Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File:                     MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier:          ynshbQ0Hx3JcXj6MosdDgn1BO6rJ3r8AbRsNFBee1rw=
Subject key identifier:   3A:F1:6B:F9:2D:3B:95:9E:23:08:05:82:3B:DC:29:14:33:3A:39:78
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer:       /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number:          81
Signing time:             Tue 03 Mar 2026 07:19:15 +0000
Manifest this update:     Tue 03 Mar 2026 07:19:15 +0000
Manifest next update:     Tue 10 Mar 2026 07:19:15 +0000
Files and hashes:         1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: W84rNW7gpOIuD/UsOJaO+wm5G+A0jeP3yHO670/2F8Q=)
                          2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
        Validity
            Not Before: Mar  3 07:19:15 2026 GMT
            Not After : Mar 10 07:19:15 2026 GMT
        Subject: CN=69a68b73-fef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:83:0d:ed:82:7f:21:d0:aa:af:10:0d:02:58:
                    b3:da:7e:9d:0d:80:d7:a6:28:3b:c3:a0:e4:99:de:
                    42:75:8c:27:de:d7:d4:77:5b:85:59:dd:97:23:1c:
                    7e:fd:c3:dc:5a:30:b9:f3:21:8a:1d:c3:44:cf:93:
                    e3:0a:85:86:e7:22:89:52:80:4f:25:6d:32:01:dd:
                    8c:be:46:e4:d3:94:bc:70:8e:01:3f:77:70:c2:01:
                    35:7b:8a:82:de:7a:aa:87:e9:09:b3:f8:24:b6:07:
                    cd:a8:eb:62:38:41:7a:a8:25:de:0f:c1:5c:78:88:
                    75:ac:b9:d4:f2:35:fc:1e:e2:a0:07:df:43:db:e1:
                    22:94:f6:cf:72:d5:03:f2:37:17:e9:66:37:45:1d:
                    49:23:3d:3d:03:d7:ff:f6:39:c7:5c:d1:46:13:89:
                    41:0e:4d:55:d2:9d:24:5a:4d:fe:18:3f:e6:c6:33:
                    a4:4c:1b:5b:ed:ca:80:7d:15:bf:a8:31:e0:01:87:
                    b6:45:cc:69:23:64:c4:ab:60:53:3d:f4:a9:5a:cc:
                    52:4f:7c:27:d5:b5:1e:21:30:61:ce:50:ae:2a:de:
                    e3:67:ac:17:53:40:1b:7e:34:6c:a3:f4:4d:79:67:
                    07:bc:ab:09:14:1a:be:b4:96:8e:b4:9b:1c:29:c6:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:6B:F9:2D:3B:95:9E:23:08:05:82:3B:DC:29:14:33:3A:39:78
            X509v3 Authority Key Identifier:
                keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c1:22:df:f0:f6:cb:40:72:1a:6c:8d:71:de:6e:e0:a6:28:
         11:ac:c2:cf:1b:7b:a6:4d:73:bb:26:26:ac:6e:3c:f3:34:98:
         29:04:02:9e:9a:80:8e:8b:ae:e3:07:0a:5a:cd:5b:fb:4b:36:
         9e:83:53:b6:ad:71:81:63:5e:6b:11:8c:da:fa:33:14:ec:ef:
         26:ed:4a:00:20:ce:4b:7f:8c:75:ef:ef:c3:09:50:af:9f:77:
         a6:32:e1:bd:83:1f:e3:56:91:eb:a2:6a:45:f4:b9:60:4b:d0:
         2f:6a:94:88:2d:18:8e:09:3e:51:83:4a:62:05:35:40:40:a1:
         bc:0b:a7:54:25:5f:29:6a:36:73:8a:ee:d7:12:c9:32:13:fa:
         1c:ff:3c:2b:01:3b:83:d2:0c:3d:25:ff:be:77:8f:09:32:c8:
         51:3c:06:2d:4a:2b:9a:13:2e:7b:e2:7d:b7:29:e1:4d:4b:fe:
         dc:9f:95:05:9d:ad:1b:46:73:84:bf:be:c1:15:40:fa:8d:be:
         82:ab:4c:0d:a9:97:c2:79:d7:ba:79:a7:b9:e8:f7:98:27:aa:
         69:0c:cc:ed:be:e9:00:04:fb:2f:c7:f4:27:27:42:0e:b1:10:
         51:93:04:92:8e:44:a1:d1:e4:c3:6c:d7:59:b7:95:10:61:f7:
         1b:42:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:19:22 2026 by rpki-client