Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
File:                     5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json)
Hash identifier:          gMCAk6UFlIA/zx7e+kpzIV2CkzMXg3oPbAMjJQFPSA8=
Subject key identifier:   4E:7F:96:90:9F:D9:8F:C6:69:CE:4B:E2:68:1F:02:D9:F9:A8:30:26
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       0933
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
Manifest number:          0908
Signing time:             Mon 02 Mar 2026 01:48:30 +0000
Manifest this update:     Mon 02 Mar 2026 01:48:28 +0000
Manifest next update:     Mon 09 Mar 2026 01:48:28 +0000
Files and hashes:         1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: ByWk18ketbGoBmMOSv4NOlkpXeLGbfFHA1R+xDg3f2c=)
                          2: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: xrP+j01URqzb818JxrzZQg9E+zkHFQ6z2nDfJjk/xvY=)
                          3: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: 4CYZfi3J5mrMgJw71DrWmWBko5u4w80OqCluI06fPlI=)
                          4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: vh+mgfVuse3OG+5JOUAqNPfjrPXWt/l1W1BYVqMifYc=)
                          5: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: UE8SAxckfyeRkUiosJW8F4rRi0Cjj19RMe2v1jw5K4s=)
                          6: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: 5lrGY5B8z3gxKejTsTAvtgEu2yogYsNGkQLwshDVoN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355 (0x933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Mar  2 01:48:28 2026 GMT
            Not After : Mar  9 01:48:28 2026 GMT
        Subject: CN=69a4ec6d-5419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:e2:6d:2f:d6:45:2d:18:35:d7:61:42:1b:
                    f3:9d:78:82:25:49:3c:e0:a1:d7:29:3c:6e:ca:33:
                    0c:85:29:40:75:2a:b0:bf:5c:88:04:58:63:31:d9:
                    8c:84:d7:1e:40:c8:32:e9:8e:28:f0:b6:cd:f7:85:
                    96:3f:1a:e3:4f:11:43:6d:4b:a0:dd:35:37:e9:e2:
                    26:1b:c9:3f:b6:b1:f1:62:78:f2:08:f2:ef:ac:fb:
                    4d:ef:8b:94:5d:bd:34:be:a9:70:28:4d:62:1a:98:
                    51:3d:76:a4:69:58:f1:ce:03:02:ef:e4:a7:65:b2:
                    62:d2:df:c4:b3:89:0c:6d:05:d0:2b:69:35:e9:de:
                    b8:4e:db:a6:3c:25:fc:d9:c4:28:c5:5d:20:98:ea:
                    53:b2:f4:1f:0d:5d:7a:d9:fa:ee:b5:c2:d1:c5:f3:
                    22:be:bd:73:d6:75:f4:2f:39:f0:39:8c:21:e1:71:
                    cb:49:3a:ab:67:61:12:ce:2d:21:08:fa:e1:b3:47:
                    d5:44:f1:eb:cc:d3:2e:e7:ec:a7:0c:b1:c6:78:8a:
                    c5:f6:35:b4:6c:e5:8c:98:0a:ea:c3:d4:cc:c6:72:
                    05:c8:85:83:56:87:02:5c:2c:70:ba:3d:ef:36:63:
                    19:bb:46:62:6d:22:e9:87:cf:fd:0b:50:8f:14:2e:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7F:96:90:9F:D9:8F:C6:69:CE:4B:E2:68:1F:02:D9:F9:A8:30:26
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:48:f6:44:d9:ca:6c:34:bd:bb:37:10:95:a3:ed:f9:2b:
         0c:46:b9:bd:64:0b:b4:2f:4d:10:db:1c:ea:61:c2:25:61:2b:
         17:d9:1e:8e:68:46:db:7c:26:ec:8e:45:6b:36:4b:55:84:47:
         b9:5a:fc:28:eb:0c:96:31:c7:6e:52:62:ff:0e:50:69:d6:a5:
         6e:52:d4:2b:6f:5f:21:d2:c1:6a:a4:cd:cc:30:ac:32:20:ed:
         57:0c:1c:e9:d1:15:c7:c1:c0:b2:8f:fb:74:dc:42:52:0d:89:
         1c:87:b5:5d:95:f4:66:e5:dc:94:fe:0f:39:4f:fa:41:fe:55:
         24:20:86:33:f3:ac:18:35:c2:48:17:51:91:68:50:2d:35:19:
         3a:77:00:03:f9:3e:9b:09:bb:76:a3:6a:f9:d5:ff:68:6f:33:
         7e:fa:9d:34:3a:39:b1:d6:fc:b0:1e:de:de:fe:08:44:c5:95:
         7a:fc:d7:05:cc:60:85:f8:a3:09:db:ea:dd:32:e8:bb:e8:78:
         a0:4f:63:db:6d:37:0d:37:9d:de:b0:4e:1c:cb:da:3d:77:80:
         3d:bb:1c:2e:96:63:e0:c2:2f:3f:5b:ed:ce:43:34:e4:9b:97:
         96:36:90:61:aa:0b:5d:da:2c:92:3c:3c:52:d8:29:0d:e3:8b:
         a8:e1:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:35 2026 by rpki-client