Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          IshxFyiqht/qyjuRbJD2aRC2N/zmIetbY4HksU7FSYM=
Subject key identifier:   1F:46:62:F1:27:2D:42:93:49:7A:00:CA:AE:A0:34:BF:78:F5:C2:84
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       2195
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          2195
Signing time:             Mon 02 Mar 2026 15:58:28 +0000
Manifest this update:     Mon 02 Mar 2026 15:58:28 +0000
Manifest next update:     Mon 09 Mar 2026 15:58:28 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: ABS0fPju27sxHCSJDg4cAC6Zmnr3AZTQXxSt7WANmyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8597 (0x2195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
        Validity
            Not Before: Mar  2 15:58:28 2026 GMT
            Not After : Mar  9 15:58:28 2026 GMT
        Subject: CN=69a5b3a4-cd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:45:40:86:8c:20:90:45:6a:cd:e1:b1:55:
                    46:c4:eb:9f:f6:78:38:0f:a8:69:68:e5:66:ba:99:
                    88:11:b9:1c:8b:84:67:dd:06:97:9e:35:6c:17:1a:
                    36:4a:92:ac:6b:8f:1b:45:1b:3c:7e:54:16:65:2b:
                    85:e3:df:c1:9f:e0:82:2c:3a:f0:54:7e:4e:35:5d:
                    fb:48:01:69:66:c6:6a:c8:27:0e:aa:59:fc:85:11:
                    2b:a4:46:79:6d:bc:d7:3b:4a:e7:56:fd:5c:ee:1b:
                    e6:1b:ca:9e:6c:41:a8:6a:d3:9e:3c:77:57:13:f7:
                    a5:c9:a8:d2:66:73:03:fd:0a:07:e8:25:b3:25:fd:
                    99:6f:4f:f1:f5:34:41:f1:7b:8a:5d:b0:2a:5b:38:
                    89:3e:39:76:81:d5:29:55:7c:db:27:02:08:e8:c1:
                    ed:b3:c7:e4:c3:6d:79:1e:24:91:f5:fd:e7:3b:01:
                    f9:45:55:ba:73:c9:00:ab:d4:42:23:28:d0:c6:ba:
                    dd:33:6d:99:69:3f:96:f0:bc:c3:22:d7:31:b9:14:
                    f1:ac:80:04:90:13:b3:20:39:02:b7:e2:af:b2:13:
                    7b:9c:d8:44:da:77:d7:98:7b:06:9d:f8:8f:c8:6c:
                    e9:2d:57:c3:b8:21:8e:8a:c8:ea:47:54:0d:50:cd:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:62:F1:27:2D:42:93:49:7A:00:CA:AE:A0:34:BF:78:F5:C2:84
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:62:2e:d0:2f:66:72:97:d6:df:22:c5:0b:a9:dc:35:ae:3e:
         c9:4a:93:a3:e3:09:b0:a4:9c:d3:8a:be:a2:40:6d:8c:84:af:
         bb:32:ec:72:c6:5d:0d:09:45:46:44:03:28:dc:b5:f1:94:2e:
         ee:67:84:e4:4a:4d:fd:4d:40:80:92:ad:c0:d3:37:16:68:19:
         1a:c4:d7:85:06:63:40:5c:2d:b9:a7:59:f7:28:d9:34:63:a8:
         09:48:d3:f1:ef:28:63:1b:a5:19:53:b6:fb:b2:b8:25:ac:8c:
         48:67:42:cb:ad:e7:bb:91:87:b2:25:a1:03:de:44:a2:50:7c:
         02:0d:e3:14:b9:06:d8:43:22:b1:66:4f:57:93:96:fa:f6:c9:
         31:9a:ce:0f:f2:f1:08:b2:7f:89:ce:58:2c:73:7a:63:3a:3d:
         53:3f:0c:c7:7d:c1:3d:ae:a5:01:7c:c2:09:ac:44:da:a2:9f:
         7a:c2:3d:c9:75:7b:ee:44:21:fd:e3:6a:1e:6d:da:38:e6:c2:
         64:69:17:00:cf:41:9e:3b:47:8b:a8:76:a9:b5:54:2d:c8:7d:
         44:e1:8e:c3:72:2b:66:3a:66:a7:fe:b0:8e:c1:05:e0:21:f1:
         0f:24:e3:af:99:f9:21:db:39:a3:05:4f:69:9e:2d:a3:3b:c2:
         a5:0b:15:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz
MzJEOTU1NUUwHhcNMjYwMzAyMTU1ODI4WhcNMjYwMzA5MTU1ODI4WjAYMRYwFAYD
VQQDEw02OWE1YjNhNC1jZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMhFQIaMIJBFas3hsVVGxOuf9ng4D6hpaOVmupmIEbkci4Rn3QaXnjVsFxo2
SpKsa48bRRs8flQWZSuF49/Bn+CCLDrwVH5ONV37SAFpZsZqyCcOqln8hRErpEZ5
bbzXO0rnVv1c7hvmG8qebEGoatOePHdXE/elyajSZnMD/QoH6CWzJf2Zb0/x9TRB
8XuKXbAqWziJPjl2gdUpVXzbJwII6MHts8fkw215HiSR9f3nOwH5RVW6c8kAq9RC
IyjQxrrdM22ZaT+W8LzDItcxuRTxrIAEkBOzIDkCt+KvshN7nNhE2nfXmHsGnfiP
yGzpLVfDuCGOisjqR1QNUM0VywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9GYvEn
LUKTSXoAyq6gNL949cKEMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw
Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK
OFkwZmt3LWpNdFl6TFpWVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASmIu0C9mcpfW3yLFC6ncNa4+yUqTo+MJsKSc04q+okBtjISvuzLscsZdDQlF
RkQDKNy18ZQu7meE5EpN/U1AgJKtwNM3FmgZGsTXhQZjQFwtuadZ9yjZNGOoCUjT
8e8oYxulGVO2+7K4JayMSGdCy63nu5GHsiWhA95EolB8Ag3jFLkG2EMisWZPV5OW
+vbJMZrOD/LxCLJ/ic5YLHN6Yzo9Uz8Mx33BPa6lAXzCCaxE2qKfesI9yXV77kQh
/eNqHm3aOObCZGkXAM9BnjtHi6h2qbVULch9ROGOw3IrZjpmp/6wjsEF4CHxDyTj
r5n5Ids5owVPaZ4tozvCpQsVhw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client