Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File:                     RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier:          qmNHs2uLi0Pgup6IkngHaZqqfMJtgAn5E/NPGvdpVWc=
Subject key identifier:   16:EB:10:8C:29:DA:5E:BF:0B:1E:E7:35:97:FE:8D:C5:C9:24:C8:91
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer:       /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number:          022F
Signing time:             Tue 03 Mar 2026 02:27:37 +0000
Manifest this update:     Tue 03 Mar 2026 02:27:37 +0000
Manifest next update:     Tue 10 Mar 2026 02:27:37 +0000
Files and hashes:         1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: EX3ie1TOZ4qL3RubwiXJgHCmxbBFvfE44nzxex4GjQM=)
                          2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
        Validity
            Not Before: Mar  3 02:27:37 2026 GMT
            Not After : Mar 10 02:27:37 2026 GMT
        Subject: CN=69a64719-7d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:d6:d3:a3:ad:b6:0f:aa:9c:51:f9:cf:33:
                    05:42:b3:31:d2:df:79:7a:44:6e:f4:99:41:a0:f8:
                    c9:fc:05:fd:ff:a0:43:ae:0d:d0:cf:eb:03:bb:e1:
                    f3:2d:b1:26:a8:6c:4d:b8:d3:30:6e:b2:63:41:18:
                    19:11:34:da:11:68:56:86:de:ec:a1:64:2c:80:20:
                    e4:d9:7c:a4:50:6c:8e:84:b8:3e:4f:92:22:b5:64:
                    e9:64:93:0c:d1:4f:62:70:90:6f:49:c4:cc:e8:3b:
                    eb:8b:a4:fb:77:c5:32:70:83:56:5b:bf:e4:0d:4a:
                    6c:b8:a3:b7:0c:11:86:7f:13:7e:66:71:1d:b2:75:
                    21:78:81:4f:b9:a6:6e:33:61:4e:57:a2:35:ef:dc:
                    43:8e:a7:29:11:14:5a:3d:f4:ce:7c:fa:8d:55:96:
                    05:6a:0f:93:8e:68:40:6a:20:f1:a4:6d:7c:31:da:
                    ed:79:bb:bd:82:24:86:b6:98:7d:05:2b:63:23:6b:
                    76:4c:95:09:98:54:3b:cc:cc:f4:e9:e4:28:98:2b:
                    41:e6:c4:89:43:dc:20:24:94:aa:77:c3:a4:c2:96:
                    23:0f:3c:72:ad:60:d0:8d:9a:ba:de:f9:dd:d7:45:
                    b1:cf:be:a2:42:4e:f5:27:b6:8f:62:73:8c:8b:ea:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:10:8C:29:DA:5E:BF:0B:1E:E7:35:97:FE:8D:C5:C9:24:C8:91
            X509v3 Authority Key Identifier:
                keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e4:99:be:97:f0:10:29:cc:1b:ff:e5:30:ab:66:ea:ab:ad:
         cd:fb:b5:fa:75:13:36:01:9b:6d:16:a1:0b:8e:f5:0e:69:5a:
         5d:ca:8b:69:45:b6:15:8c:4f:58:35:cb:3e:2b:15:ad:bd:94:
         4d:e5:d8:c1:48:be:c1:c2:17:41:68:b3:9c:8e:e6:ed:21:d7:
         65:21:13:15:15:72:64:0c:33:a5:61:c2:0a:8c:fe:44:3e:20:
         25:22:d6:cf:d7:23:1d:4a:2a:17:f5:f7:f6:09:28:51:59:04:
         d6:01:87:b6:68:0c:c6:04:69:06:ea:a2:b5:33:9e:e1:ac:22:
         69:35:cf:9e:d6:3b:69:7c:6b:a7:40:de:89:f7:1d:e8:cc:ea:
         ea:24:83:7a:63:fe:05:cb:c4:b0:f5:09:18:6c:58:9a:75:e9:
         fa:6f:c3:db:70:ed:0e:40:2b:c2:95:72:46:ad:cb:24:95:a9:
         ae:91:38:87:20:61:a4:9b:10:17:6f:c5:c7:25:40:93:07:78:
         90:03:d3:19:c0:10:c4:05:be:eb:f2:17:8d:5d:16:5c:82:f5:
         de:bf:f2:52:90:f5:e8:35:fc:d5:b7:91:38:ba:ce:5c:7d:6b:
         ec:42:5f:37:7e:b3:6c:f2:c5:aa:a3:2f:78:b4:15:8f:b2:ae:
         62:9a:e7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:21 2026 by rpki-client