Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
File:                     0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json)
Hash identifier:          EGwihTmz59Vlwg9d3T3mNDaoBq9NguGXQhNOOi0TMog=
Subject key identifier:   EF:46:2C:B6:5D:7E:BC:36:B9:72:F9:B8:A0:A2:53:59:0B:ED:78:79
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Certificate issuer:       /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
Manifest number:          010B
Signing time:             Tue 03 Mar 2026 05:33:05 +0000
Manifest this update:     Tue 03 Mar 2026 05:33:05 +0000
Manifest next update:     Tue 10 Mar 2026 05:33:05 +0000
Files and hashes:         1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: rUwGpqdR18qDJqc69L27XmyHPHA8UiZgXOAHktm0bsU=)
                          2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: 777ytcJtKRK+U1mjB59992g0IydheNppCEpFNuVRoDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
        Validity
            Not Before: Mar  3 05:33:05 2026 GMT
            Not After : Mar 10 05:33:05 2026 GMT
        Subject: CN=69a67291-edaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:99:ab:e3:a6:ac:cc:39:31:83:82:8b:ee:57:
                    b4:e0:3f:d9:e6:e6:f8:08:21:45:fc:5a:ca:fd:6d:
                    a9:c6:a5:82:07:39:48:6a:1b:91:44:0b:aa:9d:81:
                    e7:f4:ad:a5:27:7c:cd:59:cb:64:93:d2:96:7e:81:
                    31:7c:e4:1c:54:11:ab:8f:83:01:f3:4f:c7:67:65:
                    9d:11:1a:b0:b2:3a:95:ec:07:f0:ae:a1:bf:6a:97:
                    b0:14:83:39:74:0d:d5:54:25:23:0d:47:e0:74:04:
                    77:5f:a9:c0:39:30:9f:2d:f0:38:8b:2e:6d:da:b7:
                    29:7b:59:74:02:73:da:b7:99:6c:4b:ac:ab:ec:3c:
                    e0:8b:37:26:38:64:e7:8d:cf:62:46:00:9d:c0:1a:
                    75:eb:4d:20:0a:de:55:d5:26:10:14:2e:ec:9e:60:
                    11:86:f6:1b:58:84:f1:66:cc:5e:06:db:e0:47:ca:
                    d4:cc:9b:8d:7c:d0:b9:4f:e8:6b:24:46:fe:8d:79:
                    7d:f9:e1:2a:56:38:20:b0:95:26:00:7a:ed:52:4e:
                    17:5c:da:b5:b5:dc:fb:3a:b8:ef:bc:7b:ed:f7:ef:
                    91:2a:70:0e:9f:4b:a3:5f:32:1f:2b:dc:ca:5a:fd:
                    a8:3d:3c:78:65:8e:bd:5a:c6:38:ca:3e:45:68:f3:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:2C:B6:5D:7E:BC:36:B9:72:F9:B8:A0:A2:53:59:0B:ED:78:79
            X509v3 Authority Key Identifier:
                keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:f0:2c:ea:1d:8c:7a:4d:a8:1a:de:4b:dc:20:8b:e3:61:
         8a:f1:8c:82:50:32:92:8d:ff:97:50:5e:28:61:8c:08:7b:4b:
         89:ae:19:8f:18:49:11:24:50:27:20:05:42:17:3c:57:ec:6f:
         76:62:1f:91:3f:c0:e1:a1:de:22:74:54:08:e5:14:b3:81:08:
         36:a0:c8:1e:72:dd:62:9f:07:1f:92:3a:db:b1:0d:bc:e4:7d:
         bc:c6:b0:ef:01:5d:7f:86:76:fe:cd:01:73:e4:21:19:58:52:
         8b:88:43:50:9b:db:31:4e:c4:87:77:2d:5a:a3:b5:7e:d6:4e:
         81:a9:27:c5:d5:d6:57:2d:91:8a:48:23:ab:53:e8:dd:29:15:
         4b:22:02:de:a7:73:54:14:ed:04:0b:23:e7:78:9b:ee:40:b2:
         6c:8d:2c:cd:22:b0:b4:a0:50:25:97:04:68:45:50:b7:54:68:
         73:6b:04:37:79:7c:ee:c3:1d:da:a8:7f:1d:49:d3:75:ed:f1:
         bf:a9:1c:87:15:63:be:57:ee:8b:85:82:e2:37:b7:b4:66:79:
         ad:4e:51:31:90:7b:ad:42:cf:52:87:e3:88:f0:a8:d0:bd:91:
         e2:26:b9:83:85:50:e2:06:fe:8d:7c:ea:68:4c:d9:0e:45:84:
         92:63:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:43 2026 by rpki-client