Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File:                     DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier:          ZoyVAljP4YOHEKzrPR0y2oVmZNFatWKBVEDjThP43js=
Subject key identifier:   64:63:72:B8:B4:31:8D:8C:15:0E:70:E1:59:C2:F7:8D:9A:55:D0:BE
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       17F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number:          17CF
Signing time:             Mon 02 Mar 2026 16:35:47 +0000
Manifest this update:     Mon 02 Mar 2026 16:35:46 +0000
Manifest next update:     Mon 09 Mar 2026 16:35:46 +0000
Files and hashes:         1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: ybF/hlQWqdMAPFXwNfJQkborQkcCx5j9/IWq2jDouVs=)
                          2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: G1K2oOJN8JSdZJH7sAiV+vdZ3tm2/QChp9HUt6nzUkw=)
                          3: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 6SGIVV8UzkYI8imkUH9CHf8Pfdrw5iBU8LEsd0w7wTY=)
                          4: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: eNCAWuAh5KW5qBuvE5k2vNN9F1eCn7J5iVfhenudu/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6134 (0x17f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Mar  2 16:35:46 2026 GMT
            Not After : Mar  9 16:35:46 2026 GMT
        Subject: CN=69a5bc63-a64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:b0:d5:36:8b:8a:96:8b:ed:b2:ca:b9:75:
                    45:c6:b2:e7:70:3e:a6:82:c8:bf:53:44:4e:c7:61:
                    f4:60:d0:49:a0:1b:03:58:25:64:74:81:8c:ca:e9:
                    05:5c:f2:71:b9:25:13:be:50:16:5e:75:cb:ad:1b:
                    24:33:fa:68:6c:93:c9:6d:74:94:51:0b:12:96:03:
                    99:5a:11:69:8c:f0:43:4a:d9:52:8c:f2:a0:b6:0e:
                    51:e7:e3:b3:08:9b:db:54:20:88:6b:e5:11:24:df:
                    f1:a3:fe:42:9c:59:02:e4:f5:5e:63:71:f6:d5:eb:
                    84:42:af:81:9a:e3:9f:be:b4:b4:70:49:50:b2:df:
                    d5:e1:e6:82:2a:eb:cb:6c:bb:fc:f0:49:25:72:28:
                    23:b4:65:a2:33:00:98:ba:59:47:f5:63:0e:de:f4:
                    e9:79:de:8d:50:01:70:c5:f0:8a:d7:be:ab:e8:27:
                    a9:36:ec:fa:6a:2e:f2:c1:fe:ba:8d:6e:82:cb:6f:
                    0f:66:dc:56:02:d6:66:62:39:86:54:35:78:81:ac:
                    ea:39:c0:74:b9:b4:94:fd:06:ad:ff:91:e8:c9:e6:
                    d7:d4:1a:b3:92:ce:84:16:b7:aa:dc:0a:6d:fe:11:
                    49:0d:15:98:2c:0e:0b:7a:7c:99:b6:73:3e:22:bc:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:63:72:B8:B4:31:8D:8C:15:0E:70:E1:59:C2:F7:8D:9A:55:D0:BE
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:07:93:19:86:e4:67:dd:2f:61:90:d5:0d:5a:ca:1d:66:a8:
         35:26:4f:42:da:40:20:82:d0:b4:00:55:15:f6:06:a1:1d:6f:
         52:8f:13:52:43:92:38:86:30:c9:84:14:9c:dc:fa:ad:36:36:
         2b:24:b3:38:b1:0c:34:13:f1:02:d4:d2:1f:cc:bf:da:65:5c:
         33:0f:32:a3:c2:31:15:6c:5f:e8:a8:b3:07:0e:6d:95:cf:32:
         89:ec:0b:60:c3:04:09:c8:55:d8:71:14:f2:7f:a2:13:32:eb:
         47:93:0c:20:71:21:40:c8:c7:c2:8e:f7:eb:f6:de:dd:24:ae:
         8c:54:51:ac:0d:06:48:e3:40:ca:fa:b4:70:72:28:91:45:85:
         c0:32:f4:66:f9:81:10:9d:86:41:7a:a3:a6:72:3a:df:9e:31:
         bc:40:a4:8e:67:a6:19:fb:26:93:0f:6a:c3:3a:72:aa:49:c9:
         ca:81:f8:45:38:68:81:b9:e2:cf:12:6d:89:05:aa:44:5a:8a:
         53:84:51:0a:9a:08:b6:01:40:86:6e:26:56:36:85:84:91:94:
         07:e0:31:f5:72:51:98:26:a7:a3:19:37:ed:e9:10:2d:bf:de:
         7a:8e:81:e3:78:27:77:59:28:45:30:53:9a:60:7e:c3:b8:e7:
         d6:70:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:29 2026 by rpki-client