Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
File:                     cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json)
Hash identifier:          s0hITbST0I3MQoGmW7HNVY9i87MtL+vbJBFfD1Eaiew=
Subject key identifier:   BA:4E:61:2F:86:96:C6:0F:D7:E3:3C:69:65:CD:59:46:25:FC:3E:22
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Certificate issuer:       /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
Manifest number:          0694
Signing time:             Mon 02 Mar 2026 22:24:25 +0000
Manifest this update:     Mon 02 Mar 2026 22:24:24 +0000
Manifest next update:     Mon 09 Mar 2026 22:24:24 +0000
Files and hashes:         1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: UBy+hjVcvBMfGpCgEQNVR8dA/DDDOSWf7FVsrDi+wc4=)
                          2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: N3q1uf5+Rh2DPcAvlgwRY0LjrkAYYmogkX8/JqaD7MM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
                          rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
        Validity
            Not Before: Mar  2 22:24:24 2026 GMT
            Not After : Mar  9 22:24:24 2026 GMT
        Subject: CN=69a60e19-9533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:7c:6f:04:e9:18:a2:9a:10:15:47:64:e5:
                    9c:3d:f8:5d:99:44:f8:15:b9:54:ee:e4:7b:32:96:
                    b8:26:ad:25:ee:29:03:ba:03:e7:56:d2:e9:86:1d:
                    bb:a2:c6:a3:69:75:95:75:c2:e0:ce:d2:02:84:9f:
                    75:35:02:25:e6:33:f6:ca:b2:cb:35:aa:df:41:c1:
                    8f:04:18:8f:c5:28:73:3f:0f:69:c2:0b:71:04:68:
                    fb:0a:46:be:d7:c7:c1:ac:c5:94:bc:99:5b:e2:dd:
                    fd:19:45:9c:20:86:40:5f:17:ff:1c:25:b6:2f:3a:
                    f6:88:ab:da:fc:64:15:0d:51:8f:a0:0c:9f:bb:9f:
                    a7:5b:c0:20:03:17:f5:a3:c4:43:8c:6c:67:9b:0d:
                    a6:dc:b1:c9:e6:62:2b:dc:53:e0:33:c0:c3:f6:b8:
                    82:e1:33:12:fa:f0:56:53:d7:9b:73:05:1f:e0:25:
                    cd:57:6b:9f:7d:7b:0e:f6:ef:1a:5f:c2:83:7f:84:
                    b2:21:b3:e9:51:8c:dc:eb:cb:c2:63:56:31:33:f8:
                    95:78:e3:06:55:cd:0f:19:6e:de:4b:11:c1:16:bb:
                    1d:69:ff:61:07:50:09:ad:81:81:59:79:7e:6a:ff:
                    a3:e2:ab:60:53:de:d7:e5:e7:44:ed:a6:d8:2c:3b:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4E:61:2F:86:96:C6:0F:D7:E3:3C:69:65:CD:59:46:25:FC:3E:22
            X509v3 Authority Key Identifier:
                keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:53:c5:6c:94:1a:95:3d:7e:a6:f7:70:1d:9b:e2:be:e6:
         55:6a:c0:1a:a6:b6:87:ee:bd:57:62:6e:d0:b7:9d:de:b9:85:
         c7:87:d6:49:56:12:bf:2e:ae:7a:20:37:e1:77:d5:3d:d0:42:
         27:12:0a:c2:9d:1e:a7:ac:bc:d4:a1:2d:61:ed:c9:46:f9:d7:
         21:8b:73:8a:9c:2a:86:d9:31:f3:21:e9:5f:21:73:b6:fa:ca:
         f8:6d:37:bb:05:bc:14:2a:46:44:a4:70:3c:3b:ab:2d:f0:d5:
         7b:f1:16:88:e0:f3:10:36:18:0f:a3:f0:b6:0d:13:2f:0a:f7:
         e0:88:35:88:71:66:2c:62:98:f5:6b:58:1f:e0:a0:fc:60:ed:
         e5:06:23:b4:8d:44:43:b8:44:8c:9a:b7:89:32:84:40:ac:51:
         57:f7:1b:42:05:d4:76:0c:8f:9d:d7:5b:f3:71:e8:51:f0:cf:
         13:84:b2:a4:e0:36:a1:44:40:96:96:77:5a:b6:c6:0c:a3:a3:
         1a:bb:79:bb:12:bc:b5:57:c2:e0:ed:75:6c:97:d9:0d:3a:33:
         dc:9a:ab:10:3e:b2:9f:9c:0d:65:9b:70:f6:bb:dc:5b:a0:44:
         b7:5f:a2:04:23:72:e7:2a:e2:46:38:71:e5:81:a3:1c:1e:3d:
         08:1b:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:51:08 2026 by rpki-client