Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File:                     oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier:          mRQjjR+/akf+hF6TBcwFMQTqPlvHMcUrLZ076QRfvk0=
Subject key identifier:   FD:B7:50:D6:DA:F3:29:E2:38:4C:67:7D:DB:39:E9:CC:E8:C6:80:C5
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       3610
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number:          358D
Signing time:             Mon 02 Mar 2026 01:00:22 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:20 +0000
Manifest next update:     Mon 09 Mar 2026 01:00:20 +0000
Files and hashes:         1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: Da4PJ9Rijz3PHDSNmYllQLGQ3vTrAw6RtVprbou5L0Y=)
                          2: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: Wb0omWMGDcuIWJtZzO5aYUeXeBS3PzZ1jDUa5EAiIV0=)
                          3: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: Uy1brxvBZUOgYCz25E+l8hAge6tUCO1Wj1Oolb03hHo=)
                          4: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: 1BgAAovkYb1AJSpU1SPJu/hRuo7VBc+isEUKAmqAK38=)
                          5: 02C97520985011F083EA2077C4F9AE02.roa (hash: iDndSBoFAc9uhUgvXQuDJ/5b7tXkUPKhNkfuD+XgWIQ=)
                          6: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: 2cUDNv3hrrgYqWPFe+1g+j6W4a5daevt2vyg7mc5Jv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
                          rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13840 (0x3610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Mar  2 01:00:20 2026 GMT
            Not After : Mar  9 01:00:20 2026 GMT
        Subject: CN=69a4e125-42ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:d0:8b:e9:e7:cb:93:cb:b3:d1:81:0f:de:
                    29:ec:d1:d9:27:c4:8a:de:d7:e0:38:0a:70:9a:3a:
                    33:6f:14:c3:b2:02:9b:86:2a:4a:41:de:d1:88:42:
                    1a:c6:aa:8b:65:69:52:e6:08:c8:87:38:ad:1d:fd:
                    80:1b:ab:8e:1d:a9:55:73:ed:b9:74:55:8e:32:dc:
                    39:c0:0e:c3:57:4d:a7:54:ed:2a:c1:a8:5d:53:44:
                    e2:1b:32:4b:d6:f4:d0:74:b9:88:c4:b6:e3:2d:41:
                    c0:5f:09:d0:19:a3:4d:3e:8a:69:2b:d9:6e:1f:10:
                    30:a9:09:a0:d6:12:9b:ac:51:67:50:43:b6:55:23:
                    73:4c:88:80:1c:13:84:09:71:29:87:de:4a:f7:d6:
                    c7:14:9f:e1:6a:1f:80:4e:be:d6:aa:4d:17:63:58:
                    62:3a:bb:97:44:c5:e1:60:fd:f9:a8:63:72:93:c6:
                    83:a2:7c:69:07:dd:69:74:19:c6:d0:6e:64:be:bd:
                    ac:71:e5:28:27:24:f7:d1:4d:96:59:1d:0d:85:ec:
                    65:ad:3f:f1:29:02:db:57:e2:48:24:f0:71:81:c4:
                    a0:c0:13:05:3c:e2:37:e7:bd:20:b7:af:8e:ba:dc:
                    29:67:34:65:61:58:bf:d2:32:d3:e4:ee:de:e6:1c:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B7:50:D6:DA:F3:29:E2:38:4C:67:7D:DB:39:E9:CC:E8:C6:80:C5
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:8f:28:5b:76:2f:d2:c4:08:bc:c5:83:1d:42:c1:f1:63:
         9b:f7:4a:4f:25:1c:8f:53:7b:3c:d7:67:22:ad:ba:0e:11:2d:
         5c:27:27:ad:ee:a4:f2:66:5a:a1:4e:ab:10:dc:12:13:94:22:
         7e:32:05:f8:b7:15:3f:6d:c9:fa:e2:a5:17:ae:68:9c:6a:ec:
         35:6a:08:12:99:30:ce:e1:b7:d6:69:f0:cb:a0:2a:f2:ed:83:
         22:92:38:c5:71:b1:cb:69:24:81:47:62:48:da:c9:e7:13:ed:
         55:b0:1e:c1:cf:85:54:14:79:c7:f1:3a:fe:67:c9:29:b1:f5:
         c7:a2:45:75:29:92:d2:00:32:5b:9e:7e:99:84:b1:bf:fe:53:
         c1:3b:b3:59:75:10:2f:b4:81:58:af:33:8d:26:4c:d0:29:a2:
         b0:09:b7:e3:c4:41:96:dd:7f:55:44:ae:d9:06:47:04:c8:91:
         ea:9c:85:40:18:77:ca:96:26:c1:4d:f9:57:91:6a:05:3c:30:
         f3:82:78:85:00:c2:60:f6:31:b6:b2:14:94:21:0e:63:18:20:
         19:4f:c1:bb:d8:a1:46:40:89:b2:43:9c:77:48:ec:77:cc:e5:
         ca:b8:a8:56:3a:3b:b5:26:72:08:0e:00:4a:bc:ed:92:a9:3b:
         68:39:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:54 2026 by rpki-client