Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File:                     mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier:          bblbE9FLjlIskFUqXhLTnbT+GPRgVZKylpFNHWhk+SQ=
Subject key identifier:   D1:C9:C0:74:3C:8F:81:B4:6E:87:DF:44:7F:10:FB:93:0F:19:4C:F5
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer:       /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number:          23
Signing time:             Tue 03 Mar 2026 08:31:20 +0000
Manifest this update:     Tue 03 Mar 2026 08:31:20 +0000
Manifest next update:     Tue 10 Mar 2026 08:31:20 +0000
Files and hashes:         1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: Rd4/b1iR+Z4oojwhyDxMgYD6Z9K6HaA/GhRyOLIU22I=)
                          2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: 18c0IjqREvvCbFh1OonuDqpoKVFbN0WBr8JimtNfp4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
        Validity
            Not Before: Mar  3 08:31:20 2026 GMT
            Not After : Mar 10 08:31:20 2026 GMT
        Subject: CN=69a69c58-1fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:48:6f:c8:1d:29:0f:aa:59:fc:04:84:a3:
                    23:3b:ee:91:53:30:2a:bd:3a:8e:63:a1:98:4d:8a:
                    24:d7:51:25:d1:9d:38:64:04:29:eb:4f:3a:1d:d1:
                    9a:e4:d1:99:ab:08:7f:6c:83:45:d6:e2:80:37:cd:
                    18:7a:05:b1:df:0c:88:c4:0c:5c:6e:e7:38:c2:e7:
                    20:15:f5:9c:9c:60:6a:2f:48:b2:76:7b:5e:5f:7a:
                    56:df:c7:eb:fe:8c:1d:4a:f8:0e:11:e3:5a:89:dc:
                    33:e1:1c:eb:ec:69:92:43:85:3c:88:72:6b:8e:34:
                    29:db:1f:a3:bb:9f:fd:ac:de:87:ad:e2:3f:17:15:
                    b5:46:df:7b:6e:30:37:8b:8e:3c:00:a7:bd:33:0a:
                    c4:ff:d4:ab:16:fe:bc:a9:f6:c6:b9:82:c8:83:c3:
                    ab:3d:25:54:e7:48:45:60:90:8a:2b:aa:87:4e:b9:
                    2f:f8:1d:a8:30:ff:56:30:fc:c6:78:43:53:91:33:
                    32:4a:e2:11:5f:7b:57:dd:33:4b:6d:eb:8b:39:e5:
                    f5:86:2f:bb:5e:32:ec:df:2a:fe:42:d7:6f:5c:9a:
                    ad:91:67:10:ff:cd:26:13:41:96:e4:1e:4d:d4:4e:
                    6d:bb:53:75:4b:5a:1b:be:07:da:35:ab:e0:84:10:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C9:C0:74:3C:8F:81:B4:6E:87:DF:44:7F:10:FB:93:0F:19:4C:F5
            X509v3 Authority Key Identifier:
                keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:07:36:82:4d:e9:a0:28:fe:55:0c:23:00:83:63:d1:2c:
         eb:33:e1:65:26:bf:01:1d:df:47:38:8e:50:99:bd:f0:08:23:
         f8:b7:97:ac:61:26:98:88:7f:b5:6c:b6:23:03:d5:a1:2a:3f:
         e3:49:4a:f8:9e:8f:0d:bc:91:3e:fb:78:89:95:ae:08:46:61:
         9d:08:34:30:4b:7b:41:0a:b9:0f:0e:f0:9c:72:61:3c:1c:51:
         3c:03:7a:48:74:ab:c5:53:1b:c2:13:2c:c9:6a:f7:22:8a:c2:
         7f:f0:6e:de:c4:71:16:c6:f0:ed:3c:05:44:7c:63:9a:c4:2d:
         05:e6:11:80:ef:31:14:a2:45:77:8c:d9:d9:34:04:90:76:54:
         44:0b:f9:48:8b:8a:7b:c9:94:4a:3d:c3:5c:98:c3:80:41:73:
         b7:a0:0c:c8:d3:14:fe:89:88:75:c8:b3:b6:02:4e:57:2c:01:
         18:05:09:51:ec:fb:6e:2b:b6:a2:3c:9a:a7:1d:6c:b8:51:ee:
         64:3f:6f:08:d4:73:4d:80:ae:17:0c:60:0e:83:08:46:38:d8:
         94:5a:57:bb:8c:eb:f0:ba:63:d0:4c:0d:84:db:45:97:da:e1:
         19:ae:ee:58:4a:ac:ad:99:15:07:ea:6d:fa:3c:7c:c6:1a:79:
         50:60:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:32:56 2026 by rpki-client