Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
File:                     MYH5m8WFngRexECQnaM0uPSdFtI.mft (raw, json)
Hash identifier:          FmKMU16QtfNrStFzAkKSR3ESqMNqRRtWtdwD2YVYgZI=
Subject key identifier:   B7:31:37:F3:B8:B8:1A:34:07:C1:CE:97:E0:D2:E0:FA:F1:B7:D0:90
Authority key identifier: 31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2
Certificate issuer:       /CN=A91F7C06/serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
Manifest number:          1C
Signing time:             Thu 05 Mar 2026 07:45:35 +0000
Manifest this update:     Thu 05 Mar 2026 07:45:34 +0000
Manifest next update:     Thu 12 Mar 2026 07:45:34 +0000
Files and hashes:         1: MYH5m8WFngRexECQnaM0uPSdFtI.crl (hash: xNUkI9K3tZFbQUaZd000lDfXFTkBqsd1Sd0x+VRUpMQ=)
                          2: F2229F54F6BD11F09D68ADA04A6F56BC.roa (hash: GPBxzgkKMaaG3/PAbiTitYUtRx+LwfxYpF4stDa35Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 07:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C06, serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
        Validity
            Not Before: Mar  5 07:45:34 2026 GMT
            Not After : Mar 12 07:45:34 2026 GMT
        Subject: CN=69a9349f-1180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:02:1a:2e:2a:f8:4d:a0:0e:13:21:34:f7:
                    bb:43:1d:8c:e9:0c:66:11:29:78:3d:ee:eb:28:2d:
                    73:6b:12:cd:d2:e8:dc:55:70:f3:fe:f1:32:63:0b:
                    54:87:b5:09:2c:33:cb:91:a3:37:6f:c2:f7:56:2e:
                    32:a7:1b:68:2f:1b:af:4a:d3:c2:a9:85:0c:0a:eb:
                    28:93:d5:1e:a7:0b:5c:6a:6a:12:66:78:0b:f9:4f:
                    86:a2:50:44:83:6f:62:f2:e7:81:e3:a5:f1:0d:fe:
                    7b:33:1c:02:6d:bf:e1:5d:8a:3a:4e:cd:75:c1:6f:
                    9a:1f:1d:ec:b0:97:5e:da:92:e6:d4:3f:57:c9:e4:
                    4f:30:ad:23:46:0d:82:a5:f2:02:28:a8:65:39:ee:
                    fb:08:6b:9f:c7:e3:9f:9d:63:46:1f:db:c2:c5:0b:
                    51:0d:27:0f:6d:72:d4:e7:f5:0c:1e:26:56:6c:19:
                    43:e1:27:68:78:8d:69:85:7c:4c:d2:70:9b:48:7f:
                    d6:c1:db:be:df:8b:75:41:4e:a2:db:db:29:3a:42:
                    bf:b7:4a:76:e9:c6:f5:19:7a:19:b3:77:c4:bf:0c:
                    a7:43:78:99:41:fb:02:6c:d7:d5:2b:19:cb:09:5d:
                    a9:e3:45:7f:50:1f:d7:6d:5b:6b:e8:76:3e:96:b9:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:31:37:F3:B8:B8:1A:34:07:C1:CE:97:E0:D2:E0:FA:F1:B7:D0:90
            X509v3 Authority Key Identifier:
                keyid:31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ee:b6:fa:86:4d:c7:10:91:cb:d3:28:c8:c5:cf:75:02:8c:
         f0:6e:5f:75:63:31:d3:b1:33:89:be:71:bf:9e:b5:32:e1:cc:
         6e:07:ef:d4:39:65:bc:f4:a1:22:82:35:47:77:9b:12:d4:7d:
         04:6d:4a:57:10:24:3b:cf:7a:bd:e6:62:32:e2:63:19:36:e9:
         1f:15:58:9f:fa:a7:32:82:1e:fe:0d:dd:07:63:93:4a:3b:40:
         c3:59:2a:d2:21:e7:62:b1:a6:74:1c:cf:78:a8:69:ab:23:9e:
         3c:c9:8e:a0:38:da:b5:fa:2f:ea:cb:2f:b5:6c:48:0a:89:87:
         6d:b2:12:b0:bc:73:36:33:bd:cf:62:09:41:1d:af:9a:1c:50:
         92:c3:c0:35:df:29:9f:68:dc:cd:65:90:2a:56:0e:26:c1:78:
         e5:e5:ab:8f:61:a8:f6:ba:d6:ad:df:92:14:a2:c8:90:64:d4:
         8b:be:b9:05:1f:f8:06:bf:40:ca:95:9c:bb:78:02:7a:14:d3:
         e5:4b:b5:35:73:7c:78:29:97:2e:40:ec:dc:33:09:7d:53:d8:
         33:e1:c9:c9:8d:2e:bd:8d:24:1e:48:48:a2:c6:78:23:b9:53:
         b5:0c:40:84:d0:cd:92:9d:03:3a:7a:f2:f0:57:fb:36:76:56:
         4d:b2:50:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:23:24 2026 by rpki-client