Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File:                     IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier:          eIqcj0mDgp/AxgXTKJqGy7QXfis6pcptGygQ4FQe0ZA=
Subject key identifier:   1B:EC:A5:CC:A2:9A:5F:DF:35:76:D5:E9:E9:3B:F3:93:8E:C3:D7:82
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number:          3A
Signing time:             Tue 03 Mar 2026 08:13:55 +0000
Manifest this update:     Tue 03 Mar 2026 08:13:54 +0000
Manifest next update:     Tue 10 Mar 2026 08:13:54 +0000
Files and hashes:         1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: ebZWU6c8aubRpr4O/K36GHUPg4hHC3q2Y5leOGAA0Uk=)
                          2: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
                          3: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
                          4: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Mar  3 08:13:54 2026 GMT
            Not After : Mar 10 08:13:54 2026 GMT
        Subject: CN=69a69842-5dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:b1:72:f9:77:c8:4b:66:94:01:79:89:87:
                    33:27:38:9c:a0:17:f9:58:4b:6c:26:cf:6c:a9:0e:
                    e9:cf:3d:6d:a9:65:c0:6a:84:8d:5b:f0:19:46:49:
                    f2:cd:bb:fc:5e:14:29:19:58:a1:aa:16:9c:f5:46:
                    77:39:11:b1:e3:a1:53:09:82:f2:8c:ab:71:fd:d9:
                    31:6d:08:f4:5c:3e:13:6a:f9:0f:5b:98:59:0a:5a:
                    eb:d4:d6:33:09:75:7e:fa:ad:21:0c:2f:bf:e8:bf:
                    ea:ed:81:10:7a:55:9b:66:55:99:d4:4b:14:ff:a5:
                    31:34:2e:e5:b3:8a:71:42:08:a6:0d:fa:a1:f7:c1:
                    ae:f5:4e:71:a4:e0:53:fe:b8:b3:92:78:16:49:5d:
                    1f:12:a3:a7:e5:1d:40:4d:ad:ae:81:6d:eb:a5:7e:
                    ae:4e:21:e1:8a:89:5a:9a:f5:bf:c3:27:ed:00:df:
                    1c:39:a0:72:5e:9f:84:ad:a4:1b:78:71:43:2b:a3:
                    2c:b1:7a:21:f5:c6:a0:25:99:60:84:83:88:3a:f0:
                    e8:47:9d:41:8d:5f:c2:bf:da:05:75:d9:52:b6:f1:
                    03:c7:36:3a:28:b4:5b:f1:e6:34:4c:8b:38:cc:a6:
                    6d:1d:2e:e3:a2:bb:5e:95:08:9e:41:41:44:26:b8:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EC:A5:CC:A2:9A:5F:DF:35:76:D5:E9:E9:3B:F3:93:8E:C3:D7:82
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:7b:18:d3:1e:b8:f5:a1:f3:4e:86:fe:52:b3:a7:8c:42:
         8b:8b:99:e8:8f:ed:ca:89:92:cf:9c:34:20:7d:00:bf:c6:0d:
         7e:7c:cd:2c:5d:52:f7:07:25:f1:f8:2d:3a:1c:d3:46:b1:67:
         5a:ba:90:25:89:f1:ad:c8:01:51:1e:1d:7a:f3:38:c2:c4:2f:
         4d:14:1c:a1:fa:b1:21:39:d4:58:2c:dc:79:9b:b7:36:02:f6:
         7d:33:bb:6e:b0:30:8e:c2:3f:15:db:03:ba:83:3a:e2:a8:a8:
         2e:6b:29:83:97:a1:81:00:0a:ad:23:13:84:ac:c7:ee:8b:51:
         16:40:84:2a:07:99:14:31:60:ef:94:66:89:e5:b6:c8:78:33:
         ca:c8:14:9c:bb:56:5b:ff:a5:ca:b5:17:ec:48:fe:f7:f9:dc:
         e3:bc:5e:1b:5c:31:9f:99:6c:c5:d8:cf:7f:9c:59:77:6d:fa:
         3b:0c:62:69:4c:be:09:41:27:7b:3f:f1:49:4e:28:89:45:a7:
         15:cf:12:ba:4f:d4:8b:8b:ce:b4:14:df:42:d5:7b:29:45:a2:
         31:7c:81:db:ca:44:67:96:ff:f8:06:a8:3d:c9:2a:8c:b3:01:
         2e:7f:6d:81:54:44:a4:41:4f:ca:0f:e6:41:89:20:20:99:1c:
         5a:87:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:42 2026 by rpki-client