Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File:                     sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier:          FzbZle7lhm01GcjLMe0DgRIAEwitk6SxPz6uAhCklV8=
Subject key identifier:   2C:06:4F:A0:C4:A4:12:17:40:D7:B4:BA:45:82:EA:E5:0C:92:EA:7F
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer:       /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number:          FA
Signing time:             Tue 03 Mar 2026 05:50:18 +0000
Manifest this update:     Tue 03 Mar 2026 05:50:18 +0000
Manifest next update:     Tue 10 Mar 2026 05:50:18 +0000
Files and hashes:         1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: Ju1aU6IHmI9pPH1WRiAmcpRkth7RpRGtNwAKJLGxw1A=)
                          2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: mSukAUMe5Lr3KzZ1M4lKG8ZcBcOq+sE7NJI6nlUpRwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
        Validity
            Not Before: Mar  3 05:50:18 2026 GMT
            Not After : Mar 10 05:50:18 2026 GMT
        Subject: CN=69a6769a-3c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:47:b2:13:68:1d:6a:e1:9c:bf:60:c9:ed:60:
                    cd:6f:5f:da:f3:f9:71:26:71:80:72:75:a8:e0:a5:
                    63:8a:79:2b:e5:3c:50:6e:4b:67:28:af:9e:24:68:
                    df:7e:7b:ce:9d:99:e2:5e:78:dd:d4:e8:e9:6a:19:
                    01:55:c8:79:97:e0:cf:32:17:38:b0:58:07:fe:d5:
                    03:88:6d:d3:7c:82:ec:e5:90:0a:9d:55:22:19:30:
                    3a:86:99:98:dc:50:d0:d4:54:00:9a:40:a6:7c:a5:
                    cd:9d:41:03:2d:75:a2:d2:d9:99:fa:47:fc:23:93:
                    3e:df:0a:fc:4b:32:5c:30:0e:ab:c3:56:09:8c:8f:
                    fe:73:93:a8:be:42:d6:c2:44:54:11:ad:bf:6f:8a:
                    37:86:99:66:87:ac:26:65:1f:a8:9a:c9:fd:94:6e:
                    df:80:ef:3e:50:dd:2e:e0:45:d5:f1:64:07:12:d2:
                    38:29:32:d6:df:f9:a6:54:b4:7b:31:4f:04:6a:1c:
                    ed:ae:ab:7c:65:74:d1:c4:2a:fd:8c:57:db:39:8f:
                    2a:71:b0:2e:f4:e7:98:fc:df:2f:5b:3f:4d:27:a9:
                    45:87:28:6b:34:3c:b1:a0:74:65:e0:17:a8:97:01:
                    c8:11:e3:4a:d3:54:d9:90:03:cd:c2:50:bd:52:94:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:06:4F:A0:C4:A4:12:17:40:D7:B4:BA:45:82:EA:E5:0C:92:EA:7F
            X509v3 Authority Key Identifier:
                keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:cf:41:0d:88:b6:ec:5c:74:d1:9d:a1:a4:7e:80:77:bd:
         7b:28:7b:94:bc:c6:21:85:5b:03:08:ca:f0:98:0f:ba:13:24:
         43:c9:56:40:3f:ac:2b:08:94:87:3e:2e:84:46:ca:b5:06:77:
         8c:8b:92:a4:94:ad:50:ad:b9:0a:4a:14:39:d7:a6:8d:45:7d:
         67:6f:78:c3:dc:e7:9d:94:cd:6b:76:d4:b2:65:52:bf:fb:8f:
         38:55:11:70:85:b8:f3:34:2f:7c:7f:c7:83:aa:7b:a6:8f:bf:
         bc:49:7d:2c:fa:0e:67:cd:e7:81:58:fe:ce:a8:6d:72:5f:96:
         65:31:f3:fd:46:cf:b4:72:4a:1b:46:8b:aa:14:83:53:aa:81:
         34:ee:f9:db:46:59:a5:9d:21:3a:32:0e:98:7f:5d:da:93:61:
         5e:00:bf:a5:ce:5b:b8:b8:b7:b7:61:71:42:36:71:e5:ad:3f:
         34:af:26:d6:6b:b4:05:fe:a6:6d:b7:2f:d8:7b:52:78:f7:79:
         71:13:8c:1d:d5:46:31:c2:b9:d8:98:c0:8f:4e:5c:ff:de:2a:
         2a:92:30:ee:03:bf:3c:6f:08:14:35:24:20:d7:54:5d:f5:30:
         da:d3:15:79:c9:97:45:c1:90:b6:c6:95:08:85:09:a9:0a:ff:
         2c:25:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:20 2026 by rpki-client