Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
File:                     8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json)
Hash identifier:          dNvX+LykqP+BW07RZUt76pujYWHwo1KSztKAQjgEo3c=
Subject key identifier:   93:BA:BF:7F:3D:B4:35:01:70:DF:82:C4:8C:FE:CC:5F:04:44:8A:6B
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Certificate issuer:       /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
Manifest number:          013B
Signing time:             Tue 03 Mar 2026 04:56:39 +0000
Manifest this update:     Tue 03 Mar 2026 04:56:39 +0000
Manifest next update:     Tue 10 Mar 2026 04:56:39 +0000
Files and hashes:         1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: PIoTVpehXWx0abCDKM5NbeHHtGY39BR8fab7+yrP6V4=)
                          2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: EdoKG/rO2TUcNqvrT3rmtowwCMBDjmlbd0wrAkkItCE=)
                          3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: fXNyTYwGL5hwQV4+C/rGk2vU+rMPw5B8cRLeFXzc6ZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
        Validity
            Not Before: Mar  3 04:56:39 2026 GMT
            Not After : Mar 10 04:56:39 2026 GMT
        Subject: CN=69a66a07-11a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:53:21:35:f4:7b:8e:52:ac:0c:27:6d:08:
                    43:23:48:f9:b7:fd:ee:21:9b:ab:56:3f:be:b8:27:
                    54:ca:c5:21:0e:2f:b6:06:e9:32:58:90:a5:be:1c:
                    7c:da:f9:93:91:a6:f5:da:57:cd:2c:27:08:7c:ea:
                    f9:65:1c:25:2e:92:dd:4e:d7:22:37:1f:32:7c:ce:
                    59:62:f3:e1:61:23:53:db:1e:f8:96:d5:16:43:f7:
                    9a:ac:68:b5:c0:df:2b:27:99:a5:0e:43:b3:c5:a5:
                    73:10:d9:1a:16:32:1e:18:a8:f3:14:01:e3:71:24:
                    da:a1:41:cb:ca:ba:34:98:71:55:70:37:e1:2d:f1:
                    b2:dc:7f:5d:1d:42:d2:74:b3:a5:3f:ee:64:03:bb:
                    50:a3:f9:51:9e:02:7f:69:ee:a9:6d:af:88:ac:fd:
                    1d:a4:37:66:74:77:2c:ec:2e:d2:89:c9:8a:e8:f5:
                    63:da:a3:cf:7d:99:86:1b:68:5a:4d:3d:dd:55:db:
                    47:9a:fd:0c:aa:18:37:74:b1:57:ea:dc:88:7a:5a:
                    fd:15:1a:c0:2b:f9:2f:b6:20:bc:2d:b0:b4:d1:0f:
                    30:75:ff:e2:32:ea:57:63:80:dc:96:3a:56:3d:57:
                    bc:d1:e7:e6:2b:72:ad:61:b8:5e:67:3d:53:b7:3b:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BA:BF:7F:3D:B4:35:01:70:DF:82:C4:8C:FE:CC:5F:04:44:8A:6B
            X509v3 Authority Key Identifier:
                keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:72:22:d6:84:cc:be:80:83:04:a9:d3:c4:be:d3:17:2d:e8:
         26:75:de:d3:5c:e8:31:01:17:81:45:b2:97:dd:dd:67:64:ac:
         e9:21:96:3f:f9:16:81:a0:fd:98:64:ee:2d:25:c7:fa:e8:72:
         7f:10:22:a6:2b:57:b5:8f:64:74:a3:f2:b3:37:5e:ae:72:78:
         53:f9:be:4b:d9:f1:6b:ba:c8:95:8d:9b:37:f0:bd:87:ee:44:
         d8:0d:7e:fc:3a:ac:37:7e:f7:39:10:7e:6c:d1:60:a0:c6:54:
         e5:af:c8:5f:d6:27:44:01:0d:86:53:65:72:cb:58:47:31:3e:
         71:7e:a2:5a:1f:62:50:c8:53:c0:55:87:3e:da:d8:bd:05:b5:
         31:d3:77:43:4f:0f:ab:4a:a0:94:d7:2c:08:65:a6:5c:25:68:
         3d:11:66:e8:d9:bd:69:a8:61:2c:d4:3a:e9:a3:68:a8:f4:7f:
         78:92:7a:e8:0d:79:36:20:26:54:fb:24:78:82:b2:ae:f4:f6:
         dc:28:5a:35:3d:3e:61:fe:04:bd:b7:47:79:20:b2:c7:61:36:
         4b:fe:ec:7d:f1:ea:b9:01:ab:58:13:2e:43:f9:51:d1:2c:de:
         bb:91:24:dc:d2:40:fd:5d:7d:17:c7:6d:f7:7f:d1:2a:c1:c8:
         72:22:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:28 2026 by rpki-client