Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
File:                     Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json)
Hash identifier:          AgGSVeKxi/CHCMSsDksIWYLOdge3SQAHBb1+V8NcBwI=
Subject key identifier:   D7:F1:BD:F8:80:1C:0E:A5:2A:BA:D9:81:B3:B9:D0:9C:02:78:30:01
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Certificate issuer:       /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
Manifest number:          0116
Signing time:             Wed 11 Mar 2026 04:50:03 +0000
Manifest this update:     Wed 11 Mar 2026 04:50:02 +0000
Manifest next update:     Wed 18 Mar 2026 04:50:02 +0000
Files and hashes:         1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: StY44grEKKUV9p0t7lvW8QbVRxMJ4mTiJlIseGXCUWQ=)
                          2: B6783AB2DBC511F0ACB3398151641951.roa (hash: 8nSDYPqmj9///M7ihOu/Qy1ziSupwMIbXuYBnGolzzo=)
                          3: B6FC11FCDBC511F0ACB3398151641951.roa (hash: 0ueEp7gkNyo/eRbYSZCsOjM7D/HOAUYNpRhkEzgVUdo=)
                          4: EFC2CA2489D311F0B3F8631DC4F9AE02.roa (hash: gxZFWSG/EQsmYDfM8pL8cu4/7hBAQnAKWm8Ca27ncb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
                          rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
        Validity
            Not Before: Mar 11 04:50:02 2026 GMT
            Not After : Mar 18 04:50:02 2026 GMT
        Subject: CN=69b0f47b-7f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:61:de:f1:ab:e5:09:d3:23:15:48:e4:70:
                    fa:69:f8:8d:bd:17:d9:0a:f7:1f:f1:67:a0:16:d4:
                    64:71:88:3c:08:bb:d1:3c:d3:21:67:62:e9:98:f1:
                    0c:b1:d8:06:37:19:01:da:cc:e3:5f:8b:69:1f:ce:
                    f1:8d:0b:6b:ca:07:04:2c:3b:fa:c2:43:c5:da:51:
                    2b:d4:e5:4b:97:6f:d3:bc:48:84:43:25:5a:08:ba:
                    a1:b4:75:3a:a7:e3:15:fd:9f:8b:b7:63:57:89:a9:
                    a6:be:2a:95:f8:d5:5c:dc:04:0c:2a:a8:de:7b:9e:
                    87:4e:13:48:cf:32:a1:2a:21:eb:ff:9a:e0:bb:ef:
                    cd:b0:2f:dc:bb:08:1b:fc:09:10:14:da:74:e5:56:
                    49:8e:02:18:07:3b:f5:89:7f:bd:c1:8a:29:01:da:
                    04:90:c4:b9:31:fc:e8:f9:70:62:69:d9:6c:76:de:
                    9d:11:4b:ca:8c:b4:e0:a0:04:ef:e2:67:7b:f2:a9:
                    4b:d5:8f:34:49:7b:32:83:eb:dd:c6:36:cc:5f:bd:
                    52:1c:18:51:64:6c:67:30:0f:5d:1d:46:a5:f8:4a:
                    61:ef:a6:6f:42:0d:cf:d2:39:8f:7b:9e:fa:8d:e8:
                    89:a7:f6:69:12:00:bb:b8:4c:53:ed:81:10:b4:76:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:BD:F8:80:1C:0E:A5:2A:BA:D9:81:B3:B9:D0:9C:02:78:30:01
            X509v3 Authority Key Identifier:
                keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:35:7c:a2:98:ef:78:62:6c:c0:22:47:7f:1c:92:d9:64:
         2c:68:77:e6:85:3f:b9:6d:48:2c:24:6a:95:72:bb:e5:3b:47:
         67:5b:34:d8:60:79:b1:03:b0:1b:0d:52:a4:d2:ff:89:f2:dc:
         57:16:f7:73:f3:3f:32:39:fd:d5:cc:92:c3:9e:dd:de:29:b5:
         a0:db:b8:6c:f2:9a:a9:e1:d7:5b:39:2e:67:70:15:c1:f3:25:
         7a:0f:07:d5:de:23:72:f5:37:97:b9:81:ba:c7:e2:c7:9a:ee:
         de:8d:06:22:e4:17:7f:16:3b:74:a7:82:6a:50:07:91:96:55:
         ab:6d:5c:fc:a6:43:c8:99:d7:e6:ac:78:9e:9b:0d:2e:8a:33:
         2f:d9:b1:7a:bb:a8:62:08:19:65:93:05:77:c0:e0:a9:b8:10:
         76:3b:fd:3f:ad:b1:a7:ec:a9:aa:24:02:39:f5:81:e9:62:87:
         ba:70:2e:b0:3d:d0:79:03:f8:53:d5:56:e5:ea:96:1d:b3:f7:
         78:79:a4:b3:d6:a7:fe:e8:ae:36:70:ed:51:6d:60:34:86:bf:
         cf:40:cb:04:56:75:e3:45:e9:32:de:c5:2c:e5:d4:e8:78:71:
         9d:1d:e7:f5:7e:6a:2d:92:a6:7a:6a:5c:6e:98:6e:9e:32:e6:
         87:17:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:38 2026 by rpki-client