Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File:                     -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier:          4MvkziZlDQfqBkD0emlbDUiH+FbDCqD380cCGxUmRJs=
Subject key identifier:   4D:C7:A8:D3:D5:E6:A8:C0:5B:31:71:FF:46:CA:D2:6F:EC:F5:A9:E6
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       0358
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number:          0337
Signing time:             Mon 02 Mar 2026 02:59:30 +0000
Manifest this update:     Mon 02 Mar 2026 02:59:27 +0000
Manifest next update:     Mon 09 Mar 2026 02:59:27 +0000
Files and hashes:         1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: yvXIs7GMCD0QaEft2g5PA01wJncMyseoLAOSU1boFR8=)
                          2: AA314EC8249811EF971CED52C4F9AE02.roa (hash: CTC+frKFy+yqFxMjS9yot52FVD6iYh/PAiFv8tCs1R4=)
                          3: C79B240C249811EFABD23253C4F9AE02.roa (hash: KLMDMsYC1JkZiQOG8cVQt3xj3bRjmq7HOuheJ/ywXLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
                          rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Mar  2 02:59:27 2026 GMT
            Not After : Mar  9 02:59:27 2026 GMT
        Subject: CN=69a4fd11-6bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:a5:ce:f4:44:84:5c:ed:71:71:f1:b9:db:
                    41:e0:64:06:94:15:5a:07:dd:d5:e1:3b:fe:c1:b2:
                    01:56:6d:78:d9:f7:50:48:17:bc:ea:c7:76:c9:9c:
                    f3:61:b9:ba:56:d0:ba:b0:e0:e2:b2:f5:5c:7a:d4:
                    db:1d:ee:10:f1:58:59:91:95:5d:70:b5:3a:06:29:
                    55:99:7f:63:a4:0c:48:5d:f5:96:a3:36:9a:3b:f5:
                    28:81:a2:99:2f:87:8d:51:da:c1:a9:c5:e0:86:41:
                    b0:47:44:14:fd:b5:9c:5a:d6:be:d7:71:e9:19:c9:
                    eb:fe:2c:77:02:58:bc:4b:11:76:41:ba:fc:ac:e4:
                    fd:b6:55:7b:60:c6:5c:2d:03:c9:bf:3d:e6:0e:b6:
                    65:f9:ef:c4:26:26:ef:0c:f8:11:03:40:ff:06:55:
                    78:bf:00:ec:41:15:59:a4:f2:13:18:24:0b:bc:c5:
                    49:77:9a:60:57:b4:5b:9f:13:bc:a0:cf:2c:cb:3f:
                    e9:15:4a:1f:94:63:46:9c:c6:2d:4a:fb:45:da:6c:
                    f7:c0:f4:93:f9:05:bd:e4:e5:d8:6c:70:b7:71:d5:
                    d8:4c:5d:2a:e3:d3:8c:d2:ec:8a:0c:6c:e5:6e:ec:
                    92:47:d6:f2:ff:57:bc:6b:0d:0e:8b:4c:a4:ac:a7:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C7:A8:D3:D5:E6:A8:C0:5B:31:71:FF:46:CA:D2:6F:EC:F5:A9:E6
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:25:f7:d5:69:de:fa:2e:49:11:fe:fe:97:fd:53:ec:10:7a:
         5f:74:79:b4:11:9f:02:1d:3b:72:9c:e0:19:22:9b:c4:ab:ee:
         6d:4c:a1:f7:94:ca:de:f7:4d:bf:50:fa:4f:07:98:1b:5b:31:
         a4:6c:27:f7:c5:7b:5b:ed:ff:25:7c:03:54:fd:46:51:44:d0:
         7d:b7:d5:62:ae:57:cc:ff:b6:fc:7e:a9:ce:fb:01:f6:0c:3d:
         c8:f1:8b:e6:9a:a9:74:e4:4e:e2:d0:51:3b:07:ad:76:ca:de:
         b0:55:af:18:f2:e1:a5:03:0c:3d:6a:c7:1c:73:53:5a:5e:e9:
         7d:07:c1:9a:51:82:9b:db:22:29:f2:4b:b7:f0:fb:47:df:e4:
         a4:da:45:18:e9:e2:8c:ea:e0:52:0e:08:0e:51:32:5c:47:03:
         5e:98:00:ce:f0:6c:be:9a:a8:64:dc:df:5f:a5:8f:a1:41:6b:
         5d:7b:b8:68:f6:a9:b6:dc:e3:96:ed:b1:65:c2:5f:b7:a5:8d:
         ac:1f:44:ff:3d:d7:3f:75:aa:97:04:3a:00:27:fc:88:ea:c0:
         a3:91:be:1c:e4:7f:08:9e:1a:9c:fd:54:ad:cd:e7:05:0f:5e:
         7d:2f:e3:11:0c:24:13:e8:7e:a0:9e:19:0d:d1:e1:af:76:44:
         5a:09:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:24 2026 by rpki-client