Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
File:                     s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json)
Hash identifier:          B44aREnozYiSahkIYxbeqeQPTVEzFNxnwK/54LXakF8=
Subject key identifier:   FF:14:AE:AF:F7:43:6E:26:11:E6:5B:FD:F6:72:DB:6D:88:64:C1:A5
Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
Certificate issuer:       /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
Manifest number:          0143
Signing time:             Tue 03 Mar 2026 05:01:58 +0000
Manifest this update:     Tue 03 Mar 2026 05:01:57 +0000
Manifest next update:     Tue 10 Mar 2026 05:01:57 +0000
Files and hashes:         1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: XJfqOHgivSiHVqhjNlVoXMYA7MXSG++txcOKeR11Idw=)
                          2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: xO1XkrdPpnztC/DOvp1GxSfrdBEGr7OLmqMg43hzTY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
        Validity
            Not Before: Mar  3 05:01:57 2026 GMT
            Not After : Mar 10 05:01:57 2026 GMT
        Subject: CN=69a66b45-ecd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:e5:8d:06:e6:8b:1f:dc:48:be:1f:3b:c5:
                    b0:7c:37:79:b8:59:0a:c7:53:35:b9:ce:7f:09:dd:
                    c1:3a:be:c2:77:23:ce:d0:c1:2f:92:8c:9b:24:23:
                    60:b8:fa:2a:54:f8:26:3c:86:ff:e6:79:0c:a7:c3:
                    86:be:76:88:58:62:ab:1c:88:e3:36:14:2f:23:76:
                    1d:cc:bd:39:6e:b6:08:43:fe:8f:d2:f6:26:e0:51:
                    c7:c4:ab:0a:46:b5:47:7f:b3:69:27:18:66:cb:e0:
                    74:4b:16:43:8b:45:17:5a:55:28:6f:15:18:61:fc:
                    7a:4e:ab:37:57:84:35:b0:4b:b0:19:84:b4:b2:c3:
                    ea:90:1d:62:f2:f2:27:9c:37:28:2a:71:19:64:03:
                    ae:42:70:38:8d:d8:f7:1d:72:07:4d:d2:3c:fb:63:
                    cd:61:e6:e1:b2:d3:08:71:fd:8b:aa:76:c9:fb:03:
                    57:f8:69:66:45:7c:38:a3:e2:69:a3:31:ca:61:99:
                    56:37:1c:ac:42:c1:9c:45:b7:a2:21:f5:e2:fc:df:
                    36:34:16:5b:f4:31:ac:86:f1:77:13:0a:58:54:82:
                    26:b1:c6:db:5e:de:9d:80:1e:da:f8:10:ca:42:c9:
                    a9:68:be:7e:c8:59:0d:44:76:b8:4e:d7:53:0c:e3:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:AE:AF:F7:43:6E:26:11:E6:5B:FD:F6:72:DB:6D:88:64:C1:A5
            X509v3 Authority Key Identifier:
                keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:19:13:cf:d9:ee:ea:c1:fc:16:28:34:23:c8:34:32:d8:
         19:bb:34:38:06:c3:1f:b3:ce:49:57:f5:f4:91:9d:bc:a2:73:
         22:a2:da:9e:95:5a:51:07:df:ca:0b:66:1f:c3:59:97:0f:79:
         84:c1:81:67:ba:a1:9a:7b:87:4b:4a:bb:b2:62:83:1c:4e:b6:
         00:a4:61:b6:fa:89:2a:9e:dd:f7:56:f6:be:a3:98:97:ea:dc:
         c7:5a:1c:ba:f1:28:9f:62:24:4d:08:a2:ed:2e:52:6a:72:e7:
         c4:69:c6:93:41:b8:77:7a:f2:cc:83:28:d9:74:bb:6a:45:16:
         61:05:a3:34:2a:b6:16:1e:df:ac:b5:e9:1a:39:24:63:2c:6f:
         d7:a7:d9:1f:c2:97:6c:48:fc:9c:10:d3:62:bc:fa:d2:58:dc:
         6f:72:eb:a5:f6:b1:96:92:b2:3a:a4:f6:9e:2d:02:62:83:d8:
         78:dd:de:f3:91:e6:00:c6:e9:32:b1:77:3e:7d:43:e9:94:35:
         01:3d:d9:56:63:14:59:90:ea:8d:62:ee:14:64:b4:01:a1:4d:
         6a:38:15:5c:06:89:46:3f:b4:18:8f:04:6a:9c:08:bc:17:03:
         f9:94:90:f1:d3:c5:27:58:2b:8f:59:95:7c:28:52:95:df:71:
         59:34:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:10 2026 by rpki-client