Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
File:                     QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json)
Hash identifier:          yCyPkQixK1cd7MpY7ZN/4FVXpCElwRX3plXXttsPb8I=
Subject key identifier:   E1:38:AE:C2:6E:2C:7E:71:87:F7:B2:2C:A7:F1:8F:6C:25:0B:BF:1B
Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
Certificate issuer:       /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
Manifest number:          EC
Signing time:             Tue 03 Mar 2026 06:01:50 +0000
Manifest this update:     Tue 03 Mar 2026 06:01:49 +0000
Manifest next update:     Tue 10 Mar 2026 06:01:49 +0000
Files and hashes:         1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: Y/brGJyEH2K4EtxX2bqH7XlVn2vDCW8eLVnGfK/mRXs=)
                          2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: V9uLs/UPnwnmzkafwxkP85mnXAZceqiwbgfkXel2Nag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
                          rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
        Validity
            Not Before: Mar  3 06:01:49 2026 GMT
            Not After : Mar 10 06:01:49 2026 GMT
        Subject: CN=69a6794d-e945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:6c:17:3b:1b:1b:13:69:3e:fd:a5:65:65:
                    43:f3:d0:7d:e0:5a:4f:66:d9:f6:1b:62:81:5d:b3:
                    51:fd:a2:cd:06:07:5a:0f:e5:6c:b1:f8:54:f9:e3:
                    6f:56:f9:85:a3:f7:a9:11:28:e7:f9:94:30:3b:02:
                    16:00:f3:2b:13:c9:46:07:36:20:1e:9b:d8:57:c5:
                    17:e3:64:76:a9:8a:fd:8e:01:f5:de:5c:8f:86:70:
                    b6:36:bf:f4:1d:98:6d:72:d2:4a:dc:9a:10:ba:6e:
                    b7:39:16:77:42:74:0c:b2:ba:93:4f:41:bb:ab:d6:
                    bd:bf:f3:a8:5e:2b:8e:13:02:d7:1b:31:0b:2d:6a:
                    64:29:58:94:21:de:a3:74:69:71:03:61:7d:7b:3b:
                    04:05:5c:cf:97:12:f9:10:d2:f2:2f:28:e2:94:3e:
                    f1:b1:35:2e:10:94:77:e0:45:4e:bc:66:ff:36:f3:
                    dd:38:15:c0:52:34:8a:45:cb:11:c5:00:9b:c8:49:
                    74:fb:0b:18:c6:88:88:3f:fd:28:48:57:54:d2:97:
                    5f:c2:0a:e6:ec:d3:c2:5e:a3:4f:bf:86:cb:e6:56:
                    45:86:95:a3:9e:17:92:87:37:94:8b:e4:24:ef:ec:
                    8d:f4:91:9e:38:68:12:d7:7d:c2:37:0b:22:5a:00:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:AE:C2:6E:2C:7E:71:87:F7:B2:2C:A7:F1:8F:6C:25:0B:BF:1B
            X509v3 Authority Key Identifier:
                keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:ba:4a:21:51:7a:1f:5c:83:2e:1a:10:85:2a:bb:78:0d:
         77:20:a3:8b:63:e0:44:ab:01:4a:45:85:a5:5e:7a:77:23:d9:
         30:7a:eb:d5:92:35:07:42:72:09:82:79:f3:da:5a:5a:48:b1:
         77:38:43:f6:ae:fa:58:52:72:07:7c:90:70:ee:46:d6:51:61:
         15:95:39:54:65:7b:8e:7b:4d:3e:3d:19:f9:0b:56:c7:82:2b:
         9a:80:be:d2:cc:f5:b1:2a:bf:93:84:b9:21:2d:9e:8c:86:c8:
         63:ca:75:98:a7:2a:b5:25:d2:67:8b:95:23:a5:d2:15:15:e2:
         4f:98:38:8f:61:4f:53:09:bc:47:49:b0:7a:64:83:2f:b7:2a:
         1d:03:7d:78:ee:f6:f3:dd:e2:5f:52:19:49:60:04:70:d7:e5:
         0f:7f:cd:64:f9:6b:2f:fe:91:88:0c:d3:90:88:c0:0e:ae:c7:
         68:22:94:ff:88:bb:84:fe:c3:71:55:81:6a:22:e1:d0:ea:61:
         68:64:62:17:b2:c5:9b:fe:56:f1:52:cf:f6:34:35:47:e3:c5:
         1a:56:1b:04:1a:1b:e3:58:d4:f0:a5:ca:da:90:72:cf:18:64:
         a6:05:53:ca:ac:1e:b0:44:1a:b7:11:15:13:f3:64:43:10:32:
         18:d2:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:09 2026 by rpki-client