Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
File:                     dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft (raw, json)
Hash identifier:          BehgZAOH3otlT0Em1qX11Xg3oIzxsO93xzqW9v2whzM=
Subject key identifier:   1F:4D:B2:72:F8:A0:F0:BF:D0:74:CC:AA:62:9F:50:6E:E3:AB:21:83
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Certificate issuer:       /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
Manifest number:          1E
Signing time:             Tue 03 Mar 2026 08:33:53 +0000
Manifest this update:     Tue 03 Mar 2026 08:33:53 +0000
Manifest next update:     Tue 10 Mar 2026 08:33:53 +0000
Files and hashes:         1: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl (hash: UOn9f25uUg6+l3NNnD0JV65fzDc8o+/uQvQsmrVGWZo=)
                          2: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (hash: s1rtmTiYlmy3jWaFmYpS86l0ke3V/J9gclHPerB9twY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
                          rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
        Validity
            Not Before: Mar  3 08:33:53 2026 GMT
            Not After : Mar 10 08:33:53 2026 GMT
        Subject: CN=69a69cf1-44f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:87:b5:78:62:af:e5:3a:29:25:95:5d:c6:
                    9e:e3:2c:ef:a8:03:d9:ca:49:a9:1b:ce:01:a6:9e:
                    7c:68:2a:2e:f4:8b:09:08:06:43:49:e9:59:f3:5d:
                    d5:72:d1:ca:85:2f:12:2e:4f:fa:28:8d:e1:2f:54:
                    b9:59:41:12:ae:e2:79:61:84:2f:40:53:60:b1:44:
                    0b:41:9a:84:61:77:08:6b:ab:b6:f5:10:1c:a2:d8:
                    a0:65:27:9d:d6:12:1b:47:56:84:80:18:7e:29:07:
                    23:9d:43:d6:59:b1:1c:f1:53:c6:29:a7:a1:5c:d0:
                    a5:4b:61:d6:26:2b:aa:0a:7a:4b:6f:6e:30:28:58:
                    a5:d3:a7:b9:4a:7e:b7:4f:20:a8:bf:99:c0:c4:12:
                    c9:f4:c3:23:5a:28:40:23:3f:d0:75:14:55:25:ed:
                    e1:0b:49:b2:13:64:d0:3d:08:da:e6:0e:f0:dd:85:
                    a6:b6:2f:25:c1:15:cd:31:fa:d8:5f:5d:ed:d5:cf:
                    bd:ae:a1:41:a2:22:07:7e:c5:e1:fe:74:6e:a5:ca:
                    94:d8:30:f2:68:60:c5:af:75:0a:dd:80:d8:25:a2:
                    c7:f5:0e:4e:02:1f:e1:35:21:49:94:d8:8d:e1:f4:
                    07:3a:74:c4:7d:43:d0:1a:21:80:ec:61:2a:39:b0:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4D:B2:72:F8:A0:F0:BF:D0:74:CC:AA:62:9F:50:6E:E3:AB:21:83
            X509v3 Authority Key Identifier:
                keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:55:6c:db:b0:af:42:40:dd:c1:ba:e5:65:7f:bc:6c:65:55:
         9b:6a:9b:64:d9:41:ec:b0:a4:2e:46:e6:5f:c7:09:1e:e9:a1:
         33:e1:79:52:c9:f9:07:85:49:5c:8d:44:1e:b8:0d:cf:84:5f:
         32:1b:e0:d0:07:61:61:30:15:4b:1a:1f:c1:bf:b8:f9:96:23:
         b9:81:90:97:66:9f:07:55:5b:de:5b:98:88:87:c6:15:0b:75:
         2a:d0:57:c4:f7:64:67:63:0b:88:a5:a3:45:4c:64:c4:dd:e7:
         54:8e:ad:8c:aa:da:12:af:ee:cb:5e:9e:88:b1:13:c6:11:2f:
         13:72:f9:d5:be:73:b2:d3:d4:9a:e7:e4:31:3f:c5:32:55:64:
         19:30:aa:19:fb:4d:20:6b:3c:32:77:5c:50:dc:09:14:f3:7a:
         8f:de:0f:d6:ae:bd:13:ea:43:eb:1d:c0:da:1b:c0:8e:33:74:
         ea:4b:4c:b1:00:48:2d:b6:ad:06:50:f0:ee:28:b4:55:2d:51:
         ef:60:ad:32:af:88:25:05:39:b4:d9:5c:23:78:bd:4f:f4:e3:
         a4:b2:35:4e:fe:a1:7f:45:2b:b1:d0:9f:98:a3:81:c1:7e:76:
         98:4c:bb:97:92:f7:93:2a:38:4c:24:60:a2:99:7d:05:d3:14:
         0d:7d:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:04 2026 by rpki-client