Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
File:                     62LfxzSiW8FU02epjPJ-0W9B6tA.mft (raw, json)
Hash identifier:          QEVJ2PBvNkQ7jWTAfVM1+qLiEwe6/7StJUhHmhMsfAk=
Subject key identifier:   25:59:2A:BA:EF:70:98:87:51:55:7E:13:6C:FA:68:17:50:19:62:76
Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
Certificate issuer:       /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Certificate serial:       07CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
Manifest number:          07BB
Signing time:             Mon 02 Mar 2026 00:13:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:13:42 +0000
Manifest next update:     Mon 09 Mar 2026 00:13:41 +0000
Files and hashes:         1: 62LfxzSiW8FU02epjPJ-0W9B6tA.crl (hash: Ut5rV6yvh+rLoJE/hYXntXUxOfSR34j+LWZ0OnduBbw=)
                          2: 1C64580A4F6111ED9365FC4AC4F9AE02.roa (hash: 7DXtwSwU/C4iovO/6DBIhc26z7olkA5c3kZppgmFDQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
                          rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D209, serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
        Validity
            Not Before: Mar  2 00:13:42 2026 GMT
            Not After : Mar  9 00:13:41 2026 GMT
        Subject: CN=69a4d637-bd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:5b:45:6d:cb:5d:22:f2:f1:0d:bd:9c:14:
                    85:a0:a6:d0:4c:a5:ff:1e:41:a2:64:ae:f9:39:f8:
                    80:fd:74:97:51:19:ca:f2:aa:a7:22:41:38:43:c0:
                    b7:96:96:1d:8d:78:72:fb:25:f8:78:e2:82:de:02:
                    64:6b:a4:c7:34:db:69:af:b5:87:8c:36:5f:01:9f:
                    41:5c:be:5c:d8:a7:51:a3:60:22:52:52:4f:81:e9:
                    88:75:da:13:31:f8:0c:1f:22:63:e0:a2:cc:a8:a9:
                    ce:62:24:b8:aa:75:2f:ef:41:4f:37:64:8a:db:bc:
                    ab:d5:af:33:cd:6b:e5:d1:44:c0:d7:68:ec:dd:48:
                    7b:db:95:7f:49:c3:0e:65:73:69:ca:c2:b1:60:f1:
                    e2:84:c7:c9:54:bf:19:e9:d5:af:48:55:d2:eb:39:
                    26:9b:3d:01:9f:bc:df:84:a2:dc:58:5f:e0:e6:4f:
                    82:17:51:81:de:3a:fb:c9:da:05:83:68:8b:e8:95:
                    49:3b:0c:19:17:ff:0f:88:af:3e:f3:2d:1f:ba:44:
                    d3:ce:73:33:22:7f:f2:ec:0f:c7:2e:90:2a:ff:ca:
                    17:f9:0a:3b:cd:de:72:f7:40:d5:a5:ec:f2:f9:3d:
                    32:a9:d6:cf:22:ff:ab:75:f3:5a:5b:c2:4a:56:e8:
                    d6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:59:2A:BA:EF:70:98:87:51:55:7E:13:6C:FA:68:17:50:19:62:76
            X509v3 Authority Key Identifier:
                keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:00:5e:2a:7b:62:6d:dd:e8:fd:12:0b:bc:a1:2c:f3:b7:84:
         77:c1:79:59:8a:9d:3b:3a:d2:ac:7f:b0:fb:26:e0:3c:0c:58:
         1d:74:41:0d:86:3f:b3:b7:a4:82:92:d7:df:18:47:e8:11:ec:
         3c:51:e0:40:fb:af:25:3a:51:e3:eb:76:e5:de:f0:07:69:a6:
         86:d4:73:64:28:56:cb:f9:04:1d:27:10:9d:68:7f:72:4b:89:
         87:29:4e:7b:40:9a:d9:1d:9f:83:1b:52:06:eb:02:d1:9d:29:
         93:db:8a:b7:67:a4:9f:f3:0f:d8:85:c2:84:19:c6:36:50:07:
         d7:81:13:10:2a:4e:9d:d7:31:c5:9b:cf:aa:00:00:98:59:06:
         7d:ce:94:86:93:71:79:d5:93:5a:a2:8f:c9:39:54:2c:57:f2:
         f7:e4:65:bf:e4:8f:16:9a:2b:ac:9d:87:fc:7b:24:21:67:00:
         5c:43:f2:6f:25:db:a0:9b:89:43:96:3b:d6:d5:58:c6:7c:e2:
         b8:b5:8b:a6:80:a2:ce:3f:66:fa:30:14:40:bb:23:65:76:a4:
         de:a6:af:cf:0f:67:69:c7:93:28:a9:73:71:94:35:77:b8:ce:
         83:ac:47:b8:9f:24:37:28:ba:d9:fe:1f:cf:15:7c:a0:95:5e:
         06:5f:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:13 2026 by rpki-client