Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
File:                     AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json)
Hash identifier:          2HPCh2FMm6KbZlzKCfAputA5/WgfWAr1/XhrD4oF2kA=
Subject key identifier:   80:58:4D:61:77:D4:53:5C:EB:08:8F:A8:63:DD:5C:44:6A:F8:7B:D5
Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12
Certificate issuer:       /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
Manifest number:          023C
Signing time:             Sun 01 Mar 2026 03:13:35 +0000
Manifest this update:     Sun 01 Mar 2026 03:13:34 +0000
Manifest next update:     Sun 08 Mar 2026 03:13:34 +0000
Files and hashes:         1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: XROCKT0AbWLNKtJPyoce6El8+lsdrd6nmZRJA/vXHms=)
                          2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: k3NlozvnlaqSreMbUh2TfHEQDX5Xr4Ukgk/pUkd38rY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl
                          rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
        Validity
            Not Before: Mar  1 03:13:34 2026 GMT
            Not After : Mar  8 03:13:34 2026 GMT
        Subject: CN=69a3aede-d711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:e0:78:2e:53:30:61:d4:2a:a8:c3:b1:32:
                    c0:4f:71:8d:63:4d:47:44:ef:13:66:4f:00:84:79:
                    7a:97:ab:49:a6:27:31:f8:cb:b8:f5:15:90:1d:69:
                    f6:33:cb:61:1f:73:c8:26:4a:bc:73:df:9c:3e:60:
                    96:16:d3:8c:9e:14:3d:32:26:b9:03:90:45:a8:a7:
                    0c:89:41:d3:58:de:ca:80:8c:a4:e7:02:b0:18:e7:
                    ce:f6:23:5b:fb:c1:dc:db:79:b3:e8:09:66:3c:8b:
                    57:d7:00:20:6f:a7:b8:72:3e:88:4e:c1:31:ab:5d:
                    50:42:e1:c5:05:bb:90:6f:90:df:37:ad:c9:9d:32:
                    2d:f1:6b:bb:37:6d:ed:ac:a6:10:a4:16:56:cc:47:
                    60:cd:f5:ab:cc:93:1f:9b:6a:ba:61:c3:65:7e:ba:
                    39:f4:3d:00:13:96:b5:ea:9a:db:cc:98:10:bf:23:
                    c2:0a:fa:14:be:78:30:fe:aa:37:3c:63:f6:00:35:
                    17:3a:dc:98:ae:80:ec:a4:da:d2:14:58:55:73:e8:
                    44:bf:26:c3:61:3d:62:44:9d:9b:03:ba:27:ca:19:
                    89:08:54:d8:04:c3:63:09:2e:89:fa:7d:25:f3:83:
                    f1:94:7e:96:89:31:51:9f:26:89:66:17:19:58:e6:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:4D:61:77:D4:53:5C:EB:08:8F:A8:63:DD:5C:44:6A:F8:7B:D5
            X509v3 Authority Key Identifier:
                keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:75:6d:7f:09:3a:65:cc:53:be:c9:12:80:06:7d:07:c8:17:
         79:89:0d:5a:85:74:81:2e:51:34:97:2f:4a:e1:ee:71:a2:71:
         39:29:94:c7:7d:cc:c4:b5:e6:bc:11:4d:24:94:b9:0e:a1:cd:
         b2:62:31:fd:00:94:6c:d8:88:02:f5:09:b1:30:db:bc:3f:2a:
         41:ae:63:37:57:e5:0e:db:43:30:4c:42:1a:a7:e9:00:d9:1a:
         28:0a:10:ab:49:5e:88:33:9b:bb:ed:e1:2b:ff:4a:65:5f:d9:
         3b:33:58:ad:9e:16:6e:08:b2:5d:4e:28:f9:13:17:41:d2:84:
         a5:ed:78:09:86:2a:79:f7:89:f5:26:32:5a:ec:4d:49:f2:3d:
         ec:68:91:78:03:82:4e:85:e0:ba:f9:74:85:95:e0:9e:ff:70:
         6a:0b:08:30:97:31:d9:ac:2c:0c:62:3a:b8:24:e4:2b:d6:1f:
         27:37:b3:f1:8c:9e:6c:81:c0:fd:e7:a0:c0:7d:69:c9:4b:97:
         10:a9:f9:1a:2a:b9:f2:3b:21:ed:08:b8:07:af:9c:e6:55:4e:
         96:d5:fc:41:e7:6c:15:65:f1:6f:7d:ef:29:c2:14:ec:09:e9:
         e5:c8:2d:f8:40:5a:40:2a:30:9b:0b:45:9d:70:6d:0c:a7:af:
         8f:7a:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:47 2026 by rpki-client