Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File:                     0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier:          AAxu4bQNZ6g5zFSV+t6La5upEgr14mDZLjCf9H3nQD8=
Subject key identifier:   63:3A:C7:3A:28:DD:95:98:AC:9A:C5:1A:05:C3:93:40:47:03:8D:88
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer:       /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number:          4D
Signing time:             Tue 03 Mar 2026 07:55:28 +0000
Manifest this update:     Tue 03 Mar 2026 07:55:27 +0000
Manifest next update:     Tue 10 Mar 2026 07:55:27 +0000
Files and hashes:         1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: qfdNwgtgK+nAii/AxkXEhSmNr+j6iHsDwmD6uSXWvbY=)
                          2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: x1p58QyGOEEZzvkP+F1o5eBxOfZdy5EZehyc+fW6wlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
        Validity
            Not Before: Mar  3 07:55:27 2026 GMT
            Not After : Mar 10 07:55:27 2026 GMT
        Subject: CN=69a693f0-d3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:01:2f:93:fa:a1:d7:db:c3:7c:be:27:4c:
                    6b:c8:35:ba:43:62:2c:d5:b4:29:ca:2d:6a:80:8d:
                    16:bf:54:f9:41:a9:e9:8b:66:30:9e:6a:25:5b:4f:
                    26:57:8a:10:e5:b5:60:d4:1d:1d:ae:93:21:99:17:
                    4b:02:bf:95:0e:43:53:5c:b2:a5:ad:2c:1f:84:bb:
                    c0:c7:9d:a3:45:1d:61:24:b5:50:28:2b:a6:38:f0:
                    22:28:aa:95:80:11:7e:18:4b:12:58:53:72:48:72:
                    ae:c9:b0:0f:ee:af:ca:aa:ef:e1:29:30:86:e4:95:
                    63:dc:9b:f9:5a:7c:8f:18:6b:fc:82:e3:51:a4:85:
                    fe:73:6a:a9:a4:bd:1d:a3:66:d5:f4:41:b9:bf:1b:
                    3c:4a:c5:3a:f8:42:ac:f8:d2:1c:8d:af:fc:49:da:
                    31:6a:00:55:45:c5:3e:bc:72:de:9d:98:3d:23:87:
                    e1:8f:24:83:e8:19:cc:c1:67:57:b9:9a:2e:6c:3b:
                    02:f7:b3:f2:aa:85:ee:d9:48:b5:a3:10:8a:6e:49:
                    dc:97:8f:91:5e:b7:1d:11:4f:ca:5e:8c:b8:3a:6a:
                    67:70:ec:8b:5c:ac:08:f7:f7:45:1d:51:59:cf:db:
                    6a:39:4a:5e:f3:d5:7c:fb:e4:29:f3:95:88:cf:61:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3A:C7:3A:28:DD:95:98:AC:9A:C5:1A:05:C3:93:40:47:03:8D:88
            X509v3 Authority Key Identifier:
                keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:33:16:38:f0:f5:de:d7:69:55:8e:59:6e:c6:bb:aa:99:3c:
         86:c1:a9:34:a8:77:67:43:ff:c1:0f:05:a3:a4:ba:33:ca:5a:
         26:6b:55:b4:d6:48:34:93:5b:a5:f1:af:2f:13:bd:da:99:7c:
         69:63:a1:a0:26:b0:07:60:16:6e:22:c0:42:0d:01:16:9d:59:
         25:03:ae:69:07:d5:fc:6b:a7:e2:d9:83:f5:31:45:e8:02:c3:
         e0:2a:39:7d:57:c8:10:89:bc:16:66:93:b5:37:60:af:2c:bc:
         ab:57:1d:20:27:dc:43:25:94:c6:6d:da:c7:d2:55:7e:e5:08:
         5f:9c:8f:93:f5:e8:04:69:a4:cc:23:a4:39:81:33:06:7b:99:
         70:90:a3:bd:b5:9b:04:0f:cf:87:36:b0:fc:66:e3:0b:8f:41:
         57:46:5e:25:4d:25:f5:1b:26:80:f6:d9:7c:5e:d8:f5:8c:50:
         45:67:9b:2c:47:b0:0a:38:78:31:eb:7f:77:62:d2:9f:96:ea:
         68:74:44:a8:45:18:15:2a:4d:ed:98:3d:6f:57:2c:bf:c4:d5:
         4d:8b:c2:e0:1b:8a:b3:28:36:c7:c5:cf:e8:d1:ee:38:00:5b:
         e3:3d:47:92:e1:54:20:64:73:eb:6f:c7:5b:22:c8:36:d4:29:
         c2:42:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:30:33 2026 by rpki-client