Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
File:                     cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json)
Hash identifier:          5UTHS4nA6PE3hTEeLO2eXd9MyRiBWai5SlAW0E3/BFc=
Subject key identifier:   2F:6C:AB:87:94:80:92:37:C9:A9:94:78:6D:72:C8:BD:BC:E4:1A:C7
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Certificate issuer:       /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
Manifest number:          0123
Signing time:             Tue 03 Mar 2026 05:22:13 +0000
Manifest this update:     Tue 03 Mar 2026 05:22:13 +0000
Manifest next update:     Tue 10 Mar 2026 05:22:13 +0000
Files and hashes:         1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: PCskdXhgGxw4EVhHUclo2xFdOox7Ea26CL1YETiVHFc=)
                          2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: aFQ7bX8ytAFiMpuE9k/08/sRiHmY/0AMmDItTStdXqk=)
                          3: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: fi9JcGfoU/wiK7429QM9k1iyc8WV3c5GwUrIVHqsYuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
        Validity
            Not Before: Mar  3 05:22:13 2026 GMT
            Not After : Mar 10 05:22:13 2026 GMT
        Subject: CN=69a67005-5eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:0c:3a:ce:30:32:7a:80:d2:ee:8e:63:c9:
                    50:5c:82:a6:6e:e6:ab:61:d0:4b:95:68:7e:a1:95:
                    01:86:bc:d5:32:43:e1:d1:a6:00:9c:28:82:a5:33:
                    5e:9a:ae:eb:d4:f8:3f:44:41:55:58:3a:2c:1d:0b:
                    4d:7e:07:f6:d6:fe:fa:a4:b6:f6:66:36:2c:5f:0f:
                    d3:d9:43:52:72:f8:9f:20:95:6d:62:a9:2f:e6:2e:
                    b0:36:1c:e6:80:3d:34:ea:9e:e7:cc:dd:a6:52:34:
                    73:2c:d7:68:cb:ba:bd:45:0c:d0:64:5b:cb:4f:68:
                    58:1c:6e:44:0c:58:af:9d:7e:df:9d:94:a0:b5:77:
                    a1:06:b6:48:2a:d9:88:81:b3:30:21:27:18:7c:77:
                    47:1f:97:0c:50:74:3d:b1:ef:1b:53:17:ff:8e:6f:
                    55:f1:79:56:60:65:2c:0b:fc:53:82:80:eb:ea:a8:
                    d2:3f:bc:10:e5:31:6a:d6:00:dc:45:f2:ba:43:8e:
                    93:10:02:5e:77:1c:37:b5:94:03:c5:ad:7c:56:9b:
                    83:c2:06:6d:3c:79:2f:74:c9:4a:3c:eb:49:2c:e8:
                    8a:15:6f:48:d7:08:c3:61:16:74:76:3b:e8:2f:f6:
                    30:33:44:33:3c:89:34:1e:b4:e3:9d:07:09:e4:42:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6C:AB:87:94:80:92:37:C9:A9:94:78:6D:72:C8:BD:BC:E4:1A:C7
            X509v3 Authority Key Identifier:
                keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:e0:c9:2c:bd:61:46:01:c0:ea:bb:52:e9:55:55:a4:1c:
         7d:1c:5b:0e:da:d9:63:03:de:a8:3b:fc:ec:b1:e6:78:c2:cb:
         bf:c4:f9:87:ab:b1:0d:d0:6e:14:36:92:1c:32:b3:3e:dd:14:
         50:c0:d8:cc:d9:89:3a:71:8d:8a:22:4b:f3:e7:e2:d2:04:1f:
         4c:f9:9f:b2:2a:26:a5:13:91:c6:47:5b:09:11:75:40:4c:8b:
         87:d6:db:e1:19:76:66:8c:02:29:97:7d:83:c5:d5:06:8d:af:
         46:bb:56:34:95:f0:a3:e8:3f:34:18:ce:6c:ba:4a:7e:31:f0:
         e3:d9:98:9b:36:41:b7:f0:9b:d2:6b:68:33:6c:a0:b6:2e:da:
         cb:11:91:b7:2e:ea:7a:00:8b:74:5a:e1:cb:d0:27:bb:b5:8c:
         63:ed:c3:c0:c4:27:8a:13:91:d7:e6:0e:8a:e6:32:d4:64:a6:
         22:1b:74:54:e3:5a:36:95:62:40:30:30:d6:0c:cb:25:ef:40:
         2d:50:34:47:1e:b7:02:82:56:61:b9:db:de:a7:00:2d:bb:2b:
         57:ef:b3:c5:ac:58:07:cb:c3:bd:69:a3:f4:1c:c3:77:3f:3d:
         33:e9:6d:48:e1:3e:49:05:52:a9:77:79:cd:2a:57:cc:7b:19:
         d1:ef:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:05 2026 by rpki-client