Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          nB/ZQ6VIf3hc7EyzbawUpwBI0kPVl5ddRVD2TjgGEAc=
Subject key identifier:   E1:85:D9:54:75:F3:D4:A2:B1:1D:3F:EE:82:5E:C1:70:F0:F1:80:AE
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          0162
Signing time:             Sun 01 Mar 2026 05:52:04 +0000
Manifest this update:     Sun 01 Mar 2026 05:52:03 +0000
Manifest next update:     Sun 08 Mar 2026 05:52:03 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: RzxBZW5CJx+zv/WLb259+EwUIPvdTiL7JUc7Vle8z3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
        Validity
            Not Before: Mar  1 05:52:03 2026 GMT
            Not After : Mar  8 05:52:03 2026 GMT
        Subject: CN=69a3d404-d6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:3c:fc:d2:c2:a1:6e:f8:79:d1:bb:7b:e6:
                    76:3d:67:65:9c:f5:9d:eb:b7:cb:21:4f:27:d8:ef:
                    a5:33:cb:b1:55:bf:97:fc:11:cf:bb:e6:fe:87:fb:
                    65:45:ba:44:13:66:c8:74:36:2d:4a:9e:9a:33:d4:
                    9f:a1:6a:e7:07:bc:90:cf:f7:8a:ef:7c:ce:84:54:
                    2e:53:0d:b3:9b:6a:c7:49:c6:ec:f0:c0:2c:e4:8f:
                    85:21:46:da:8c:f2:9d:28:d5:06:65:7b:5f:36:dc:
                    01:8a:46:28:37:6a:f7:d9:25:70:72:f9:72:bc:d4:
                    d9:23:c6:77:c2:e6:a6:07:ab:5a:95:8b:a6:d5:5a:
                    df:4f:e1:cf:16:89:a4:17:9e:2e:2a:f9:c3:4f:08:
                    a4:27:d6:62:f2:bd:79:7c:9a:6f:62:3a:57:71:b6:
                    93:a4:b0:c5:70:30:3d:69:3c:e8:53:53:c6:7b:82:
                    04:99:93:9f:74:d3:5a:0d:df:e6:87:bd:f9:02:66:
                    50:ea:01:87:fd:04:2e:b9:88:0b:73:e3:04:ee:d6:
                    18:38:45:17:34:9e:33:78:5b:70:56:ce:bf:fb:c4:
                    0d:c7:9d:9a:f2:b2:2d:33:06:cf:e1:36:b1:eb:b9:
                    9e:9c:87:b6:46:0d:26:fd:0a:ba:2f:21:a3:5a:76:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:85:D9:54:75:F3:D4:A2:B1:1D:3F:EE:82:5E:C1:70:F0:F1:80:AE
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:b2:58:5b:99:a8:d0:48:d7:a8:bd:88:22:d0:06:b6:dc:
         50:47:da:66:18:fe:1e:4d:e9:4d:82:b7:1e:f9:a2:ef:e5:2a:
         b8:2a:b0:0e:2c:58:7e:e6:f6:3e:0f:2b:2d:a9:e0:59:ef:d3:
         46:73:31:6c:1e:76:63:23:d3:c0:6c:cd:39:5b:25:b0:c3:81:
         5a:42:20:43:1e:eb:a3:21:97:3e:dc:a8:df:bb:b1:22:f9:45:
         5c:4d:aa:79:e8:e9:06:13:fa:2a:78:ec:0b:19:5f:ba:90:9f:
         c7:ff:e0:41:05:15:8d:e1:34:8c:7c:41:9e:b1:e5:f5:8d:fa:
         9f:43:c7:ae:51:6d:c9:02:73:65:2f:3b:d0:9e:18:ce:5b:a3:
         14:fd:7d:c9:58:d7:0e:90:3f:a8:80:c3:49:50:98:eb:21:0d:
         2f:06:14:a5:3e:bf:5b:7a:24:2f:fa:4a:84:9b:bb:73:d8:6f:
         ce:d1:0c:52:22:72:d0:31:11:20:d0:61:ef:39:0c:2e:2b:fb:
         a7:a7:89:1e:e0:d3:d4:67:d0:db:70:b9:82:00:39:12:6d:fb:
         77:8b:0e:82:7f:08:8d:ff:0b:17:9c:09:45:74:72:2a:06:8a:
         45:5c:92:42:05:50:21:25:e3:6e:94:2d:9a:c5:f8:27:4c:b4:
         4c:96:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:46 2026 by rpki-client