Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
File:                     nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json)
Hash identifier:          DmMwZNbdh4SiEjufevnPrAS4tCmNjCXl++OeEGRGDfY=
Subject key identifier:   E0:16:50:CD:A4:1E:FD:91:57:16:D5:D3:19:3E:3C:61:20:28:C9:A6
Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
Certificate issuer:       /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
Manifest number:          013C
Signing time:             Sun 01 Mar 2026 06:19:17 +0000
Manifest this update:     Sun 01 Mar 2026 06:19:17 +0000
Manifest next update:     Sun 08 Mar 2026 06:19:17 +0000
Files and hashes:         1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: 77jav0/dt53r7BxTJpdaX19LaaKaV0ELUlqdKWpriS0=)
                          2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
                          rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
        Validity
            Not Before: Mar  1 06:19:17 2026 GMT
            Not After : Mar  8 06:19:17 2026 GMT
        Subject: CN=69a3da65-2821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:dc:eb:f5:5d:1f:26:60:a1:c5:ee:85:ae:
                    c4:c7:68:8c:9d:ea:4d:28:c3:26:e7:02:df:92:99:
                    ae:b6:1f:cf:6d:d0:bc:a7:b8:4c:da:48:82:fa:47:
                    e9:bf:54:0c:3b:36:57:dd:29:77:47:57:fd:15:32:
                    f4:3b:9c:8f:34:90:96:e4:87:ff:54:ab:3a:0a:7e:
                    5b:27:e8:8f:f6:1a:05:19:06:33:95:f6:04:c3:1a:
                    bb:97:36:73:47:99:08:b4:e4:db:6b:1d:23:b8:6e:
                    ba:9f:12:c9:c7:ad:22:b9:ca:72:07:89:71:a3:98:
                    a2:cd:10:e0:fd:0e:5c:9a:3d:21:cf:0c:48:b6:e2:
                    65:f5:23:d9:54:34:6c:d9:9f:be:3f:06:82:d3:e7:
                    b4:26:b0:a5:f4:8a:14:b4:6b:63:7b:67:09:a6:f1:
                    f4:a0:fa:2f:3b:62:36:79:1f:42:ec:37:4d:54:39:
                    64:22:0f:e6:74:8d:63:6b:95:6a:19:30:f4:04:5e:
                    75:72:22:1b:9b:f2:27:08:e0:ed:13:e8:fc:89:42:
                    74:ea:b6:4b:bc:b7:d2:6d:87:9c:7d:8f:33:60:57:
                    f6:5e:be:21:c7:36:ef:1b:fb:34:f7:97:39:14:8b:
                    c9:18:e4:26:43:79:7c:84:f3:fb:3a:52:46:91:bb:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:16:50:CD:A4:1E:FD:91:57:16:D5:D3:19:3E:3C:61:20:28:C9:A6
            X509v3 Authority Key Identifier:
                keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:1e:e8:4a:66:26:5e:8d:8c:27:ec:ad:16:ab:b6:8f:2b:
         d7:b7:6b:7e:f5:0d:cb:47:e0:45:b8:17:55:bc:1a:d0:12:25:
         3e:bf:e6:a3:d1:8b:9d:8c:59:d6:bd:8d:af:ec:97:11:00:cc:
         57:93:c4:8e:91:13:77:ac:69:01:1d:d9:6d:f4:36:1b:71:97:
         f0:3c:2d:ad:0e:70:2f:8c:7a:f8:dc:96:c2:bc:cf:d1:8b:3b:
         bf:56:36:d6:07:fb:3b:b5:2b:fd:d5:61:10:10:89:ba:77:9e:
         2c:4d:f5:77:bc:30:68:03:d0:42:0f:b6:f5:af:58:86:dd:be:
         87:09:71:ad:57:f5:f9:5f:f1:db:ea:dd:16:a5:73:a0:8b:4e:
         50:43:f4:0f:a6:49:06:ee:b7:ee:0d:e5:78:9c:0a:2b:15:d6:
         9e:c9:be:a0:05:93:53:42:f7:d3:81:0e:a7:3c:2c:db:65:a2:
         db:ba:3b:81:b3:d5:5a:e1:22:1c:a9:b7:9d:99:fe:b2:28:cf:
         d9:a6:42:69:b6:b5:73:4a:95:88:3a:2e:8b:e3:f7:bc:37:88:
         91:b9:ae:bc:ab:2f:d4:0d:88:b0:45:7b:53:d7:56:31:8f:91:
         35:b9:09:c8:d4:c2:77:81:bf:3f:d7:8a:f0:80:dc:01:f3:8f:
         38:03:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:24 2026 by rpki-client