Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File:                     P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier:          Dmsoczn03f6wklGcbBh1EoB+JRbqX4T/ZbJZpejGPqM=
Subject key identifier:   94:05:AD:81:D6:D5:43:DE:AC:E2:32:45:B5:29:C9:1A:C7:5B:22:9A
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer:       /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial:       15BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number:          15A4
Signing time:             Sat 28 Feb 2026 16:50:10 +0000
Manifest this update:     Sat 28 Feb 2026 16:50:10 +0000
Manifest next update:     Sat 07 Mar 2026 16:50:10 +0000
Files and hashes:         1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: /XMX/M9zP1EUOM5W306QDqk7ORYin41uxpG9gaomq8g=)
                          2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=)
                          3: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=)
                          4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
                          rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5567 (0x15bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
        Validity
            Not Before: Feb 28 16:50:10 2026 GMT
            Not After : Mar  7 16:50:10 2026 GMT
        Subject: CN=69a31cc2-aa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:93:2e:6a:08:0b:45:f6:d0:da:f9:3f:f6:
                    a3:21:b5:dd:86:09:3b:a3:0b:19:9a:3f:59:5c:1e:
                    a6:6f:0f:70:81:91:d4:68:50:a6:ce:69:81:c5:6e:
                    11:70:e2:79:02:db:b3:df:f7:01:73:70:ff:b4:bd:
                    27:c2:33:8f:e0:a3:d8:a2:59:af:c7:27:01:eb:d6:
                    eb:a9:65:f5:b0:21:b0:42:e3:ed:79:ff:f7:a7:2a:
                    aa:1d:c4:dd:71:a5:e6:b9:18:cb:f9:f6:15:a7:a6:
                    9e:c8:21:d3:50:32:8b:1a:f5:91:db:e3:6b:83:a9:
                    61:3d:d3:e7:4d:aa:03:79:18:29:49:fb:8d:9d:2c:
                    72:3a:56:0e:0a:5d:93:46:b5:11:8f:87:ca:1e:ae:
                    6a:77:bc:24:f4:65:a9:44:f1:66:da:08:e6:b6:ce:
                    8e:2a:1f:06:54:e0:32:ad:d3:81:b6:ca:8a:b3:fd:
                    8a:4f:08:48:96:57:71:67:1c:90:db:f1:5f:a5:82:
                    fe:9d:7c:a2:36:82:5c:7f:dd:11:44:59:81:8b:25:
                    1e:83:db:e7:45:90:de:90:41:f4:9d:0d:ef:7e:3c:
                    9e:04:e9:08:df:ec:bb:ee:6e:ae:c9:d8:7f:26:70:
                    de:b4:6c:e6:1a:10:59:47:5b:ed:f8:ed:ca:cd:d3:
                    07:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:AD:81:D6:D5:43:DE:AC:E2:32:45:B5:29:C9:1A:C7:5B:22:9A
            X509v3 Authority Key Identifier:
                keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:92:dd:6b:bc:a6:5c:aa:dc:79:8a:00:b5:c7:cc:be:a4:
         cb:6a:6e:7a:1f:25:91:08:4d:24:42:12:30:d3:37:1b:c3:a4:
         bc:9a:10:98:7f:90:e9:b2:7b:c3:cd:3c:f9:09:85:7b:ca:ed:
         0d:47:d4:d7:7d:64:59:30:ca:22:a0:cd:e8:6d:e0:da:67:83:
         f2:51:35:ac:3f:96:28:95:b6:0a:a8:c8:7a:af:ec:ff:95:d4:
         0f:bc:3c:3d:14:8c:55:38:ff:16:b6:39:54:c4:36:bc:5e:ed:
         29:b3:07:9b:5c:c6:aa:c0:11:7e:bc:a0:be:d4:47:de:a3:75:
         4c:ce:46:e2:e6:c6:4e:a7:a9:8b:e1:39:46:16:98:a8:a6:b9:
         7e:ac:b0:61:90:1e:1d:54:72:3c:ff:28:97:08:fb:d4:39:94:
         ab:4d:c9:4c:16:bb:b3:3d:20:7f:db:2d:3a:4c:9f:a9:ed:01:
         7f:52:d1:3a:87:c2:b5:00:3a:3f:63:75:44:0d:7f:6b:f9:fa:
         4c:59:46:59:23:a3:e0:a2:3b:17:97:91:cf:93:68:c9:16:f0:
         6e:8a:ab:88:3d:99:74:ec:8f:dd:66:f0:da:25:de:33:1a:04:
         d2:1c:49:81:c1:9a:21:53:c6:38:f3:ef:31:e6:4d:99:13:ad:
         be:22:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:21 2026 by rpki-client