Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          PasE8o569Oubk3LH/QmOhhO7ePxep4cxSGv88TSiv50=
Subject key identifier:   D6:FA:39:4B:8C:1B:CA:1A:4B:07:AE:EA:49:69:F4:DA:74:D3:4A:E4
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          CE
Signing time:             Tue 03 Mar 2026 06:25:24 +0000
Manifest this update:     Tue 03 Mar 2026 06:25:23 +0000
Manifest next update:     Tue 10 Mar 2026 06:25:23 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: 0DSiHcUWXRxM3zFJhnl38IKyeHdolejMtN0Jo7taT3A=)
                          2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: 3IMdOWYwn0QRatQtIN9l/kAsu/mvGyf3twx0ihOcENg=)
                          3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: V7/B/hXcDUfsoTzRVsl+7hDC77MO0UpaCW80iN20gSI=)
                          4: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: NTfczm2IJBm0RlPoqeeC++IwTWVO6ga62KI4p0CUufw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Mar  3 06:25:23 2026 GMT
            Not After : Mar 10 06:25:23 2026 GMT
        Subject: CN=69a67ed4-5485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:1d:91:45:c1:0c:f0:ba:5c:de:db:e2:35:
                    7d:af:61:2d:54:70:64:75:83:d7:41:ed:99:8e:ed:
                    9e:45:5b:1a:6a:3a:fa:9a:5c:a6:8d:53:a9:8b:8e:
                    39:f6:2f:dd:a4:ea:03:ed:50:7d:33:88:ec:51:62:
                    7d:fa:17:d9:b0:ad:3b:53:b2:61:05:78:14:c8:da:
                    bd:35:26:d2:b7:79:bf:76:a5:8a:7e:33:03:24:69:
                    76:41:fa:35:5c:3a:60:d4:2a:12:82:e8:1a:aa:6c:
                    3a:1b:11:ec:4e:66:fd:8a:bb:d7:23:2e:2b:ad:8b:
                    5a:fa:d3:cf:8b:41:d9:62:b7:ff:92:3a:0f:35:c3:
                    01:36:e2:5a:ad:c0:da:b4:53:5c:b0:1a:c1:25:b2:
                    18:63:0b:39:de:f6:bc:b4:73:27:f9:ed:9f:dd:3d:
                    90:d3:a8:53:d3:8e:99:0d:a5:db:a0:9a:97:6b:de:
                    6e:8c:11:af:97:0c:06:f9:ae:4f:00:3e:7b:3d:75:
                    f8:dc:58:a4:10:35:6d:75:26:34:ce:3f:16:cf:cc:
                    52:df:33:a1:5c:ba:c8:69:d2:ef:44:c4:3b:8a:3a:
                    11:fd:b8:08:62:7b:c8:f6:c6:29:89:77:af:ae:3e:
                    98:c7:63:75:f1:f7:07:ed:de:98:37:f9:24:19:33:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FA:39:4B:8C:1B:CA:1A:4B:07:AE:EA:49:69:F4:DA:74:D3:4A:E4
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:01:59:a9:9c:f5:95:b6:8a:ae:48:97:2f:66:7d:91:ab:
         5e:29:c4:5a:d0:65:d3:f9:81:37:e1:24:20:d2:70:ee:f9:61:
         4a:f0:06:9d:af:ee:3a:19:42:c5:b4:04:d2:81:a9:2f:4d:64:
         e4:e1:cc:64:0e:32:de:a9:0b:6c:b9:fd:96:cf:14:c8:fb:bf:
         69:ba:75:6a:d8:8e:94:d0:9b:27:eb:c8:6d:dd:7a:fb:11:55:
         4b:9a:a2:84:59:c3:cf:da:79:77:72:83:a0:c4:ba:2a:fb:d0:
         21:22:66:d5:f5:24:17:86:c9:e0:6a:d8:e8:a0:36:7e:71:ed:
         1b:98:6d:f0:97:ca:b5:c6:54:46:ac:97:6d:f6:90:c1:79:4d:
         4e:fa:47:87:73:d9:b3:6d:d3:f6:ce:36:12:65:61:67:d4:84:
         a2:7f:5a:84:1a:f5:6b:84:e2:a9:3b:4c:dc:bc:66:6b:06:10:
         a8:5b:0d:5a:df:58:dc:e8:54:3d:d8:92:9a:32:bd:c6:e3:9d:
         e3:72:a5:ed:79:6f:d6:6d:aa:a4:78:1f:23:3c:d7:b6:6b:ea:
         35:d4:1e:8a:be:61:18:dd:a4:ad:2f:07:32:f0:84:45:67:3e:
         43:96:a2:c0:46:69:03:68:01:7f:a1:ef:fb:7a:98:df:fb:bb:
         5e:98:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:31 2026 by rpki-client