Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
File:                     Pq60tRb3A-pY8W4I2opmdwP7XK4.mft (raw, json)
Hash identifier:          kiF/uda+4yj/Git8DszoLeqaBKmhjyiy2GJzyR70mgI=
Subject key identifier:   96:36:3B:AE:C3:82:AE:0E:46:7B:E3:A4:98:8F:6F:42:56:7A:8A:A0
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Certificate issuer:       /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
Manifest number:          01CF
Signing time:             Sun 01 Mar 2026 04:29:35 +0000
Manifest this update:     Sun 01 Mar 2026 04:29:34 +0000
Manifest next update:     Sun 08 Mar 2026 04:29:34 +0000
Files and hashes:         1: Pq60tRb3A-pY8W4I2opmdwP7XK4.crl (hash: 346Jv9dpW19RlNGKtP/EOGjaeYy2O/rDm41FYHiKoFQ=)
                          2: B67DC27A60E311EEB04BEA49C4F9AE02.roa (hash: KXR6Hd0K+TeaVWeHu4u3MS3F4KWrkO/8RzkhsfVV1VI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
                          rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D109, serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
        Validity
            Not Before: Mar  1 04:29:34 2026 GMT
            Not After : Mar  8 04:29:34 2026 GMT
        Subject: CN=69a3c0ae-acc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:b5:51:e4:39:ad:f9:c7:68:ad:f9:09:6d:
                    3c:a8:9a:f1:be:73:9f:c8:19:3c:67:af:68:61:bd:
                    6f:1c:5c:d5:db:00:39:49:6b:78:b1:00:ad:ee:a7:
                    25:41:c0:d6:a8:fd:e6:3e:4a:40:ef:1a:15:47:20:
                    32:18:44:13:60:19:8f:7c:d2:32:25:3d:02:14:51:
                    cc:21:cb:bf:e3:ac:1b:67:50:5a:a6:1c:87:e6:d6:
                    16:8b:2e:0f:4f:af:91:0c:f7:d7:1d:11:77:97:69:
                    c3:b6:5c:c0:83:ea:ab:96:06:8e:c5:7b:f2:9d:b2:
                    10:0e:c7:9c:c3:5b:dd:25:d1:fe:f9:1b:59:06:28:
                    ff:19:cf:6f:e6:df:ed:99:02:f1:84:7d:47:e2:c7:
                    4e:15:fe:94:d3:4a:ff:02:a4:1b:1c:00:16:e3:c2:
                    e3:10:5d:9e:9d:45:8b:37:e4:6e:4b:30:e0:0e:94:
                    d1:14:95:83:48:c5:c8:fe:78:d2:59:0e:9a:29:63:
                    fa:ee:b6:3c:61:b0:46:28:70:7f:64:15:28:48:0d:
                    2f:9a:ac:47:39:3a:6f:e4:61:30:5a:3b:30:7d:ec:
                    12:1a:14:4d:07:12:4b:9b:54:49:f8:a3:4d:82:05:
                    62:b7:90:e0:fe:77:f3:00:72:8f:15:e3:8b:38:89:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:36:3B:AE:C3:82:AE:0E:46:7B:E3:A4:98:8F:6F:42:56:7A:8A:A0
            X509v3 Authority Key Identifier:
                keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:56:d1:f2:13:fc:60:08:e6:2e:b3:41:83:bd:3e:d7:78:b1:
         3c:af:d3:58:cf:e8:2a:b9:32:5a:09:44:0e:a9:b1:15:89:23:
         f9:7e:4d:f5:04:81:9c:7c:f5:1a:52:33:50:91:8e:02:56:0c:
         f9:84:2a:2e:8c:53:a8:16:10:a1:76:92:40:a3:af:73:4e:37:
         9a:7e:75:85:ef:45:03:98:2d:c6:78:b5:69:f7:92:67:b0:8d:
         4d:9e:39:b9:de:21:f3:ed:b9:74:4c:d3:0d:51:25:11:c1:0e:
         f4:08:6c:1a:32:0e:94:a5:c9:bc:d5:c7:c8:dc:5c:09:c9:9a:
         25:2b:07:9a:e0:5a:7e:7f:59:3e:96:ee:5e:5e:a6:f8:95:ff:
         7d:ea:9e:df:98:04:d9:27:a0:8e:da:9d:da:c0:5c:41:44:6a:
         62:a8:f6:0d:dd:fc:c3:e8:66:cb:3e:a3:d0:3a:10:1f:d4:d3:
         16:2a:20:80:06:f3:1d:5d:4e:54:04:e6:95:2c:8f:e0:b5:0e:
         01:c7:b4:ff:79:a8:df:8f:bb:99:a4:53:57:79:40:12:5a:4d:
         74:b7:36:c6:e8:0b:64:69:b5:c4:dc:4c:a9:1d:00:21:60:c0:
         01:af:6e:da:d7:2f:50:fc:ec:8f:ae:da:57:f4:0c:0e:f5:94:
         71:07:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:34 2026 by rpki-client