Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File:                     0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier:          Am6QVE9vCRzE7fRJ/9ybGFTJGCKQHt2UP4vgS24v+Bw=
Subject key identifier:   08:E7:6E:F0:99:47:99:10:69:40:04:20:E9:44:C2:50:6B:4A:54:46
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer:       /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial:       0CFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number:          0CE0
Signing time:             Sat 28 Feb 2026 18:29:54 +0000
Manifest this update:     Sat 28 Feb 2026 18:29:54 +0000
Manifest next update:     Sat 07 Mar 2026 18:29:54 +0000
Files and hashes:         1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: jrtcJShSaIAy7opFDP3tXgJ+fKGPHOcRQjX88fDs8r4=)
                          2: B430443A324211EFB14FB614C4F9AE02.roa (hash: mSmKdhP1dOumHc/59nE808KhJQxB4mVR7KUP5N0koRQ=)
                          3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
                          rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3322 (0xcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
        Validity
            Not Before: Feb 28 18:29:54 2026 GMT
            Not After : Mar  7 18:29:54 2026 GMT
        Subject: CN=69a33422-48b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:db:56:e7:14:6a:4d:12:a6:1c:07:5a:e7:
                    65:39:18:e1:d2:18:95:66:11:10:92:81:51:23:dd:
                    d1:c6:83:a6:64:29:eb:b1:b4:a0:b0:cc:fa:0a:72:
                    43:c8:da:35:88:1b:25:49:0d:40:44:2b:e5:db:43:
                    4f:d0:1d:9a:da:80:9c:ab:1a:25:9c:35:4e:8d:76:
                    3e:5c:06:b5:14:b4:62:09:e3:47:69:c3:f8:d0:8e:
                    1e:67:d5:8c:52:87:e1:cd:9a:b9:95:1d:88:7b:0d:
                    ea:de:ca:36:c3:ad:65:1d:24:4b:93:e8:21:89:45:
                    85:6f:b4:32:6e:a9:d5:86:65:04:fb:18:81:7f:09:
                    1b:97:3b:19:41:f0:4e:b4:4e:58:fa:fa:21:9d:8c:
                    71:19:2a:75:ba:9e:08:b3:2a:c8:29:22:73:15:ad:
                    30:c4:d2:e9:24:de:98:fe:11:72:58:78:4f:19:e6:
                    5b:d7:1b:a2:a1:af:16:08:ba:9b:de:e7:50:59:16:
                    13:fe:ee:ea:f5:89:26:12:81:eb:f3:8b:45:60:10:
                    cb:27:12:c5:f7:b0:cf:2a:4d:1d:59:8f:76:17:94:
                    76:91:5a:00:46:75:94:5b:e3:3d:f5:cb:0a:f0:a4:
                    90:73:4e:28:7f:c4:0d:f2:76:0c:8c:4b:58:f0:14:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E7:6E:F0:99:47:99:10:69:40:04:20:E9:44:C2:50:6B:4A:54:46
            X509v3 Authority Key Identifier:
                keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:11:73:93:95:db:10:79:f3:84:53:7a:0d:67:77:63:02:d1:
         17:cb:50:49:e4:5e:dc:64:3b:d7:d5:8f:db:68:a4:45:0b:4f:
         c5:ab:43:03:a1:e8:04:9f:97:60:9b:ec:7a:7d:54:9a:e8:2f:
         25:59:ab:27:66:bc:bb:f5:82:c8:e9:75:6a:a2:0b:53:46:58:
         89:99:cc:9f:a1:8f:3f:06:2b:ea:e1:68:4f:57:00:0a:0f:a1:
         22:d9:bf:b7:78:0e:ce:4a:ba:59:fa:9b:af:8e:1d:96:f5:6a:
         4a:06:f5:7d:c8:0e:b0:4b:a5:3a:f5:c2:8e:31:8f:f7:a4:c0:
         3d:ca:a7:d9:c8:78:92:0d:38:ad:11:c5:6f:d5:41:09:93:2b:
         00:86:a5:d6:3c:41:a6:6d:a4:e3:1b:5d:eb:d7:18:bc:71:8e:
         c4:25:45:bb:be:05:f5:e5:39:ca:91:76:8a:81:d3:93:da:61:
         97:bb:ea:b8:55:be:26:bb:ac:62:e0:2b:61:36:81:6a:a6:be:
         b4:b2:6a:ed:78:f3:83:e8:45:3c:d0:d3:14:bd:c7:d4:ef:29:
         32:03:e3:3f:03:02:a9:7e:76:f4:f2:a7:3e:a3:28:bd:b0:bc:
         90:6c:0b:f3:0c:9c:ed:7f:dd:45:2b:58:5d:05:05:b1:76:41:
         03:8c:6f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:53 2026 by rpki-client