Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File:                     iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier:          pc6JV4Rxbix0tzLy5m4agc9BpDS/W3giuvnUyapauFQ=
Subject key identifier:   6D:D9:DA:CB:FA:94:18:F0:11:0E:12:FF:19:59:FC:E1:4C:2A:2E:51
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number:          01AA
Signing time:             Sun 01 Mar 2026 04:50:25 +0000
Manifest this update:     Sun 01 Mar 2026 04:50:25 +0000
Manifest next update:     Sun 08 Mar 2026 04:50:25 +0000
Files and hashes:         1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: uxpritWDB0GYmWBb++BA67K5fdwBYSHN0MEa40A6+p0=)
                          2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: B/rfYP/MowjVXl2cDvVI2OTc/iqkJEyxJCeVC3c1JPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Mar  1 04:50:25 2026 GMT
            Not After : Mar  8 04:50:25 2026 GMT
        Subject: CN=69a3c591-a99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d3:02:45:63:22:18:a4:95:50:c9:62:0d:0d:
                    c3:d2:4d:9d:f3:6c:e8:ff:0e:53:71:65:67:64:1d:
                    aa:c2:73:63:89:b9:1f:8a:3d:c8:4d:12:8b:9a:bb:
                    6d:f0:c1:bb:01:b6:f8:cc:14:bc:fd:f7:01:fe:94:
                    0f:5e:2a:4f:5e:8c:ed:fc:53:7b:7a:d6:ed:12:b3:
                    f4:c7:ba:32:fa:73:c6:f4:25:83:a7:c5:16:4a:7e:
                    a7:66:6d:07:8c:00:b8:b1:fd:b2:d7:c2:f3:6e:aa:
                    53:84:08:7a:f9:5e:9e:d2:97:06:76:08:e4:0d:0d:
                    54:b5:c7:60:91:ab:21:4e:db:e6:75:5f:38:1b:05:
                    a2:2d:c1:99:6e:79:67:42:02:2e:fb:63:a7:c6:70:
                    05:ae:56:06:18:8f:54:af:e2:69:a9:e0:2b:95:80:
                    19:99:d5:7c:54:16:3e:2c:48:d6:32:5d:b5:63:59:
                    c6:d0:17:98:fa:dd:38:20:ca:7a:b6:0c:cd:17:73:
                    5b:04:f8:03:69:15:40:3c:bb:c5:66:f4:63:68:f9:
                    94:de:ad:bd:64:6c:9f:d0:4f:97:d2:7c:59:43:22:
                    13:7c:69:38:14:ec:ee:ef:d0:1b:0a:6c:43:7b:25:
                    4f:4b:52:fd:9b:38:26:2d:0f:b6:66:ea:92:6a:65:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:DA:CB:FA:94:18:F0:11:0E:12:FF:19:59:FC:E1:4C:2A:2E:51
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:51:64:03:75:b8:0a:3a:31:53:7a:c2:46:6e:81:dc:0b:
         5a:bb:a2:03:c8:a7:d5:5f:a4:a8:fa:27:93:9c:04:79:e0:cb:
         fd:8d:97:26:57:05:1c:2d:20:84:d5:30:f6:b2:07:0d:fe:77:
         72:f2:8b:ee:97:be:59:d0:cb:c0:66:26:20:b6:12:2e:cf:5a:
         08:38:fb:b8:6b:3b:25:ef:2a:ee:6b:0d:d1:35:1d:a8:54:d2:
         f0:7e:72:e8:63:97:f6:3b:cc:9e:5c:46:66:63:f5:07:26:93:
         d8:ba:bf:de:80:43:0c:d2:ef:77:03:18:5f:30:aa:d9:bd:5d:
         1c:09:34:4f:ca:21:cc:34:a6:e2:4b:57:19:81:1d:55:65:80:
         ce:24:f8:c0:24:57:26:14:95:2d:c1:77:46:d1:8b:fe:47:a8:
         aa:84:6c:cc:5c:d4:4f:ed:bf:af:13:12:7f:e8:25:e0:7d:12:
         fe:6a:c8:2d:8b:a6:ff:40:a7:d1:98:30:ac:c5:b7:6a:aa:f6:
         40:1f:c1:bf:2f:f7:66:01:a5:6d:05:7f:cb:04:82:03:ff:7a:
         31:57:87:25:55:98:b1:a3:39:e2:99:2b:d6:8e:0f:97:a8:ad:
         b4:d0:e9:11:be:ce:5f:79:3d:e0:71:7b:69:d5:94:41:7c:fc:
         f8:01:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:38 2026 by rpki-client