Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
File:                     RJUXO9LCk43jBnfP3ec80xuKJnY.mft (raw, json)
Hash identifier:          VOW4McYz9jWo+9yYzDXsn49pNcqO0oNI1iW/fHRtmxU=
Subject key identifier:   4D:7A:03:31:4D:DC:F2:E4:44:9D:B7:42:46:A1:C6:42:89:09:2D:DB
Authority key identifier: 44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76
Certificate issuer:       /CN=A91A5098/serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
Manifest number:          DD
Signing time:             Mon 02 Mar 2026 16:10:04 +0000
Manifest this update:     Mon 02 Mar 2026 16:10:03 +0000
Manifest next update:     Mon 09 Mar 2026 16:10:03 +0000
Files and hashes:         1: RJUXO9LCk43jBnfP3ec80xuKJnY.crl (hash: atYAiFS/jJKjQCuGQUKq4NZTp2vP+iVkrz0YTSxxBxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5098, serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676
        Validity
            Not Before: Mar  2 16:10:03 2026 GMT
            Not After : Mar  9 16:10:03 2026 GMT
        Subject: CN=69a5b65b-03f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:07:4c:c2:0e:13:4d:5b:d1:63:5c:d8:58:
                    ef:c7:46:cb:af:f8:c1:5b:58:48:7a:f8:0e:aa:a6:
                    a1:0c:24:00:76:70:aa:d4:c2:7e:e4:7a:96:8a:ca:
                    a7:2e:ba:69:40:68:5c:d8:3c:7a:7d:06:ef:fc:80:
                    98:5a:be:b9:ef:31:b9:66:ef:d9:63:c4:d9:6b:a3:
                    23:08:03:f1:c1:fd:1e:60:23:74:9c:e2:93:39:98:
                    5c:9a:f3:68:e2:fa:82:f7:da:d8:0a:20:36:23:6f:
                    05:90:35:4c:e8:64:d0:60:6e:71:b3:ca:f5:89:be:
                    aa:1b:2f:37:12:10:a8:cd:b2:33:da:12:49:59:c0:
                    fb:ea:5f:1d:e0:27:31:56:fd:fd:82:a7:d0:fb:a9:
                    e0:6b:22:37:09:16:d3:bd:cb:d9:cd:4b:24:f6:66:
                    04:b5:95:c9:af:7e:51:a4:d0:f3:79:f9:fb:0c:26:
                    41:f8:a8:9a:b0:9b:03:45:f9:6f:af:36:c7:c3:0c:
                    91:03:3a:2d:1c:8d:db:c9:00:aa:85:07:63:84:50:
                    32:4c:b6:19:3e:53:be:78:b5:cf:79:ad:7f:5f:c4:
                    55:e5:4b:3e:fd:32:39:ce:0d:bf:99:a3:72:2c:e0:
                    cf:d1:95:16:82:01:ee:99:b7:2a:ec:5a:8e:c4:c0:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7A:03:31:4D:DC:F2:E4:44:9D:B7:42:46:A1:C6:42:89:09:2D:DB
            X509v3 Authority Key Identifier:
                keyid:44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:0b:47:4f:17:48:df:e1:c0:ab:ac:3b:e3:2e:eb:ae:a4:
         b7:c1:22:66:33:03:15:bc:a4:4f:c0:f2:7b:d3:1e:e8:d9:d7:
         5c:48:8c:91:82:94:88:8e:6b:48:d4:78:91:e6:76:9e:64:26:
         71:11:14:a8:49:20:ec:82:10:a5:90:a1:19:2b:8a:45:80:95:
         96:77:96:a3:10:0d:5e:86:16:b7:33:42:55:cb:be:c9:d0:70:
         04:1f:0f:54:f0:78:52:d7:c5:50:ee:5f:59:6a:7a:33:4a:2d:
         23:a1:f6:a2:4a:eb:c7:d6:43:3c:19:03:fe:42:7f:f3:31:83:
         00:a3:fc:81:87:be:85:9f:82:9b:1f:87:af:a1:89:33:94:94:
         2f:41:8b:1b:b9:d1:f6:f5:25:72:3b:e6:a1:f0:dc:43:c3:8e:
         31:b6:97:98:a9:21:18:c2:8b:dc:7e:ac:ee:1c:22:ed:f1:66:
         67:b9:a2:c2:56:fb:2c:9c:06:e1:75:de:4c:36:e0:29:3c:f3:
         c2:5e:9c:00:8e:25:c2:ee:0a:0c:94:4b:90:bc:46:3d:7d:c7:
         89:9a:8b:33:54:e7:66:fe:cc:d8:35:61:80:32:41:44:c8:fb:
         f0:11:b9:3b:65:2a:ef:5d:6d:5b:8c:79:20:9a:c4:05:1f:d4:
         e8:66:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:43 2026 by rpki-client