Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File:                     -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier:          KdGyGH4x4+gsInDYnPav9z5IOElpLN8j3CSLiHwax5g=
Subject key identifier:   F9:C4:F9:2C:D1:34:41:B4:52:49:34:37:92:72:50:29:4B:6D:FD:45
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer:       /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial:       05F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number:          05D6
Signing time:             Fri 06 Mar 2026 22:50:01 +0000
Manifest this update:     Fri 06 Mar 2026 22:50:01 +0000
Manifest next update:     Fri 13 Mar 2026 22:50:01 +0000
Files and hashes:         1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: 4wxRdLpk4uWH8HIjC9xzh/C1elk64L4bxxgRO2ckjBo=)
                          2: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: ahWWs0kZBjkLDlGiJDE5aUNwMLJFe7OoP0FqUJEFa+k=)
                          3: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: tNb9AqniNMGiccuAfhw4fufXJvoKBwPNTf9UHPrYX8U=)
                          4: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: BJpks1gOb51AQCv2clwa4s1WpHhotp2F+Z4P3kGOQPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523 (0x5f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
        Validity
            Not Before: Mar  6 22:50:01 2026 GMT
            Not After : Mar 13 22:50:01 2026 GMT
        Subject: CN=69ab5a19-c0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:65:3b:0a:6f:ba:e2:f8:6d:15:e3:d0:8e:
                    6f:db:b0:7a:2e:cd:2a:4e:2e:e9:4f:70:29:05:bf:
                    0f:08:70:87:af:c5:c1:9f:5d:86:a0:2f:15:31:43:
                    f8:fa:d7:36:bc:8f:18:1b:8c:00:5b:55:d5:96:cf:
                    81:30:ba:d6:d3:61:1b:4a:bc:cf:1d:4d:61:63:ea:
                    cc:15:05:97:5b:af:c5:d6:47:b7:88:e6:2a:b6:77:
                    82:11:fe:9f:a9:e4:9a:ba:49:32:93:25:99:b3:0a:
                    6d:91:da:b0:88:48:6a:c0:13:ff:4e:45:4d:7e:0a:
                    c1:d6:e7:39:54:89:aa:91:3b:36:0c:32:e5:65:5f:
                    8c:a7:13:90:32:68:17:98:be:36:d9:1e:82:9e:85:
                    1d:01:ab:24:4a:3e:21:7e:92:a6:d4:47:df:dc:e8:
                    e4:f1:56:46:65:67:d1:1d:7f:fe:e9:bd:68:30:57:
                    ea:97:44:d8:27:c8:e7:31:6b:a3:ba:a2:77:1c:1d:
                    1d:07:38:e3:84:2b:56:8e:a1:3e:0a:c4:54:34:43:
                    1e:59:db:a4:74:87:59:ee:5a:6e:7f:57:9a:50:79:
                    60:8c:30:70:00:8f:4b:81:ae:2d:c6:f9:02:4c:73:
                    df:51:d7:0c:e0:48:d0:93:cf:b8:d2:d3:52:30:8a:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C4:F9:2C:D1:34:41:B4:52:49:34:37:92:72:50:29:4B:6D:FD:45
            X509v3 Authority Key Identifier:
                keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:99:99:f3:1e:54:26:a6:eb:10:80:e3:75:f9:63:07:46:a1:
         69:d4:ac:8d:a5:d9:c8:7d:65:39:cd:3a:a8:e5:f5:4b:2b:49:
         58:e5:1b:da:bf:69:9d:bf:85:cc:8e:06:7c:80:70:02:b6:29:
         28:31:bb:27:21:95:0d:6c:93:4e:18:03:ff:d4:a6:5d:bb:8a:
         31:98:2a:8f:db:7b:61:27:33:80:8e:a4:db:88:d8:34:a4:e2:
         f7:dd:ce:52:d7:0e:06:b4:65:b9:ea:ab:7e:68:68:64:cf:7d:
         6a:1d:bc:4a:43:ac:b4:bc:80:17:06:f3:4f:c8:de:65:d4:09:
         7b:8e:70:1b:1f:f1:19:fa:65:93:84:ad:68:70:59:01:d1:96:
         f6:b0:ed:4d:dc:58:41:0b:2f:1e:55:a1:af:d7:5c:09:d0:24:
         9f:23:99:dd:1c:78:5e:48:7c:44:5c:13:5b:4a:ee:54:8d:d8:
         a7:91:c2:a0:16:35:04:36:64:b1:cd:7b:0f:65:5e:f4:5a:c7:
         5a:7a:f1:46:c5:cb:b6:19:f4:d6:b0:44:c2:9e:38:7a:6d:be:
         96:7c:7a:ab:18:dd:03:bb:93:3e:23:71:e6:a4:ed:07:b5:0f:
         a0:0c:95:77:a2:15:6e:0b:18:67:8c:6b:03:50:bd:56:79:7a:
         8b:d2:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:05:36 2026 by rpki-client