Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
File:                     kw7wlbDGjcijfJH_jxM3Bw6pykA.mft (raw, json)
Hash identifier:          a2nuJQ78P7JVMQTZb0E35MvP4UXe0rcckXTqZfG8PPQ=
Subject key identifier:   FC:FE:FE:E7:C4:01:91:48:C3:9B:7D:CD:A8:5D:FE:F4:1B:B9:99:AE
Authority key identifier: 93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40
Certificate issuer:       /CN=A916E1C6/serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
Manifest number:          36
Signing time:             Tue 03 Mar 2026 08:21:13 +0000
Manifest this update:     Tue 03 Mar 2026 08:21:13 +0000
Manifest next update:     Tue 10 Mar 2026 08:21:13 +0000
Files and hashes:         1: kw7wlbDGjcijfJH_jxM3Bw6pykA.crl (hash: i/CxtzTAhzvHK2bh6yZdCOGJWxhugnsI/ciGICObO1c=)
                          2: 360B184E061911F1B00F359F223D8C67.roa (hash: iW/KeAibCKh9XS9kEIWLZ+vUHFr1kVb4/aLDcfEc0f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl
                          rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E1C6, serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
        Validity
            Not Before: Mar  3 08:21:13 2026 GMT
            Not After : Mar 10 08:21:13 2026 GMT
        Subject: CN=69a699f9-9ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:72:9e:bd:2b:34:78:56:07:e7:cd:5f:de:
                    d8:89:e0:55:1c:ce:c9:62:3d:75:2a:52:b4:d2:52:
                    2e:d2:75:c4:c9:ed:42:72:95:8d:72:ec:33:53:3f:
                    91:cd:16:30:41:d0:2b:5c:60:82:68:a4:e0:37:3c:
                    8c:df:bb:bf:82:83:e7:a3:b2:d3:60:e5:9c:c2:74:
                    3f:e5:0f:36:fc:66:53:e0:2a:b6:5c:01:e3:ec:9c:
                    84:98:01:85:9b:e6:3f:23:4e:f7:ca:74:d9:f6:94:
                    66:36:0d:33:8c:3d:8d:ee:60:ab:e5:91:0e:41:05:
                    81:f1:37:33:ae:28:18:4a:c0:e9:02:95:52:50:4c:
                    df:5b:c3:52:6d:d4:6b:e7:44:1e:1e:ea:5b:76:c8:
                    77:9a:8d:95:c8:01:80:63:b2:cd:83:1c:9a:72:21:
                    27:5d:ea:ed:5b:af:a8:bf:de:07:ac:26:2f:1b:58:
                    cc:00:12:b8:e3:42:9d:9b:42:58:f0:3e:20:92:f3:
                    d1:ae:d2:7f:6a:bd:1f:f4:52:b5:25:ff:1f:82:96:
                    e2:b3:f5:d1:b3:d6:5d:aa:79:30:ab:cc:07:44:77:
                    f7:20:56:e0:41:45:29:62:e9:1c:25:41:7e:eb:59:
                    02:c2:17:8c:68:19:86:9a:49:cd:9a:22:d5:41:d9:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FE:FE:E7:C4:01:91:48:C3:9B:7D:CD:A8:5D:FE:F4:1B:B9:99:AE
            X509v3 Authority Key Identifier:
                keyid:93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:b2:be:82:eb:bc:78:a4:a2:33:67:b8:99:0d:bb:9e:28:
         8b:18:dd:f6:59:da:bb:6d:12:c8:29:f6:9e:82:44:7f:02:e2:
         34:fd:33:f9:dd:14:55:1f:98:56:26:fc:e0:ac:6a:d7:fc:ea:
         f4:b8:cd:aa:0b:27:2c:38:f2:07:ba:3a:d5:58:5f:a0:71:d3:
         aa:bf:68:f0:9a:ed:00:1a:7c:9b:c5:7a:82:b9:f6:49:f3:ad:
         68:d7:fa:dc:f0:54:f3:cf:de:1d:52:22:c2:a3:f8:52:6d:0b:
         19:d1:88:21:02:d3:d2:58:6e:16:46:41:b7:be:b8:91:3c:5f:
         f6:e9:ea:73:00:8f:7b:42:cf:71:72:f7:47:82:f0:b2:61:b7:
         38:fa:6c:70:65:e4:9d:28:98:7c:54:4b:ea:b6:38:9c:84:f1:
         2d:07:f9:5c:6d:d9:5d:c6:a9:37:b3:da:c9:5b:68:5e:1a:b1:
         3f:b8:5e:db:e2:b4:ed:39:3d:49:32:a7:24:ef:18:84:32:85:
         8c:e4:02:2f:65:0f:74:d9:66:1b:2f:ee:c6:13:2f:9d:03:fc:
         e0:0f:5e:6d:f4:66:c8:eb:17:d4:5a:8b:13:0b:d2:6a:5c:41:
         f4:95:ca:30:83:b5:a1:42:f6:f1:2b:29:ea:d8:76:39:3e:e5:
         47:59:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:29 2026 by rpki-client