Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
File:                     lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json)
Hash identifier:          LoPUp41PY4vwUrNiECGwJuaw+VXQ0Uc3IiV2a9EeZwU=
Subject key identifier:   87:1A:79:67:E1:28:5F:86:EF:46:E1:DF:1B:6B:13:50:5A:29:84:DC
Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
Certificate issuer:       /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Certificate serial:       06ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
Manifest number:          06E4
Signing time:             Sat 28 Feb 2026 22:38:47 +0000
Manifest this update:     Sat 28 Feb 2026 22:38:46 +0000
Manifest next update:     Sat 07 Mar 2026 22:38:46 +0000
Files and hashes:         1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: /P5+q5Hsrh6FvNkx3IzdWCzFdPQnJWhs1EZsP5O3NnA=)
                          2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: X7b2j2odqaAyQ4BvdZrWYJHgBIQYp2Nmau6zGn/YI/I=)
                          3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: w24aS0homFTpYbGnO7s4WYdIFFOA4EKTSwmVJQhS/yI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
                          rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
        Validity
            Not Before: Feb 28 22:38:46 2026 GMT
            Not After : Mar  7 22:38:46 2026 GMT
        Subject: CN=69a36e77-013d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:e8:4d:89:30:73:0c:5d:be:85:d3:b0:b0:
                    95:48:db:4b:f0:18:7d:50:94:e8:81:97:bb:39:a2:
                    90:97:c0:ea:80:06:7a:df:76:35:e6:eb:c2:e5:88:
                    39:f5:1c:b1:10:ab:47:4a:6e:a2:52:ec:39:35:10:
                    d2:d2:ae:e4:8e:d0:8c:88:56:7b:76:ab:f6:3c:2c:
                    88:97:70:5e:c9:e8:cf:10:a8:4d:13:75:43:38:1d:
                    68:be:0b:59:51:9f:85:73:6e:8b:9c:bc:92:f9:d1:
                    83:c0:93:32:cb:ae:45:5f:37:75:33:dc:6c:2d:d9:
                    d8:d7:d3:e3:12:92:33:dd:19:f5:52:82:1b:d1:bb:
                    85:1f:a1:be:7e:b4:f1:d6:34:c0:68:a9:05:1f:d0:
                    19:e1:d8:9a:7e:05:d7:fa:af:cb:1e:6c:13:42:35:
                    02:89:ae:c4:bb:ec:a7:22:a8:22:da:94:4e:9e:f4:
                    ae:ec:7c:dc:ae:5b:e5:bd:54:26:82:2e:d3:93:92:
                    6e:46:05:4f:bb:cc:f1:5c:5e:5c:bc:3a:4f:07:bd:
                    c8:04:ed:9f:0b:ee:96:78:55:71:73:a1:07:72:75:
                    89:f3:d1:9b:a4:34:92:b0:88:12:a5:1b:8f:94:9b:
                    44:6e:80:e8:aa:96:9b:fd:37:75:5f:f4:11:a7:2b:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1A:79:67:E1:28:5F:86:EF:46:E1:DF:1B:6B:13:50:5A:29:84:DC
            X509v3 Authority Key Identifier:
                keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:16:89:8e:13:9d:b2:4a:5d:bf:8d:ee:94:03:95:70:fe:
         d5:81:26:02:43:8f:03:e1:23:09:b9:b7:6f:f3:3c:1a:df:49:
         d9:74:3d:d3:a4:6e:24:c0:e7:5d:4b:ae:99:f3:88:32:c4:e2:
         8e:6c:cd:6e:e6:e1:1f:c3:8d:05:42:96:a0:d9:6d:61:d5:6b:
         42:23:c3:eb:12:c3:32:16:cd:8b:8f:e2:8f:86:09:2f:41:3b:
         8f:27:32:56:bd:cd:62:49:79:19:a9:04:08:d1:4c:dd:d6:6c:
         32:de:4b:bd:05:f0:ce:75:bd:85:11:72:6e:26:1f:2d:7f:dd:
         67:a2:b7:33:f4:d0:fc:08:18:7c:98:1d:b8:ff:c1:b1:db:5f:
         d9:6c:2c:d9:57:d8:94:75:5f:bf:0f:5e:01:67:91:3c:a4:2b:
         6e:bf:70:a9:2d:2a:ef:97:4d:e3:c6:33:29:ce:f9:f9:a9:df:
         97:53:2c:42:36:9c:c9:7a:7c:85:20:22:d6:4d:52:70:c1:31:
         ba:a1:53:01:e8:20:69:a0:e5:fe:07:15:33:a5:aa:d0:11:4e:
         3f:05:13:ed:e9:83:d4:84:ae:57:83:d5:d8:4c:43:a3:79:0c:
         43:0a:26:00:75:f2:6c:6a:6e:5f:ea:07:9a:35:48:33:bc:7d:
         84:7b:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:57 2026 by rpki-client