Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
File:                     ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json)
Hash identifier:          HqhZsv8jIcZre89CKWFHaPDMiZtNLfbFbqm9UmrBwSI=
Subject key identifier:   0B:12:4C:E6:F6:30:78:2F:4A:54:17:44:69:C5:F0:20:2B:31:51:64
Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Certificate issuer:       /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
Manifest number:          0163
Signing time:             Sun 01 Mar 2026 05:52:06 +0000
Manifest this update:     Sun 01 Mar 2026 05:52:06 +0000
Manifest next update:     Sun 08 Mar 2026 05:52:06 +0000
Files and hashes:         1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: 0Q13Hwh9qhQXT57H5za21v6iI7FDj94wV9yl2ZprBmY=)
                          2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: 0a/19rU1zoR8HPG3b9KrbOC4Srzy59tAkTtlFRC+aqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
        Validity
            Not Before: Mar  1 05:52:06 2026 GMT
            Not After : Mar  8 05:52:06 2026 GMT
        Subject: CN=69a3d406-430d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:b6:58:31:af:b1:98:0d:a7:51:6c:95:b6:
                    74:ff:fa:3c:1b:71:e2:fa:c1:19:ab:ef:ee:06:3b:
                    9c:9a:cb:fc:ba:ca:04:6a:c4:22:b9:45:23:54:53:
                    8e:d5:a6:80:b4:41:39:72:0d:8a:fa:b3:e0:2e:02:
                    9e:be:26:60:80:c9:fe:d8:9d:e5:df:56:7f:54:ca:
                    85:40:16:09:41:ec:eb:bb:13:2e:36:2e:13:a8:86:
                    0d:09:c0:38:4f:34:dd:89:47:27:a7:3d:8c:35:2f:
                    4f:cc:60:c9:35:10:77:55:2d:97:c2:cb:32:bd:16:
                    06:5d:9e:ad:51:1e:ca:78:92:94:b3:e1:ef:ab:1b:
                    36:be:af:03:a8:68:99:41:e8:fc:94:f5:80:31:89:
                    9b:d2:00:69:62:b5:cf:73:e8:14:c4:8b:7b:1a:bb:
                    bb:50:f0:f7:3f:18:f3:b2:32:e3:9f:bd:96:a6:5a:
                    fb:81:01:c4:9d:36:0c:09:94:90:04:7c:b0:f5:db:
                    d9:1d:be:ce:b1:6d:9e:14:c3:8f:d5:79:b9:26:b9:
                    55:46:71:91:33:b3:b4:c8:41:e7:56:4a:9b:6e:2e:
                    70:d1:05:96:cb:9a:da:e4:43:2e:b7:bf:f4:c4:24:
                    b6:6e:f4:53:2b:b3:c6:62:45:e0:de:13:c0:50:de:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:4C:E6:F6:30:78:2F:4A:54:17:44:69:C5:F0:20:2B:31:51:64
            X509v3 Authority Key Identifier:
                keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:26:91:6b:36:7f:6d:32:d2:a1:9c:84:fe:ef:67:25:32:f7:
         9a:f0:3d:04:b2:4c:e6:6d:6c:0b:a4:dc:37:a8:03:77:31:e2:
         9c:0c:e4:da:e1:9b:8a:d2:87:30:43:a9:59:8f:3e:f4:18:78:
         9b:d0:51:f9:f0:96:a0:9b:34:fb:27:74:47:8c:48:31:70:87:
         df:aa:96:b4:46:d2:cc:b9:42:f0:9c:86:f3:06:74:bb:e0:e3:
         43:16:27:ec:50:45:e2:e8:e2:89:9e:84:6a:b3:da:16:e9:b2:
         23:a0:5d:d5:0e:b7:f2:7d:a6:67:01:66:72:78:d9:09:11:c4:
         d8:44:0c:03:de:02:7d:67:ed:45:09:27:e6:19:fb:11:3e:a9:
         01:c4:6d:8b:1c:2b:2c:63:79:04:16:33:de:59:86:36:74:e0:
         0a:7d:7d:2f:2c:ab:f9:e9:ac:c3:92:ee:6a:74:ed:c8:bf:5f:
         8f:87:c3:7d:b0:59:4c:6a:a7:5d:06:c2:1d:e0:f4:2d:48:00:
         41:fc:05:42:3c:bb:bd:a5:18:e8:b0:b3:f9:da:01:d6:98:b6:
         66:a6:24:ed:56:73:ab:3b:0c:83:6c:b5:38:95:b0:a6:87:27:
         1f:b1:c1:86:6f:7a:b1:5e:d3:e8:cb:5f:5b:13:90:63:29:85:
         73:ff:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:06 2026 by rpki-client