Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File:                     t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier:          CzRWRFFYSbSx00nxFxGiCsW6e5lZWdKPXhSSpP6/Bhk=
Subject key identifier:   8E:BC:87:E2:59:83:4A:B2:0F:DA:90:96:35:0E:72:45:98:C6:BF:69
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer:       /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number:          40
Signing time:             Tue 03 Mar 2026 08:06:57 +0000
Manifest this update:     Tue 03 Mar 2026 08:06:57 +0000
Manifest next update:     Tue 10 Mar 2026 08:06:57 +0000
Files and hashes:         1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: BF4l88EgFQhf5CF98BxyvuMoiRjXew5SzLhyUztbZ9k=)
                          2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
        Validity
            Not Before: Mar  3 08:06:57 2026 GMT
            Not After : Mar 10 08:06:57 2026 GMT
        Subject: CN=69a696a1-3784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:0f:6c:65:71:d5:17:76:9c:90:60:8d:ca:
                    27:86:ef:01:5b:88:51:09:5a:7f:c8:8b:4c:d5:13:
                    35:e1:de:21:ab:12:25:e2:47:cd:a5:db:ea:be:e1:
                    8f:48:fd:63:0f:6d:ec:35:6d:b3:df:64:e8:76:6d:
                    6e:80:47:38:5f:60:90:75:9d:5e:67:26:19:23:0c:
                    40:8a:fc:39:33:73:bb:05:9b:20:1c:b5:78:02:59:
                    70:ab:75:c2:26:37:38:8b:3a:fe:c5:62:19:48:92:
                    01:28:33:86:41:af:97:cd:2d:7e:5f:04:fb:3e:ee:
                    43:d8:95:8a:c0:eb:19:03:39:04:10:39:1b:32:49:
                    d4:86:aa:3b:e2:10:1f:ec:60:b2:1f:d5:b4:7c:9c:
                    57:12:55:c4:8d:a4:ad:6e:07:b8:bc:8a:f8:86:01:
                    b9:f8:18:7b:6a:71:13:76:6c:1d:8a:7c:6f:55:30:
                    cb:91:cb:19:0d:23:a6:fe:04:8e:36:92:87:bb:50:
                    aa:9c:03:ac:57:14:78:c7:ff:2c:4f:87:8b:9d:3b:
                    c0:25:6d:9c:d5:0c:19:42:53:33:22:5c:7c:ce:59:
                    95:c8:91:86:19:51:5d:cf:19:80:1f:b5:3d:bf:48:
                    7e:b2:c4:11:34:7a:33:71:01:6f:75:2b:a9:05:38:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BC:87:E2:59:83:4A:B2:0F:DA:90:96:35:0E:72:45:98:C6:BF:69
            X509v3 Authority Key Identifier:
                keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:97:7e:a6:1b:61:fb:04:31:49:d3:12:df:7a:86:de:80:
         67:4a:32:f4:63:00:bb:2b:26:b9:c9:3d:2a:b4:2a:c0:72:b0:
         57:f3:37:08:24:86:cd:ab:03:1f:20:19:33:4b:71:6b:9b:e5:
         fc:48:71:69:d1:a6:c9:6e:34:b7:9c:16:8b:05:9a:a6:1d:4e:
         9c:27:cf:76:35:35:b8:cb:c4:e8:30:49:e9:a6:ca:b4:d3:98:
         49:97:a8:b5:1f:51:2d:9d:ae:40:93:9c:de:65:da:35:b9:bb:
         8b:ee:fb:18:51:df:6d:5a:e4:f1:4b:e4:19:64:6f:16:7e:f0:
         f9:b1:39:07:88:fd:a1:4f:93:ee:a8:40:c6:3e:8b:4e:90:ea:
         0b:27:09:f1:2a:0f:9e:06:16:a4:de:86:af:82:18:29:c7:6a:
         54:76:eb:50:d0:ca:bd:63:c8:a0:f1:fa:d6:0c:cd:fe:de:65:
         1f:57:75:06:fc:0f:5c:55:a5:f5:f4:6c:cf:69:f1:63:fa:c6:
         2a:3b:dd:9c:9e:99:4e:b8:28:06:61:19:f7:ae:6c:59:6a:3f:
         43:87:f3:15:2c:24:97:c2:c2:f5:c9:46:5b:94:36:3c:12:7d:
         82:3a:16:98:0c:f7:ab:55:68:45:49:ee:79:25:e8:bc:62:95:
         9b:50:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:23 2026 by rpki-client