Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
File:                     vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json)
Hash identifier:          FwoEfMm3wckuG8Cw7xuh63HJdShz7KS+WwWbwBnv6Bc=
Subject key identifier:   9C:A3:85:9C:20:D9:35:79:0D:56:93:8F:3A:44:30:BC:FB:B0:FF:E4
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Certificate issuer:       /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
Manifest number:          42
Signing time:             Tue 03 Mar 2026 08:03:38 +0000
Manifest this update:     Tue 03 Mar 2026 08:03:37 +0000
Manifest next update:     Tue 10 Mar 2026 08:03:37 +0000
Files and hashes:         1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: Kba2uupX6zq9UwwTvwJNARqsy65Pz6ypb+a7Xzm4cOw=)
                          2: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: ZuP0uWcegjrbhw4CUiK7NSueNS7Vvex1xTz8Rpwula0=)
                          3: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: 1fKhxfq/TrlnYFDoICW1zCAYtSl3cbSlKcSl1u+qus8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
        Validity
            Not Before: Mar  3 08:03:37 2026 GMT
            Not After : Mar 10 08:03:37 2026 GMT
        Subject: CN=69a695da-2741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:1c:e4:59:d9:da:46:34:db:56:5d:52:59:
                    be:de:92:49:ee:55:06:96:67:00:b6:1c:55:ad:0e:
                    7c:30:1d:f9:ee:8d:e5:ba:d1:1c:23:03:49:33:de:
                    7c:44:8b:a9:0f:d2:31:f1:c6:1e:ac:06:c0:f7:2a:
                    95:cf:5d:db:e9:66:54:ff:5d:24:79:b3:59:d2:f6:
                    bc:21:92:a6:12:a8:3c:e6:bf:47:f8:b5:eb:7f:41:
                    70:88:27:1a:d0:c9:21:04:d1:8c:16:fd:fb:c6:70:
                    02:ca:81:ef:11:bb:6f:cd:d7:45:52:84:42:19:a7:
                    63:fb:c4:9a:a6:83:ca:43:2e:57:a8:6c:b8:49:c2:
                    04:99:61:43:9f:43:a2:b0:83:c6:7f:a8:f1:3c:b0:
                    5b:98:52:1c:bf:4e:76:ac:bb:81:e5:66:e3:75:0e:
                    53:8b:f1:9c:98:54:89:a8:cd:2d:0c:9c:76:95:6b:
                    f6:bf:d5:86:6f:23:90:e5:2b:16:a1:5a:fc:5f:e6:
                    f7:ba:bf:8a:63:7e:56:a6:8f:1f:21:be:7c:e2:13:
                    5a:7e:57:fd:bb:44:77:4b:6e:20:d2:08:19:71:01:
                    64:9b:2b:8a:78:84:78:71:e5:9c:85:83:87:36:fa:
                    13:3f:6a:18:65:0e:25:07:e9:ef:97:5d:24:0d:a5:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:85:9C:20:D9:35:79:0D:56:93:8F:3A:44:30:BC:FB:B0:FF:E4
            X509v3 Authority Key Identifier:
                keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:24:70:1d:37:60:52:48:0e:17:d3:93:d5:75:66:89:27:
         06:58:3a:84:3a:9e:4c:1a:9d:d1:c3:02:ba:3f:20:78:87:0d:
         50:9c:76:ab:90:03:b6:0f:d4:f4:c9:a1:08:4b:e1:3d:be:99:
         3f:91:9f:ba:d6:c4:9d:c9:57:a4:c4:56:fc:72:59:58:86:1e:
         e3:46:1d:0a:d7:6b:f4:62:ef:a9:70:08:1d:a2:45:86:bd:e9:
         1d:49:51:32:84:be:3f:8a:20:39:e7:17:a3:f4:cc:3e:c7:f8:
         b6:f3:a2:ba:92:96:5d:d7:64:7f:b4:92:bb:5c:30:50:2a:98:
         91:6f:35:b7:41:fb:a9:c0:68:36:a8:df:9c:ca:51:80:af:1c:
         4a:b0:bc:37:e6:e6:8f:a3:1e:8a:0d:7b:43:90:9f:69:26:54:
         77:7a:b3:dd:91:bf:0e:5e:3e:47:d4:2f:af:38:d3:06:9d:9d:
         05:31:18:8b:4a:cc:2d:cf:63:53:e2:4f:6c:82:c1:0c:dd:ee:
         34:ef:4c:ac:bc:fb:89:71:04:88:51:13:17:63:81:33:26:45:
         62:df:48:12:8a:c2:87:aa:4f:78:de:e0:82:e5:42:f5:cc:32:
         97:dc:37:73:7b:fa:db:f8:4a:d2:04:a0:72:80:1c:2b:82:21:
         27:a8:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:56:52 2026 by rpki-client