Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
File:                     uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json)
Hash identifier:          tC39wBLNUknYQNOfQ4Ih+Re0O33ajTwGttZsfuOXZ1w=
Subject key identifier:   EB:09:09:D5:46:02:DA:2B:99:F3:0A:58:AD:88:EC:5C:48:48:E1:64
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Certificate issuer:       /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial:       02E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
Manifest number:          02DF
Signing time:             Mon 02 Mar 2026 01:30:36 +0000
Manifest this update:     Mon 02 Mar 2026 01:30:33 +0000
Manifest next update:     Mon 09 Mar 2026 01:30:33 +0000
Files and hashes:         1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: 26s+S9IGNB1iofHH3aur6UVvjy/lqhpR2smbYScWGHc=)
                          2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: z6B80o610gzveHmOz46h0MViWPRDNqbgDfSiN3K9epw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl
                          rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
        Validity
            Not Before: Mar  2 01:30:33 2026 GMT
            Not After : Mar  9 01:30:33 2026 GMT
        Subject: CN=69a4e83c-572a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:dd:a1:df:fb:69:7b:17:db:0b:58:b2:96:
                    7c:a9:3a:cc:79:4d:18:bb:94:1a:7b:d8:4f:d3:28:
                    54:a0:24:8c:90:b3:3f:53:60:5f:82:21:00:e0:11:
                    81:49:ab:41:f6:de:cf:62:ee:9a:1c:a7:07:53:ca:
                    f8:1b:4b:77:fe:69:6c:e1:9d:26:48:92:78:f6:13:
                    9e:cb:31:e9:a1:47:f1:47:1b:1f:a7:32:25:84:ae:
                    92:84:7b:0b:2d:3a:e5:d1:81:22:8e:7c:64:bd:c9:
                    8f:1d:97:b8:4f:ce:4f:a5:29:b8:3d:95:b2:e2:52:
                    4f:08:c2:50:d1:85:c6:8f:24:b3:fb:9c:f6:e5:bb:
                    bd:4a:a2:04:f3:0a:7b:88:42:b0:bf:a1:56:e2:c8:
                    36:49:db:66:25:d4:84:b4:0d:e7:f3:aa:1a:b5:c6:
                    6e:08:22:ab:20:2f:6f:0c:fe:69:21:90:ea:35:e1:
                    a3:dc:20:22:87:8c:9d:79:59:e5:e6:3d:6c:69:0c:
                    8e:52:6d:6e:17:b3:d1:4b:db:c5:d7:f8:84:97:99:
                    72:9b:b7:f6:1c:17:52:97:fb:ce:16:7f:af:50:49:
                    3d:10:95:7d:25:b6:53:3c:fa:95:71:3e:fa:61:3d:
                    6c:9a:e6:58:3a:4c:ff:8c:3a:50:be:3d:a7:19:a1:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:09:09:D5:46:02:DA:2B:99:F3:0A:58:AD:88:EC:5C:48:48:E1:64
            X509v3 Authority Key Identifier:
                keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:40:bc:ad:0d:46:fd:69:9f:5c:98:d9:55:b2:8e:e5:57:
         29:d7:94:2f:af:43:8d:50:eb:c3:81:3c:61:3c:ec:00:f9:91:
         5c:62:d3:9e:3d:c7:d3:b0:30:07:7b:79:9f:c7:db:94:f7:13:
         cf:63:a6:63:57:4d:93:d7:b2:1d:c1:8f:32:ce:f3:9b:de:b8:
         13:a0:73:a0:0f:9a:7e:9a:b6:9d:9d:92:c4:e5:40:94:a2:4f:
         8d:ce:a2:26:ca:74:5f:1e:e9:e4:cb:e0:0e:75:d7:df:3a:6d:
         a0:8c:8f:05:23:50:af:f6:d7:8e:11:5d:e6:d5:27:53:55:43:
         05:81:11:72:0e:36:73:b7:ca:25:74:89:71:d6:77:af:02:43:
         98:0f:86:c3:d5:6f:aa:74:34:b3:e2:e7:27:7d:73:78:82:fd:
         fc:01:5a:19:c6:ff:a2:70:c7:ce:0e:cf:5a:ad:e7:45:84:a9:
         32:25:6d:63:47:f4:a1:9b:3c:91:7a:80:17:05:da:b5:5c:34:
         ff:2a:e7:cd:7c:c6:45:d6:16:30:cb:cb:3a:fe:fd:ef:cb:29:
         02:de:c0:f7:6a:89:b3:34:8f:8a:fc:9a:c8:e3:79:cc:00:c2:
         cc:3b:87:ad:bd:38:fe:2a:ac:b9:a4:29:58:51:e4:ac:68:c2:
         31:20:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:33 2026 by rpki-client