29:d1:82:38:df:1b:a6:24:75:d1:a6:fd:29:75:f7:09:44:63:
         99:cf:21:53:99:8d:48:aa:1c:e6:e0:c4:e7:f6:b7:94:4f:35:
         a5:13:60:ae:6d:7e:1d:23:13:2c:67:09:74:72:60:fe:e0:c9:
         09:e5:db:f9:e5:af:fe:7d:54:ee:6e:a8:a0:f4:86:49:4c:d9:
         51:e0:fb:46:44:f9:41:2d:d0:25:73:3e:42:70:53:31:f9:33:
         3f:a2:a4:2d:95:80:2d:1b:34:05:96:9f:76:49:67:db:38:05:
         7d:38:82:7b:90:01:f2:72:fb:b2:07:d5:ac:80:b9:07:4e:6a:
         cf:c6:d9:b9:0b:dd:eb:42:cf:33:c9:c9:37:35:1f:f3:b2:33:
         fd:27:92:95:68:65:72:83:fe:b8:0f:34:45:06:db:9f:3b:de:
         81:1c:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:22 2026 by rpki-client