Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
File:                     C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json)
Hash identifier:          Pi2tjRviqlTZt/8w/Uav3TLTegMeytv/EHtWEi04+tU=
Subject key identifier:   E4:16:9D:BA:0D:F3:66:B8:56:A0:75:AE:8D:D9:3A:56:09:C3:46:FB
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Certificate issuer:       /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
Manifest number:          91
Signing time:             Sun 01 Mar 2026 08:47:44 +0000
Manifest this update:     Sun 01 Mar 2026 08:47:43 +0000
Manifest next update:     Sun 08 Mar 2026 08:47:43 +0000
Files and hashes:         1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: DnLQAu+oaZkAEbtk8eRqkRhX2QdkS/wmgvqxCZMVXdU=)
                          2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: M42F29+lHWSZmf5X/47K8ifG1ySfiTbA4ZzoyOCU96w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
        Validity
            Not Before: Mar  1 08:47:43 2026 GMT
            Not After : Mar  8 08:47:43 2026 GMT
        Subject: CN=69a3fd2f-85e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:82:d9:0c:bd:a7:80:bf:d4:12:c2:a4:bc:
                    db:1d:0a:f0:6a:73:21:22:0b:8a:0a:3b:9a:d1:71:
                    cc:9d:36:11:60:66:2d:19:bc:03:83:bb:0d:ad:03:
                    1f:8f:9f:c3:4c:89:d1:ff:1f:b9:3d:a7:d6:aa:e5:
                    b8:a2:be:03:e0:91:b9:f7:7a:17:42:aa:eb:81:8e:
                    50:5a:61:73:34:97:13:2d:d0:b6:66:f0:9b:c1:46:
                    e1:0e:68:a9:3e:36:2f:53:85:d2:31:52:43:10:cb:
                    92:10:7e:0e:1f:95:25:76:bf:f6:52:e1:17:4f:36:
                    a6:59:dc:f0:28:84:2b:51:7b:ad:0f:9f:b9:2c:5a:
                    02:6f:af:a4:2b:8f:9d:bf:81:2b:04:06:9a:c0:ec:
                    cb:b7:3a:e3:d8:82:e6:86:47:f2:3d:35:2a:1f:7e:
                    c0:17:4d:67:4b:4c:4e:22:e0:b2:4e:ef:58:4c:84:
                    1d:26:fa:a4:07:58:f4:bb:e5:32:1b:e5:a8:27:a0:
                    69:43:dc:c8:e0:44:88:53:36:21:ac:e2:53:77:60:
                    3b:65:32:97:23:27:0c:d5:39:9c:48:58:31:71:32:
                    16:d5:3d:a6:3b:e2:d7:af:76:3f:1e:53:4c:a7:09:
                    d0:ea:27:35:62:d3:2b:e9:ec:de:b7:58:41:4c:07:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:16:9D:BA:0D:F3:66:B8:56:A0:75:AE:8D:D9:3A:56:09:C3:46:FB
            X509v3 Authority Key Identifier:
                keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:b7:73:c5:25:73:72:bc:83:4a:55:8a:79:f7:b3:39:48:
         37:42:72:1c:ce:ee:9b:e7:93:a8:6d:01:f5:b4:c2:f0:29:fb:
         3f:88:9c:48:ef:ec:d0:a2:bd:6d:09:61:20:c7:99:6d:b5:71:
         13:aa:ea:c6:98:68:29:23:b8:bf:fd:98:3f:f1:16:ea:5a:f2:
         61:46:ec:e9:d8:60:9a:44:31:7a:14:30:8f:dc:21:59:12:97:
         96:52:5e:00:5c:b5:fe:69:07:5b:35:a7:11:ee:ef:a3:7a:89:
         1c:6a:5a:21:de:be:4a:a8:b1:1f:56:f6:a6:52:1a:d2:12:c5:
         f8:84:64:77:ba:01:d0:cc:1e:c4:56:ff:94:87:93:9b:d5:ce:
         90:bd:e4:1b:32:57:5d:5e:91:19:e6:62:1e:54:9d:ac:95:2e:
         6d:4a:88:c5:0b:93:7e:d4:a2:c8:8d:20:3c:ed:07:cb:bb:42:
         60:2c:f0:52:b5:27:89:63:0b:81:11:86:82:b7:76:b2:10:8c:
         1c:34:1f:4f:67:d3:46:35:b0:08:29:8d:2f:d6:4b:d0:e7:57:
         20:a4:a4:1b:7d:d2:3e:91:82:55:fa:77:26:0b:73:a0:c4:f6:
         47:47:90:ec:4a:dd:17:48:60:0e:7f:f2:95:a3:fa:17:47:05:
         3a:3c:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:24 2026 by rpki-client