Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
File:                     poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json)
Hash identifier:          xWcOz8Lqiop4GfTfwM4/W9m8BdlvV05xK/OscnH1qoM=
Subject key identifier:   EA:70:78:A5:25:C4:3F:BE:52:A9:F9:2F:E7:1F:8E:2E:CF:7E:74:DD
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
Manifest number:          043A
Signing time:             Thu 12 Mar 2026 23:49:50 +0000
Manifest this update:     Thu 12 Mar 2026 23:49:49 +0000
Manifest next update:     Thu 19 Mar 2026 23:49:49 +0000
Files and hashes:         1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: jnhfqi+YN6FEKumrn8pkBbFF1GD6S5DrlpmvGkvBFt0=)
                          2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: BOEExBy+QaPnsKDJ+gbhFQuFa7d7NxoUneMKG9j7QtI=)
                          3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: G+lt/1Mwh8N7G8KWZS1xUI3dDM2zaitfuprZkeWdjHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Mar 12 23:49:49 2026 GMT
            Not After : Mar 19 23:49:49 2026 GMT
        Subject: CN=69b3511e-95d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:68:a8:ee:59:1e:ce:09:15:c7:06:2c:de:
                    77:2a:58:2a:31:b2:8e:a7:a5:e8:6c:a1:ab:48:5b:
                    6e:71:e7:fb:fb:4c:62:8d:a7:95:38:74:ac:6d:6c:
                    de:c2:10:f3:fa:1d:bf:ee:43:ef:70:00:92:26:cd:
                    cf:db:05:40:40:f1:93:e9:87:ab:39:a5:c3:71:a7:
                    66:ef:72:9c:d6:4f:3b:78:b4:b7:1a:d2:75:32:6f:
                    f6:0f:45:84:c2:72:8b:11:91:91:c5:e5:5f:57:b8:
                    4f:03:f9:ff:1e:ec:0c:92:83:5c:81:47:3b:b2:75:
                    95:e4:c7:52:0f:61:25:49:d0:e1:70:2b:7e:8f:88:
                    75:df:6c:b6:52:d2:fa:23:5f:a4:c8:ca:6b:86:a4:
                    f6:eb:9f:7a:9f:f2:79:66:5c:4d:b2:d0:8f:28:39:
                    ca:00:bd:db:a8:a9:ba:d0:60:e9:e4:fa:fa:91:df:
                    67:c9:82:7a:82:12:30:d2:be:6c:a3:d7:e8:31:8d:
                    c4:06:51:78:83:ea:79:4b:5d:fa:1c:dd:2f:b2:97:
                    44:fe:18:45:00:b0:a6:a8:8e:c2:d8:c3:28:c2:c3:
                    a7:ce:69:7d:ca:10:99:56:8b:e5:55:82:63:fc:c9:
                    c2:f4:69:50:02:5a:6f:1d:5b:07:72:20:d1:d0:8b:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:70:78:A5:25:C4:3F:BE:52:A9:F9:2F:E7:1F:8E:2E:CF:7E:74:DD
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:1f:84:1c:a1:22:bc:9b:22:52:91:c3:08:ec:63:b5:cc:b1:
         34:0b:b2:1b:6c:1c:32:09:ec:7d:a6:07:48:c2:90:39:b2:60:
         31:ba:d6:ed:d7:56:00:c1:13:87:31:15:69:27:20:8f:d8:5c:
         d3:d8:d6:67:f9:39:56:4c:02:09:ad:8b:5f:e3:31:00:5a:55:
         6d:c8:69:68:e4:c7:78:5c:4e:8a:0b:c0:1a:51:4a:52:01:82:
         79:f8:69:01:90:7b:2b:25:96:fe:83:ac:cc:de:e7:f8:89:64:
         50:e4:66:db:e5:7a:6c:4e:47:eb:0d:43:8e:c2:8f:fc:db:4a:
         1e:a6:c9:e9:29:ea:8b:5f:5a:00:a7:0e:2f:94:ab:e5:12:99:
         9b:c4:5d:22:b3:68:3e:e7:48:a8:8e:19:93:dd:f9:ba:d0:c2:
         50:a4:38:58:32:dd:d6:71:2a:34:5a:87:ba:d1:ba:59:26:6f:
         d4:f1:37:89:70:5b:a9:0d:8f:9e:58:86:62:92:e6:d0:28:fc:
         7d:e9:13:87:29:7d:b8:ca:57:fe:ff:a3:1f:1b:fe:fc:d1:cd:
         9d:1a:63:aa:e3:30:28:81:21:63:82:48:5f:6c:af:8b:ce:1c:
         48:54:30:2d:6f:cc:be:47:d7:af:17:89:24:f0:b2:f6:ad:48:
         af:84:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:48 2026 by rpki-client